This bug was fixed in the package lightdm - 1.8.4-0ubuntu1
---
lightdm (1.8.4-0ubuntu1) saucy-security; urgency=low
[ Marc Deslauriers ]
* SECURITY UPDATE: improper guest account confinement (LP: #1243339)
- CVE-2013-4459
[ Robert Ancell ]
* New upstream release:
- Im
** Changed in: lightdm/1.8
Milestone: None => 1.8.4
** Changed in: lightdm/1.8
Status: In Progress => Fix Released
** Changed in: lightdm
Status: Fix Committed => Fix Released
** Description changed:
- Till 13.04 guest couldn't access home directory. In 13.10 guests can
- read
** Branch linked: lp:lightdm/1.8
--
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to lightdm in Ubuntu.
https://bugs.launchpad.net/bugs/1243339
Title:
lightdm no longer runs guest session through wrapper
Status in Light Display Manager:
This bug was fixed in the package lightdm - 1.9.2-0ubuntu1
---
lightdm (1.9.2-0ubuntu1) trusty; urgency=low
* New upstream release:
- Implement missing guest-wrapper functionality and enable it for Ubuntu.
- Update AppArmor scripts to work in Ubuntu 13.10.
(LP: #124333
** Branch linked: lp:ubuntu/trusty-proposed/lightdm
--
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to lightdm in Ubuntu.
https://bugs.launchpad.net/bugs/1243339
Title:
lightdm no longer runs guest session through wrapper
Status in Light
** Changed in: lightdm/1.8
Status: Triaged => In Progress
** Changed in: lightdm (Ubuntu Trusty)
Status: Triaged => In Progress
** Changed in: lightdm (Ubuntu Saucy)
Status: Triaged => In Progress
** Changed in: lightdm/1.9
Status: Fix Committed => Fix Released
** Ch
** Also affects: lightdm/1.8
Importance: Undecided
Status: New
** Also affects: lightdm/1.9
Importance: Undecided
Status: New
** Changed in: lightdm/1.9
Assignee: (unassigned) => Robert Ancell (robert-ancell)
** Changed in: lightdm/1.8
Assignee: (unassigned) => Robe
Fix committed into lp:lightdm at revision 1832, scheduled for release in
lightdm, milestone Unknown
** Changed in: lightdm
Status: In Progress => Fix Committed
--
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to lightdm in Ubuntu.
htt
Le 29/10/2013 10:04, Robert Ancell a écrit :
> That should be lp:~robert-ancell/lightdm/guest-wrapper, not lp:lightdm
Ok, will try that one
--
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to lightdm in Ubuntu.
https://bugs.launchpad.net/bugs
That should be lp:~robert-ancell/lightdm/guest-wrapper, not lp:lightdm
--
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to lightdm in Ubuntu.
https://bugs.launchpad.net/bugs/1243339
Title:
lightdm no longer runs guest session through wrapp
David Barth - can you confirm remote logins work in 13.10 with
lp:lightdm?
--
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to lightdm in Ubuntu.
https://bugs.launchpad.net/bugs/1243339
Title:
lightdm no longer runs guest session through w
I manually tested the guest session by viewing pages in firefox and
chromium-browser, opening libreoffice, printing to a PDF, and viewing
the PDF with evince.
I'm not sure how to test the remote sessions. Is that something you
could do, Robert?
--
You received this bug notification because you a
I pushed my branch with the AppArmor changes to lp:~tyhicks/lightdm
/guest-wrapper-with-apparmor-changes and proposed a merge into Robert's
branch.
--
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to lightdm in Ubuntu.
https://bugs.launchpad.
The AppArmor abstraction needs some updates due to AppArmor mediation
changes that happened in Saucy. I need to do a little more testing with
the policy changes and then I'll push an updated branch.
--
You received this bug notification because you are a member of Desktop
Packages, which is subsc
I have the guest wrapper working in lp:~robert-ancell/lightdm/guest-
wrapper but Unity fails to start. Perhaps the AppArmor rule need
updating too...
--
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to lightdm in Ubuntu.
https://bugs.launchpa
** Branch linked: lp:~robert-ancell/lightdm/guest-wrapper
--
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to lightdm in Ubuntu.
https://bugs.launchpad.net/bugs/1243339
Title:
lightdm no longer runs guest session through wrapper
Status in
Argh, no the intention is to have this configurable. On closer
inspection this wasn't implemented. Branch in progress...
** Changed in: lightdm
Importance: Undecided => High
** Changed in: lightdm
Status: Confirmed => In Progress
--
You received this bug notification because you are a
This is due to a change in lightdm 1.7.5 - the guest wrapper is now
configurable and the Ubuntu package was not setting it.
The solution is to add a file into /etc/lightdm/lightdm.conf.d to set
this, i.e.:
$ bzr diff
=== added file 'debian/50-guest-wrapper.conf'
--- debian/50-guest-wrapper.conf
Note that disable-guest-wrapper is no longer supported or required -
this was needed when the guest wrapper was hard-coded into LightDM. Now
it is configurable the tests can run without this option.
--
You received this bug notification because you are a member of Desktop
Packages, which is subsc
bug 1243801 is likely a side effect for the lack of dbus permissions in
the AppArmor profile.
--
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to lightdm in Ubuntu.
https://bugs.launchpad.net/bugs/1243339
Title:
lightdm no longer runs gues
This is CVE-2013-4459
** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2013-4459
--
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to lightdm in Ubuntu.
https://bugs.launchpad.net/bugs/1243339
Title:
lightdm no longer runs
I think the approach here is correct for now, especially for this
security update-- get the guest account confined with apparmor without
dbus mediation (and remember the system bus will have policykit in
effect too). This is what we did for other applications in Ubuntu in
13.10; we can examine more
I don't believe you can actually run a desktop without accessing the
system bus.
--
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to lightdm in Ubuntu.
https://bugs.launchpad.net/bugs/1243339
Title:
lightdm no longer runs guest session thr
I was wondering if we even wanted to grant access to the system bus from
the confined guest account -- why not just session and accessibility?
Thanks
--
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to lightdm in Ubuntu.
https://bugs.launchp
24 matches
Mail list logo
