[Touch-packages] [Bug 1384286] Re: add directory allowing scopes and apps to share data
** Changed in: canonical-devices-system-image Status: In Progress => Fix Released -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor-easyprof-ubuntu in Ubuntu. https://bugs.launchpad.net/bugs/1384286 Title: add directory allowing scopes and apps to share data Status in Canonical System Image: Fix Released Status in apparmor-easyprof-ubuntu package in Ubuntu: Fix Released Status in click-reviewers-tools package in Ubuntu: In Progress Status in unity-scopes-api package in Ubuntu: Fix Released Status in apparmor-easyprof-ubuntu source package in Utopic: Won't Fix Status in unity-scopes-api source package in Utopic: Won't Fix Status in apparmor-easyprof-ubuntu source package in Vivid: Fix Released Status in click-reviewers-tools source package in Vivid: In Progress Status in unity-scopes-api source package in Vivid: Fix Released Status in apparmor-easyprof-ubuntu package in Ubuntu RTM: Fix Released Bug description: Summary says it all, just need to decide on the directory. I propose using this rule: # Allow scopes to share data with the app shipped in the same click owner @{HOME}/.local/share/@{APP_PKGNAME}/r, owner @{HOME}/.local/share/@{APP_PKGNAME}/** mrkl, To manage notifications about this bug go to: https://bugs.launchpad.net/canonical-devices-system-image/+bug/1384286/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1384286] Re: add directory allowing scopes and apps to share data
** Changed in: unity-scopes-api (Ubuntu Utopic) Status: New => Won't Fix -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor-easyprof-ubuntu in Ubuntu. https://bugs.launchpad.net/bugs/1384286 Title: add directory allowing scopes and apps to share data Status in Canonical System Image: In Progress Status in apparmor-easyprof-ubuntu package in Ubuntu: Fix Released Status in click-reviewers-tools package in Ubuntu: In Progress Status in unity-scopes-api package in Ubuntu: Fix Released Status in apparmor-easyprof-ubuntu source package in Utopic: Won't Fix Status in unity-scopes-api source package in Utopic: Won't Fix Status in apparmor-easyprof-ubuntu source package in Vivid: Fix Released Status in click-reviewers-tools source package in Vivid: In Progress Status in unity-scopes-api source package in Vivid: Fix Released Status in apparmor-easyprof-ubuntu package in Ubuntu RTM: Fix Released Bug description: Summary says it all, just need to decide on the directory. I propose using this rule: # Allow scopes to share data with the app shipped in the same click owner @{HOME}/.local/share/@{APP_PKGNAME}/r, owner @{HOME}/.local/share/@{APP_PKGNAME}/** mrkl, To manage notifications about this bug go to: https://bugs.launchpad.net/canonical-devices-system-image/+bug/1384286/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1384286] Re: add directory allowing scopes and apps to share data
I have a todo for what needs to happen with CRT. I plan to do an update this/next week that will include this change. -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor-easyprof-ubuntu in Ubuntu. https://bugs.launchpad.net/bugs/1384286 Title: add directory allowing scopes and apps to share data Status in the base for Ubuntu mobile products: In Progress Status in apparmor-easyprof-ubuntu package in Ubuntu: Fix Released Status in click-reviewers-tools package in Ubuntu: In Progress Status in unity-scopes-api package in Ubuntu: Fix Released Status in apparmor-easyprof-ubuntu source package in Utopic: Won't Fix Status in unity-scopes-api source package in Utopic: New Status in apparmor-easyprof-ubuntu source package in Vivid: Fix Released Status in click-reviewers-tools source package in Vivid: In Progress Status in unity-scopes-api source package in Vivid: Fix Released Status in apparmor-easyprof-ubuntu package in Ubuntu RTM: Fix Released Bug description: Summary says it all, just need to decide on the directory. I propose using this rule: # Allow scopes to share data with the app shipped in the same click owner @{HOME}/.local/share/@{APP_PKGNAME}/r, owner @{HOME}/.local/share/@{APP_PKGNAME}/** mrkl, To manage notifications about this bug go to: https://bugs.launchpad.net/canonical-devices-system-image/+bug/1384286/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1384286] Re: add directory allowing scopes and apps to share data
What's still required from a click-reviewers-tools perspective? -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor-easyprof-ubuntu in Ubuntu. https://bugs.launchpad.net/bugs/1384286 Title: add directory allowing scopes and apps to share data Status in the base for Ubuntu mobile products: In Progress Status in apparmor-easyprof-ubuntu package in Ubuntu: Fix Released Status in click-reviewers-tools package in Ubuntu: In Progress Status in unity-scopes-api package in Ubuntu: Fix Released Status in apparmor-easyprof-ubuntu source package in Utopic: Won't Fix Status in unity-scopes-api source package in Utopic: New Status in apparmor-easyprof-ubuntu source package in Vivid: Fix Released Status in click-reviewers-tools source package in Vivid: In Progress Status in unity-scopes-api source package in Vivid: Fix Released Status in apparmor-easyprof-ubuntu package in Ubuntu RTM: Fix Released Bug description: Summary says it all, just need to decide on the directory. I propose using this rule: # Allow scopes to share data with the app shipped in the same click owner @{HOME}/.local/share/@{APP_PKGNAME}/r, owner @{HOME}/.local/share/@{APP_PKGNAME}/** mrkl, To manage notifications about this bug go to: https://bugs.launchpad.net/canonical-devices-system-image/+bug/1384286/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1384286] Re: add directory allowing scopes and apps to share data
