[Desktop-packages] [Bug 900324] Re: apparmor profile provides too much access

2012-08-03 Thread John McCabe-Dansted
Unfortunately, evince needs access to the X server. Since apparmor doesn't yet support XACE or equivalent this means that evince can still launch keylogging and keyspoofing attacks. I think our first priority should be stopping evince from sending keypresses to a terminal in the background (which

[Desktop-packages] [Bug 900324] Re: apparmor profile provides too much access

2011-12-07 Thread Jamie Strandboge
Why is it that difficult to understand that I do not ask you to make ubuntu more tight, but to split the configuration into two parts to allow users to make it more tight if they want without breaking the package updates? Ok, so this is a 3rd separate bug report in addition to the other two: not