** Changed in: apparmor-easyprof-ubuntu (Ubuntu Utopic) Status: In Progress = Won't Fix -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor-easyprof-ubuntu in Ubuntu. https://bugs.launchpad.net/bugs/1384286 Title: add directory allowing scopes and apps to share data Status in the base for Ubuntu mobile products: In Progress Status in apparmor-easyprof-ubuntu package in Ubuntu: Fix Released Status in click-reviewers-tools package in Ubuntu: In Progress Status in unity-scopes-api package in Ubuntu: Fix Released Status in apparmor-easyprof-ubuntu source package in Utopic: Won't Fix Status in unity-scopes-api source package in Utopic: New Status in apparmor-easyprof-ubuntu source package in Vivid: Fix Released Status in click-reviewers-tools source package in Vivid: In Progress Status in unity-scopes-api source package in Vivid: Fix Released Status in apparmor-easyprof-ubuntu package in Ubuntu RTM: Fix Released Bug description: Summary says it all, just need to decide on the directory. I propose using this rule: # Allow scopes to share data with the app shipped in the same click owner @{HOME}/.local/share/@{APP_PKGNAME}/r, owner @{HOME}/.local/share/@{APP_PKGNAME}/** mrkl, To manage notifications about this bug go to: https://bugs.launchpad.net/canonical-devices-system-image/+bug/1384286/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1384286] Re: add directory allowing scopes and apps to share data
** Branch linked: lp:ubuntu/vivid-proposed/apparmor-easyprof-ubuntu -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor-easyprof-ubuntu in Ubuntu. https://bugs.launchpad.net/bugs/1384286 Title: add directory allowing scopes and apps to share data Status in the base for Ubuntu mobile products: In Progress Status in apparmor-easyprof-ubuntu package in Ubuntu: In Progress Status in click-reviewers-tools package in Ubuntu: In Progress Status in unity-scopes-api package in Ubuntu: Fix Released Status in apparmor-easyprof-ubuntu source package in Utopic: In Progress Status in unity-scopes-api source package in Utopic: New Status in apparmor-easyprof-ubuntu source package in Vivid: In Progress Status in click-reviewers-tools source package in Vivid: In Progress Status in unity-scopes-api source package in Vivid: Fix Released Status in apparmor-easyprof-ubuntu package in Ubuntu RTM: Fix Released Bug description: Summary says it all, just need to decide on the directory. I propose using this rule: # Allow scopes to share data with the app shipped in the same click owner @{HOME}/.local/share/@{APP_PKGNAME}/r, owner @{HOME}/.local/share/@{APP_PKGNAME}/** mrkl, To manage notifications about this bug go to: https://bugs.launchpad.net/canonical-devices-system-image/+bug/1384286/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1384286] Re: add directory allowing scopes and apps to share data
This bug was fixed in the package apparmor-easyprof-ubuntu - 1.3.1 --- apparmor-easyprof-ubuntu (1.3.1) vivid; urgency=medium * ubuntu/ubuntu-sdk: - explicitly deny reads on ~/.cache/QML/Apps/ to silence noisy denials. Undo this when LP: 1381620 is fixed in qtdeclarative-opensource-src - explicitly deny dbus bind on name=org.freedesktop.Application since it is noisy. Undo this when LP: 1378823 is fixed in ubuntu-ui-toolkit * ubuntu/1.3/ubuntu-sdk: drop html5-container policy. html5 apps should use webapp-container and specify the 'webview' policy group with 1.3 (15.04) policy (LP: #1392461) * ubuntu/ubuntu-scope-network, pending/ubuntu-scope-local-content: allow scopes to read data from the apps data dir (LP: #1384286) * adjust all dbus rules to use peer=(label=unconfined) to prevent coordinated communications between apps over DBus (LP: #1383824) * ubuntu/{music,pictures,video}_files*: allow access to global SD card directories (LP: #1391930) * debian/control: Depends on apparmor = 2.8.98-0ubuntu2~ for the dbus peer changes (we need at least apparmor_parser 2.9.beta4 for these) -- Jamie Strandboge ja...@ubuntu.com Mon, 15 Dec 2014 15:53:32 + ** Changed in: apparmor-easyprof-ubuntu (Ubuntu Vivid) Status: In Progress = Fix Released -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor-easyprof-ubuntu in Ubuntu. https://bugs.launchpad.net/bugs/1384286 Title: add directory allowing scopes and apps to share data Status in the base for Ubuntu mobile products: In Progress Status in apparmor-easyprof-ubuntu package in Ubuntu: Fix Released Status in click-reviewers-tools package in Ubuntu: In Progress Status in unity-scopes-api package in Ubuntu: Fix Released Status in apparmor-easyprof-ubuntu source package in Utopic: In Progress Status in unity-scopes-api source package in Utopic: New Status in apparmor-easyprof-ubuntu source package in Vivid: Fix Released Status in click-reviewers-tools source package in Vivid: In Progress Status in unity-scopes-api source package in Vivid: Fix Released Status in apparmor-easyprof-ubuntu package in Ubuntu RTM: Fix Released Bug description: Summary says it all, just need to decide on the directory. I propose using this rule: # Allow scopes to share data with the app shipped in the same click owner @{HOME}/.local/share/@{APP_PKGNAME}/r, owner @{HOME}/.local/share/@{APP_PKGNAME}/** mrkl, To manage notifications about this bug go to: https://bugs.launchpad.net/canonical-devices-system-image/+bug/1384286/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1384286] Re: add directory allowing scopes and apps to share data
** Changed in: canonical-devices-system-image Status: New = In Progress -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor-easyprof-ubuntu in Ubuntu. https://bugs.launchpad.net/bugs/1384286 Title: add directory allowing scopes and apps to share data Status in the base for Ubuntu mobile products: In Progress Status in apparmor-easyprof-ubuntu package in Ubuntu: In Progress Status in click-reviewers-tools package in Ubuntu: In Progress Status in unity-scopes-api package in Ubuntu: Fix Released Status in apparmor-easyprof-ubuntu source package in Utopic: In Progress Status in unity-scopes-api source package in Utopic: New Status in apparmor-easyprof-ubuntu source package in Vivid: In Progress Status in click-reviewers-tools source package in Vivid: In Progress Status in unity-scopes-api source package in Vivid: Fix Released Status in apparmor-easyprof-ubuntu package in Ubuntu RTM: Fix Released Bug description: Summary says it all, just need to decide on the directory. I propose using this rule: # Allow scopes to share data with the app shipped in the same click owner @{HOME}/.local/share/@{APP_PKGNAME}/r, owner @{HOME}/.local/share/@{APP_PKGNAME}/** mrkl, To manage notifications about this bug go to: https://bugs.launchpad.net/canonical-devices-system-image/+bug/1384286/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1384286] Re: add directory allowing scopes and apps to share data
** Changed in: unity-scopes-api (Ubuntu Vivid) Status: Fix Committed = Fix Released -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor-easyprof-ubuntu in Ubuntu. https://bugs.launchpad.net/bugs/1384286 Title: add directory allowing scopes and apps to share data Status in the base for Ubuntu mobile products: New Status in apparmor-easyprof-ubuntu package in Ubuntu: In Progress Status in click-reviewers-tools package in Ubuntu: In Progress Status in unity-scopes-api package in Ubuntu: Fix Released Status in apparmor-easyprof-ubuntu source package in Utopic: In Progress Status in unity-scopes-api source package in Utopic: New Status in apparmor-easyprof-ubuntu source package in Vivid: In Progress Status in click-reviewers-tools source package in Vivid: In Progress Status in unity-scopes-api source package in Vivid: Fix Released Status in apparmor-easyprof-ubuntu package in Ubuntu RTM: Fix Released Bug description: Summary says it all, just need to decide on the directory. I propose using this rule: # Allow scopes to share data with the app shipped in the same click owner @{HOME}/.local/share/@{APP_PKGNAME}/r, owner @{HOME}/.local/share/@{APP_PKGNAME}/** mrkl, To manage notifications about this bug go to: https://bugs.launchpad.net/canonical-devices-system-image/+bug/1384286/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1384286] Re: add directory allowing scopes and apps to share data
** Also affects: canonical-devices-system-image Importance: Undecided Status: New -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor-easyprof-ubuntu in Ubuntu. https://bugs.launchpad.net/bugs/1384286 Title: add directory allowing scopes and apps to share data Status in the base for Ubuntu mobile products: New Status in apparmor-easyprof-ubuntu package in Ubuntu: In Progress Status in click-reviewers-tools package in Ubuntu: In Progress Status in unity-scopes-api package in Ubuntu: Fix Committed Status in apparmor-easyprof-ubuntu source package in Utopic: In Progress Status in unity-scopes-api source package in Utopic: New Status in apparmor-easyprof-ubuntu source package in Vivid: In Progress Status in click-reviewers-tools source package in Vivid: In Progress Status in unity-scopes-api source package in Vivid: Fix Committed Status in apparmor-easyprof-ubuntu package in Ubuntu RTM: Fix Released Bug description: Summary says it all, just need to decide on the directory. I propose using this rule: # Allow scopes to share data with the app shipped in the same click owner @{HOME}/.local/share/@{APP_PKGNAME}/r, owner @{HOME}/.local/share/@{APP_PKGNAME}/** mrkl, To manage notifications about this bug go to: https://bugs.launchpad.net/canonical-devices-system-image/+bug/1384286/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1384286] Re: add directory allowing scopes and apps to share data
This is in rtm silo 002. ** Changed in: apparmor-easyprof-ubuntu (Ubuntu Utopic) Assignee: (unassigned) = Jamie Strandboge (jdstrand) ** Changed in: apparmor-easyprof-ubuntu (Ubuntu RTM) Status: New = Fix Committed -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor-easyprof-ubuntu in Ubuntu. https://bugs.launchpad.net/bugs/1384286 Title: add directory allowing scopes and apps to share data Status in “apparmor-easyprof-ubuntu” package in Ubuntu: In Progress Status in “click-reviewers-tools” package in Ubuntu: In Progress Status in “unity-scopes-api” package in Ubuntu: Fix Committed Status in “apparmor-easyprof-ubuntu” source package in Utopic: In Progress Status in “click-reviewers-tools” source package in Utopic: New Status in “unity-scopes-api” source package in Utopic: New Status in “apparmor-easyprof-ubuntu” source package in Vivid: In Progress Status in “click-reviewers-tools” source package in Vivid: In Progress Status in “unity-scopes-api” source package in Vivid: Fix Committed Status in “apparmor-easyprof-ubuntu” package in Ubuntu RTM: Fix Committed Bug description: Summary says it all, just need to decide on the directory. I propose using this rule: # Allow scopes to share data with the app shipped in the same click owner @{HOME}/.local/share/@{APP_PKGNAME}/r, owner @{HOME}/.local/share/@{APP_PKGNAME}/** mrkl, To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apparmor-easyprof-ubuntu/+bug/1384286/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1384286] Re: add directory allowing scopes and apps to share data
This bug was fixed in the package apparmor-easyprof-ubuntu - 1.2.39 --- apparmor-easyprof-ubuntu (1.2.39) utopic; urgency=medium * ubuntu/{music,pictures,video}_files*: allow access to global SD card directories (LP: #1391930) * ubuntu/ubuntu-scope-network, pending/ubuntu-scope-local-content: allow scopes to read data from the apps data dir (LP: #1384286) -- Jamie Strandboge ja...@ubuntu.com Thu, 13 Nov 2014 09:54:18 -0600 ** Changed in: apparmor-easyprof-ubuntu (Ubuntu RTM) Status: Fix Committed = Fix Released -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor-easyprof-ubuntu in Ubuntu. https://bugs.launchpad.net/bugs/1384286 Title: add directory allowing scopes and apps to share data Status in “apparmor-easyprof-ubuntu” package in Ubuntu: In Progress Status in “click-reviewers-tools” package in Ubuntu: In Progress Status in “unity-scopes-api” package in Ubuntu: Fix Committed Status in “apparmor-easyprof-ubuntu” source package in Utopic: In Progress Status in “unity-scopes-api” source package in Utopic: New Status in “apparmor-easyprof-ubuntu” source package in Vivid: In Progress Status in “click-reviewers-tools” source package in Vivid: In Progress Status in “unity-scopes-api” source package in Vivid: Fix Committed Status in “apparmor-easyprof-ubuntu” package in Ubuntu RTM: Fix Released Bug description: Summary says it all, just need to decide on the directory. I propose using this rule: # Allow scopes to share data with the app shipped in the same click owner @{HOME}/.local/share/@{APP_PKGNAME}/r, owner @{HOME}/.local/share/@{APP_PKGNAME}/** mrkl, To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apparmor-easyprof-ubuntu/+bug/1384286/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1384286] Re: add directory allowing scopes and apps to share data
** Tags removed: ota-1 ** Also affects: apparmor-easyprof-ubuntu (Ubuntu RTM) Importance: Undecided Status: New ** Changed in: apparmor-easyprof-ubuntu (Ubuntu RTM) Importance: Undecided = Wishlist ** Changed in: apparmor-easyprof-ubuntu (Ubuntu RTM) Status: New = In Progress ** Also affects: apparmor-easyprof-ubuntu (Ubuntu Vivid) Importance: High Assignee: Jamie Strandboge (jdstrand) Status: In Progress ** Also affects: click-reviewers-tools (Ubuntu Vivid) Importance: High Assignee: Jamie Strandboge (jdstrand) Status: In Progress ** Also affects: unity-scopes-api (Ubuntu Vivid) Importance: High Assignee: Michi Henning (michihenning) Status: Fix Committed ** Also affects: apparmor-easyprof-ubuntu (Ubuntu Utopic) Importance: Undecided Status: New ** Also affects: click-reviewers-tools (Ubuntu Utopic) Importance: Undecided Status: New ** Also affects: unity-scopes-api (Ubuntu Utopic) Importance: Undecided Status: New ** Changed in: apparmor-easyprof-ubuntu (Ubuntu Utopic) Importance: Undecided = High ** Changed in: apparmor-easyprof-ubuntu (Ubuntu Utopic) Status: New = In Progress ** Description changed: Summary says it all, just need to decide on the directory. I propose using this rule: # Allow scopes to share data with the app shipped in the same click - owner @{HOME}/.local/share/@{APP_PKGNAME}/rw, - owner @{HOME}/.local/share/@{APP_PKGNAME}/** mrwkl, + owner @{HOME}/.local/share/@{APP_PKGNAME}/r, + owner @{HOME}/.local/share/@{APP_PKGNAME}/** mrkl, -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor-easyprof-ubuntu in Ubuntu. https://bugs.launchpad.net/bugs/1384286 Title: add directory allowing scopes and apps to share data Status in “apparmor-easyprof-ubuntu” package in Ubuntu: In Progress Status in “click-reviewers-tools” package in Ubuntu: In Progress Status in “unity-scopes-api” package in Ubuntu: Fix Committed Status in “apparmor-easyprof-ubuntu” source package in Utopic: In Progress Status in “click-reviewers-tools” source package in Utopic: New Status in “unity-scopes-api” source package in Utopic: New Status in “apparmor-easyprof-ubuntu” source package in Vivid: In Progress Status in “click-reviewers-tools” source package in Vivid: In Progress Status in “unity-scopes-api” source package in Vivid: Fix Committed Status in “apparmor-easyprof-ubuntu” package in Ubuntu RTM: In Progress Bug description: Summary says it all, just need to decide on the directory. I propose using this rule: # Allow scopes to share data with the app shipped in the same click owner @{HOME}/.local/share/@{APP_PKGNAME}/r, owner @{HOME}/.local/share/@{APP_PKGNAME}/** mrkl, To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apparmor-easyprof-ubuntu/+bug/1384286/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1384286] Re: add directory allowing scopes and apps to share data
** Changed in: apparmor-easyprof-ubuntu (Ubuntu RTM) Status: In Progress = New ** Changed in: apparmor-easyprof-ubuntu (Ubuntu RTM) Assignee: (unassigned) = Jamie Strandboge (jdstrand) -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor-easyprof-ubuntu in Ubuntu. https://bugs.launchpad.net/bugs/1384286 Title: add directory allowing scopes and apps to share data Status in “apparmor-easyprof-ubuntu” package in Ubuntu: In Progress Status in “click-reviewers-tools” package in Ubuntu: In Progress Status in “unity-scopes-api” package in Ubuntu: Fix Committed Status in “apparmor-easyprof-ubuntu” source package in Utopic: In Progress Status in “click-reviewers-tools” source package in Utopic: New Status in “unity-scopes-api” source package in Utopic: New Status in “apparmor-easyprof-ubuntu” source package in Vivid: In Progress Status in “click-reviewers-tools” source package in Vivid: In Progress Status in “unity-scopes-api” source package in Vivid: Fix Committed Status in “apparmor-easyprof-ubuntu” package in Ubuntu RTM: New Bug description: Summary says it all, just need to decide on the directory. I propose using this rule: # Allow scopes to share data with the app shipped in the same click owner @{HOME}/.local/share/@{APP_PKGNAME}/r, owner @{HOME}/.local/share/@{APP_PKGNAME}/** mrkl, To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apparmor-easyprof-ubuntu/+bug/1384286/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1384286] Re: add directory allowing scopes and apps to share data
Michi, this is what is currently in the scopes network template as a writable directory: @{HOME}/.local/share/unity-scopes/leaf-net/@{APP_PKGNAME}/* this is the read-only directory I want to add to the scopes network template so scopes can surface data from the app: @{HOME}/.local/share/@{APP_PKGNAME}/* As such, scopes have read access to *both*, but only write access to leaf-net. -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor-easyprof-ubuntu in Ubuntu. https://bugs.launchpad.net/bugs/1384286 Title: add directory allowing scopes and apps to share data Status in “apparmor-easyprof-ubuntu” package in Ubuntu: In Progress Status in “click-reviewers-tools” package in Ubuntu: In Progress Status in “unity-scopes-api” package in Ubuntu: In Progress Bug description: Summary says it all, just need to decide on the directory. I propose using this rule: # Allow scopes to share data with the app shipped in the same click owner @{HOME}/.local/share/@{APP_PKGNAME}/rw, owner @{HOME}/.local/share/@{APP_PKGNAME}/** mrwkl, To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apparmor-easyprof-ubuntu/+bug/1384286/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1384286] Re: add directory allowing scopes and apps to share data
Ah, OK, it seems the penny is finally dropping :-) So, if I understand you correctly, you are saying that @{HOME}/.local/share/unity-scopes/leaf-net/@{APP_PKGNAME}/* is the writable cache directory for the scope (exactly as it is now), and @{HOME}/.local/share/@{APP_PKGNAME}/* is the readable directory where the scope can read data produced by the app? I think we can do this. In practice, this would mean adding an app_directory() method to the scopes API that returns the path to the readable directory that a scope can use to pick up data from the app. There are some doc implications, but it's doable. I take it that the readable directory would not be applicable to scopes that do *not* install together with an app in the same click package? (We would throw an exception if a scope doesn't have an associated app and tries to get the directory name.) Now, if I have this picture correct, it implies that a scope can read from an app, but an app cannot read from a scope. Is that what we want? If so, I think I'm good with this. (I haven't implemented anything yet, so there are the usual caveats. But, off-hand, I don't see a show- stopper.) -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor-easyprof-ubuntu in Ubuntu. https://bugs.launchpad.net/bugs/1384286 Title: add directory allowing scopes and apps to share data Status in “apparmor-easyprof-ubuntu” package in Ubuntu: In Progress Status in “click-reviewers-tools” package in Ubuntu: In Progress Status in “unity-scopes-api” package in Ubuntu: In Progress Bug description: Summary says it all, just need to decide on the directory. I propose using this rule: # Allow scopes to share data with the app shipped in the same click owner @{HOME}/.local/share/@{APP_PKGNAME}/rw, owner @{HOME}/.local/share/@{APP_PKGNAME}/** mrwkl, To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apparmor-easyprof-ubuntu/+bug/1384286/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1384286] Re: add directory allowing scopes and apps to share data
So, if I understand you correctly, you are saying that @{HOME}/.local/share/unity-scopes/leaf-net/@{APP_PKGNAME}/* is the writable cache directory for the scope (exactly as it is now), and @{HOME}/.local/share/@{APP_PKGNAME}/* is the readable directory where the scope can read data produced by the app? Yes I take it that the readable directory would not be applicable to scopes that do *not* install together with an app in the same click package? (We would throw an exception if a scope doesn't have an associated app and tries to get the directory name.) If I understand the question, APP_PKGNAME is unique to the scopes and apps installed by a particular click package. A differently named click package will have a different APP_PKGNAME set, so there is isolation between clicks. This bug only allows scopes and apps within the same click to coordinate with each other. Now, if I have this picture correct, it implies that a scope can read from an app, but an app cannot read from a scope. Is that what we want? If so, I think I'm good with this. (I haven't implemented anything yet, so there are the usual caveats. But, off-hand, I don't see a show- stopper.) This is correct and I think it is what we want. I'm still holding out for the possibility of a local content scope some time down the road and allowing writes to the app dir in a local content scope would allow an app to break out of confinement via this shared dir (of course, we could just not let that scope type coordinate with an app...). Let's go with what I suggested for now, and I will document the thinking in the policy so the thinking isn't lost. -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor-easyprof-ubuntu in Ubuntu. https://bugs.launchpad.net/bugs/1384286 Title: add directory allowing scopes and apps to share data Status in “apparmor-easyprof-ubuntu” package in Ubuntu: In Progress Status in “click-reviewers-tools” package in Ubuntu: In Progress Status in “unity-scopes-api” package in Ubuntu: In Progress Bug description: Summary says it all, just need to decide on the directory. I propose using this rule: # Allow scopes to share data with the app shipped in the same click owner @{HOME}/.local/share/@{APP_PKGNAME}/rw, owner @{HOME}/.local/share/@{APP_PKGNAME}/** mrwkl, To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apparmor-easyprof-ubuntu/+bug/1384286/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1384286] Re: add directory allowing scopes and apps to share data
Sorry for being so dense. I had the wrong mental model because, all along, I assumed that the cache_directory was to be used for sharing, so I was thinking that the proposal was to change the location of the existing cache dir, instead of adding a completely new one. The linked branch should fix this. ** Branch linked: lp:~michihenning/unity-scopes-api/app-directory -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor-easyprof-ubuntu in Ubuntu. https://bugs.launchpad.net/bugs/1384286 Title: add directory allowing scopes and apps to share data Status in “apparmor-easyprof-ubuntu” package in Ubuntu: In Progress Status in “click-reviewers-tools” package in Ubuntu: In Progress Status in “unity-scopes-api” package in Ubuntu: In Progress Bug description: Summary says it all, just need to decide on the directory. I propose using this rule: # Allow scopes to share data with the app shipped in the same click owner @{HOME}/.local/share/@{APP_PKGNAME}/rw, owner @{HOME}/.local/share/@{APP_PKGNAME}/** mrwkl, To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apparmor-easyprof-ubuntu/+bug/1384286/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1384286] Re: add directory allowing scopes and apps to share data
** Changed in: unity-scopes-api (Ubuntu) Status: In Progress = Fix Committed -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor-easyprof-ubuntu in Ubuntu. https://bugs.launchpad.net/bugs/1384286 Title: add directory allowing scopes and apps to share data Status in “apparmor-easyprof-ubuntu” package in Ubuntu: In Progress Status in “click-reviewers-tools” package in Ubuntu: In Progress Status in “unity-scopes-api” package in Ubuntu: Fix Committed Bug description: Summary says it all, just need to decide on the directory. I propose using this rule: # Allow scopes to share data with the app shipped in the same click owner @{HOME}/.local/share/@{APP_PKGNAME}/rw, owner @{HOME}/.local/share/@{APP_PKGNAME}/** mrwkl, To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apparmor-easyprof-ubuntu/+bug/1384286/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1384286] Re: add directory allowing scopes and apps to share data
Is it OK to drop the leaf-net and unconfined components from the path? Currently, a confined scope relies on being able to create the final path component *itself* by calling mkdir(). So, assuming that ~/.local/share/unity-scopes/leaf-net exists, the scope will try to create ~/.local/share/unity-scopes/leaf-net/@{APP_PKG_NAME}. No. This is important for isolation between scopes if we ever decide to support other scope templates to protect against certain types of attacks via differently versioned apps. ** Also affects: click-reviewers-tools (Ubuntu) Importance: Undecided Status: New ** Changed in: click-reviewers-tools (Ubuntu) Status: New = In Progress ** Changed in: apparmor-easyprof-ubuntu (Ubuntu) Status: Triaged = In Progress ** Changed in: click-reviewers-tools (Ubuntu) Importance: Undecided = High ** Changed in: click-reviewers-tools (Ubuntu) Assignee: (unassigned) = Jamie Strandboge (jdstrand) -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor-easyprof-ubuntu in Ubuntu. https://bugs.launchpad.net/bugs/1384286 Title: add directory allowing scopes and apps to share data Status in “apparmor-easyprof-ubuntu” package in Ubuntu: In Progress Status in “click-reviewers-tools” package in Ubuntu: In Progress Bug description: Summary says it all, just need to decide on the directory. I propose using this rule: # Allow scopes to share data with the app shipped in the same click owner @{HOME}/.local/share/@{APP_PKGNAME}/rw, owner @{HOME}/.local/share/@{APP_PKGNAME}/** mrwkl, To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apparmor-easyprof-ubuntu/+bug/1384286/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1384286] Re: add directory allowing scopes and apps to share data
I've added a click-reviewers-tools task to handle this from the scopes confinement specification: Because scopes share application data with apps shipped in the same click, reviewers must be careful if the click package contains any permissions that triggers a manual review (permissions that pass the automatic checks are considered safe). Eg, if the app has wide filesystem permissions but no networking and the scope has networking but no filesystem permissions, then the app can make data from the system available to the scope and so it could send it out over the network. -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor-easyprof-ubuntu in Ubuntu. https://bugs.launchpad.net/bugs/1384286 Title: add directory allowing scopes and apps to share data Status in “apparmor-easyprof-ubuntu” package in Ubuntu: In Progress Status in “click-reviewers-tools” package in Ubuntu: In Progress Bug description: Summary says it all, just need to decide on the directory. I propose using this rule: # Allow scopes to share data with the app shipped in the same click owner @{HOME}/.local/share/@{APP_PKGNAME}/rw, owner @{HOME}/.local/share/@{APP_PKGNAME}/** mrwkl, To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apparmor-easyprof-ubuntu/+bug/1384286/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1384286] Re: add directory allowing scopes and apps to share data
Ok, so, let's clear the terminology up a little. All click packages are installed in /opt (this is what Christian was talking about). However, those packages (whether they by apps or scopes) aren't available to the user until the user hooks are run, which creates symlinks in $HOME to the things in /opt (this is what Michi was talking about). Then there are the writable areas that apps and scopes have (this is what mardy and michi were talking about). Note, within the apparmor policy, @{APP_PKGNAME} refers to the 'name' field from the click manifest. Scopes writable non-volatile areas (ie, not in /run) are: (unconfined) @{HOME}/.local/share/unity-scopes/unconfined/@{APP_PKGNAME}/* (confined network scope) @{HOME}/.local/share/unity-scopes/leaf-net/@{APP_PKGNAME}/* Whereas apps writable non-volatile areas (excluding the QML cache directory) are: @{HOME}/.cache/@{APP_PKGNAME}/* @{HOME}/.config/@{APP_PKGNAME}/* @{HOME}/.local/share/@{APP_PKGNAME}/* Also note, we already have a precedent for sharing between apps shipped in the same click: push helpers. Push helpers writable non-volatile areas are the same as for apps: @{HOME}/.cache/@{APP_PKGNAME}/* @{HOME}/.config/@{APP_PKGNAME}/* @{HOME}/.local/share/@{APP_PKGNAME}/* Michi, my understanding was this would be perhaps a new API call, not something that you would change on your end, but that is an implementation detail and I can see arguments on either side. Since Michi said he doesn't care where the directory is and we have a precedent for data sharing already and it seems to make the most sense for scopes to surface the data in an app rather than the other way around, I am going to add this to the ubuntu-scope-network template: # Allow scopes to share data with the app shipped in the same click owner @{HOME}/.local/share/@{APP_PKGNAME}/ rw, owner @{HOME}/.local/share/@{APP_PKGNAME}/** mrwkl, ** Changed in: apparmor-easyprof-ubuntu (Ubuntu) Assignee: Michi Henning (michihenning) = (unassigned) ** Changed in: apparmor-easyprof-ubuntu (Ubuntu) Status: Confirmed = Triaged ** Changed in: apparmor-easyprof-ubuntu (Ubuntu) Assignee: (unassigned) = Jamie Strandboge (jdstrand) -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor-easyprof-ubuntu in Ubuntu. https://bugs.launchpad.net/bugs/1384286 Title: add directory allowing scopes and apps to share data Status in “apparmor-easyprof-ubuntu” package in Ubuntu: In Progress Status in “click-reviewers-tools” package in Ubuntu: In Progress Bug description: Summary says it all, just need to decide on the directory. I propose using this rule: # Allow scopes to share data with the app shipped in the same click owner @{HOME}/.local/share/@{APP_PKGNAME}/rw, owner @{HOME}/.local/share/@{APP_PKGNAME}/** mrwkl, To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apparmor-easyprof-ubuntu/+bug/1384286/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1384286] Re: add directory allowing scopes and apps to share data
Actually, I think I'd prefer this, unless there is a really compelling otherwise (ie, read-only): # Allow scopes to share data with the app shipped in the same click owner @{HOME}/.local/share/@{APP_PKGNAME}/ r, owner @{HOME}/.local/share/@{APP_PKGNAME}/** mrkl, -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor-easyprof-ubuntu in Ubuntu. https://bugs.launchpad.net/bugs/1384286 Title: add directory allowing scopes and apps to share data Status in “apparmor-easyprof-ubuntu” package in Ubuntu: In Progress Status in “click-reviewers-tools” package in Ubuntu: In Progress Bug description: Summary says it all, just need to decide on the directory. I propose using this rule: # Allow scopes to share data with the app shipped in the same click owner @{HOME}/.local/share/@{APP_PKGNAME}/rw, owner @{HOME}/.local/share/@{APP_PKGNAME}/** mrwkl, To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apparmor-easyprof-ubuntu/+bug/1384286/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1384286] Re: add directory allowing scopes and apps to share data
** Also affects: unity-scopes-api (Ubuntu) Importance: Undecided Status: New ** Changed in: unity-scopes-api (Ubuntu) Assignee: (unassigned) = Michi Henning (michihenning) ** Changed in: unity-scopes-api (Ubuntu) Status: New = In Progress ** Changed in: unity-scopes-api (Ubuntu) Importance: Undecided = High -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor-easyprof-ubuntu in Ubuntu. https://bugs.launchpad.net/bugs/1384286 Title: add directory allowing scopes and apps to share data Status in “apparmor-easyprof-ubuntu” package in Ubuntu: In Progress Status in “click-reviewers-tools” package in Ubuntu: In Progress Status in “unity-scopes-api” package in Ubuntu: In Progress Bug description: Summary says it all, just need to decide on the directory. I propose using this rule: # Allow scopes to share data with the app shipped in the same click owner @{HOME}/.local/share/@{APP_PKGNAME}/rw, owner @{HOME}/.local/share/@{APP_PKGNAME}/** mrwkl, To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apparmor-easyprof-ubuntu/+bug/1384286/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1384286] Re: add directory allowing scopes and apps to share data
Actually, I think I'd prefer this, unless there is a really compelling otherwise (ie, read-only): # Allow scopes to share data with the app shipped in the same click owner @{HOME}/.local/share/@{APP_PKGNAME}/ r, owner @{HOME}/.local/share/@{APP_PKGNAME}/** mrkl, Just double-checking here... Earlier, in comment #9, you said that we couldn't drop the leaf-net and unconfined directories, but your suggestion does drop these. -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor-easyprof-ubuntu in Ubuntu. https://bugs.launchpad.net/bugs/1384286 Title: add directory allowing scopes and apps to share data Status in “apparmor-easyprof-ubuntu” package in Ubuntu: In Progress Status in “click-reviewers-tools” package in Ubuntu: In Progress Status in “unity-scopes-api” package in Ubuntu: In Progress Bug description: Summary says it all, just need to decide on the directory. I propose using this rule: # Allow scopes to share data with the app shipped in the same click owner @{HOME}/.local/share/@{APP_PKGNAME}/rw, owner @{HOME}/.local/share/@{APP_PKGNAME}/** mrwkl, To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apparmor-easyprof-ubuntu/+bug/1384286/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1384286] Re: add directory allowing scopes and apps to share data
Just to follow up on mardy's suggestion about sharing the cache directory. On the Reminders app we're integrating the scope and app, and the notes and their thumbnails are stored under the cache dir, which would be ideal to share. In this particular case, it might not apply, as we're shipping the scope and the app in the same click, though, so I understand they should both be able to access the cache data. -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor-easyprof-ubuntu in Ubuntu. https://bugs.launchpad.net/bugs/1384286 Title: add directory allowing scopes and apps to share data Status in “apparmor-easyprof-ubuntu” package in Ubuntu: Confirmed Bug description: Summary says it all, just need to decide on the directory. I propose using this rule: # Allow scopes to share data with the app shipped in the same click owner @{HOME}/.local/share/@{APP_PKGNAME}/rw, owner @{HOME}/.local/share/@{APP_PKGNAME}/** mrwkl, To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apparmor-easyprof-ubuntu/+bug/1384286/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1384286] Re: add directory allowing scopes and apps to share data
As I said, I don't really mind what particular directory is used as the cache directory. I just think it shouldn't be the same as the click scope installation directory. Right now, when you call cache_directory(), you get a path that (as far as I know) should be shared with the app if the scope and the app are in the same click package. Is that actually the case? If not, either the app path or the scope path need to be changed, so they agree. -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor-easyprof-ubuntu in Ubuntu. https://bugs.launchpad.net/bugs/1384286 Title: add directory allowing scopes and apps to share data Status in “apparmor-easyprof-ubuntu” package in Ubuntu: Confirmed Bug description: Summary says it all, just need to decide on the directory. I propose using this rule: # Allow scopes to share data with the app shipped in the same click owner @{HOME}/.local/share/@{APP_PKGNAME}/rw, owner @{HOME}/.local/share/@{APP_PKGNAME}/** mrwkl, To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apparmor-easyprof-ubuntu/+bug/1384286/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1384286] Re: add directory allowing scopes and apps to share data
currently, ~/.local/share/@{APP_PKGNAME} is used as the click *installation* directory There's something mixed up here I think. This is, for apps as well as scopes, where data is stored, wheras installations are in /opt/click.ubuntu.com/ . -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor-easyprof-ubuntu in Ubuntu. https://bugs.launchpad.net/bugs/1384286 Title: add directory allowing scopes and apps to share data Status in “apparmor-easyprof-ubuntu” package in Ubuntu: Confirmed Bug description: Summary says it all, just need to decide on the directory. I propose using this rule: # Allow scopes to share data with the app shipped in the same click owner @{HOME}/.local/share/@{APP_PKGNAME}/rw, owner @{HOME}/.local/share/@{APP_PKGNAME}/** mrwkl, To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apparmor-easyprof-ubuntu/+bug/1384286/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1384286] Re: add directory allowing scopes and apps to share data
Scopes installed from click packages are, as a matter of fact, installed in ~/.local/share/unity-scopes/@{APP_PKGNAME} No scope, no matter where it comes from, is ever installed in /opt/click. If it is, it won't work because the registry won't look for it there. -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor-easyprof-ubuntu in Ubuntu. https://bugs.launchpad.net/bugs/1384286 Title: add directory allowing scopes and apps to share data Status in “apparmor-easyprof-ubuntu” package in Ubuntu: Confirmed Bug description: Summary says it all, just need to decide on the directory. I propose using this rule: # Allow scopes to share data with the app shipped in the same click owner @{HOME}/.local/share/@{APP_PKGNAME}/rw, owner @{HOME}/.local/share/@{APP_PKGNAME}/** mrwkl, To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apparmor-easyprof-ubuntu/+bug/1384286/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1384286] Re: add directory allowing scopes and apps to share data
Assigning to Michi only so he can comment on the proposed path. Please assign back to me if you agree. ** Description changed: - Summary says it all, just need to decide on the directory. + Summary says it all, just need to decide on the directory. I propose using this rule: + # Allow scopes to share data with the app shipped in the same click + owner @{HOME}/.local/share/@{APP_PKGNAME}/rw, + owner @{HOME}/.local/share/@{APP_PKGNAME}/** mrwklix, ** Changed in: apparmor-easyprof-ubuntu (Ubuntu) Assignee: (unassigned) = Michi Henning (michihenning) ** Description changed: Summary says it all, just need to decide on the directory. I propose using this rule: - # Allow scopes to share data with the app shipped in the same click - owner @{HOME}/.local/share/@{APP_PKGNAME}/rw, - owner @{HOME}/.local/share/@{APP_PKGNAME}/** mrwklix, + # Allow scopes to share data with the app shipped in the same click + owner @{HOME}/.local/share/@{APP_PKGNAME}/rw, + owner @{HOME}/.local/share/@{APP_PKGNAME}/** mrwkl, -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor-easyprof-ubuntu in Ubuntu. https://bugs.launchpad.net/bugs/1384286 Title: add directory allowing scopes and apps to share data Status in “apparmor-easyprof-ubuntu” package in Ubuntu: Confirmed Bug description: Summary says it all, just need to decide on the directory. I propose using this rule: # Allow scopes to share data with the app shipped in the same click owner @{HOME}/.local/share/@{APP_PKGNAME}/rw, owner @{HOME}/.local/share/@{APP_PKGNAME}/** mrwkl, To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apparmor-easyprof-ubuntu/+bug/1384286/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1384286] Re: add directory allowing scopes and apps to share data
** Tags added: rtm14 -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor-easyprof-ubuntu in Ubuntu. https://bugs.launchpad.net/bugs/1384286 Title: add directory allowing scopes and apps to share data Status in “apparmor-easyprof-ubuntu” package in Ubuntu: Confirmed Bug description: Summary says it all, just need to decide on the directory. I propose using this rule: # Allow scopes to share data with the app shipped in the same click owner @{HOME}/.local/share/@{APP_PKGNAME}/rw, owner @{HOME}/.local/share/@{APP_PKGNAME}/** mrwkl, To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apparmor-easyprof-ubuntu/+bug/1384286/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1384286] Re: add directory allowing scopes and apps to share data
** Tags added: ota-1 -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor-easyprof-ubuntu in Ubuntu. https://bugs.launchpad.net/bugs/1384286 Title: add directory allowing scopes and apps to share data Status in “apparmor-easyprof-ubuntu” package in Ubuntu: Confirmed Bug description: Summary says it all, just need to decide on the directory. I propose using this rule: # Allow scopes to share data with the app shipped in the same click owner @{HOME}/.local/share/@{APP_PKGNAME}/rw, owner @{HOME}/.local/share/@{APP_PKGNAME}/** mrwkl, To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apparmor-easyprof-ubuntu/+bug/1384286/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1384286] Re: add directory allowing scopes and apps to share data
I'm agnostic as to the exact location. We just need to agree :-) Currently, it is: ~/.local/share/unity-scopes/unconfined/@{APP_PKG_NAME} for unconfined scopes, and ~/.local/share/unity-scopes/leaf- net/@{APP_PKG_NAME} for confined scopes. I can change this easily enough. However, currently, ~/.local/share/@{APP_PKGNAME} is used as the click *installation* directory. That is the directory where the click package installs the scope's .so and .ini file. For data sharing between the application and the scope, I take it that we are talking about the *cache* directory? It doesn't seem a good idea to use the same directory for both installation files from the click package, and data files that are created by the scope and/or the application, so I think the install dir and the cache dir should be different locations (but the new location you suggest is the same as the current click installation location). Is it OK to drop the leaf-net and unconfined components from the path? Currently, a confined scope relies on being able to create the final path component *itself* by calling mkdir(). So, assuming that ~/.local/share/unity-scopes/leaf-net exists, the scope will try to create ~/.local/share/unity-scopes/leaf-net/@{APP_PKG_NAME}. -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor-easyprof-ubuntu in Ubuntu. https://bugs.launchpad.net/bugs/1384286 Title: add directory allowing scopes and apps to share data Status in “apparmor-easyprof-ubuntu” package in Ubuntu: Confirmed Bug description: Summary says it all, just need to decide on the directory. I propose using this rule: # Allow scopes to share data with the app shipped in the same click owner @{HOME}/.local/share/@{APP_PKGNAME}/rw, owner @{HOME}/.local/share/@{APP_PKGNAME}/** mrwkl, To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apparmor-easyprof-ubuntu/+bug/1384286/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1384286] Re: add directory allowing scopes and apps to share data
The cache (~/.cache/) directory is not equivalent to the data directory (~/.local/share/), because it's meant for volatile data which could be deleted at any time, and which can be recreated later. So, you wouldn't use it for storing user-generated content such as drawings or documents, because they could get lost. On the other hand, I like the suggestion of sharing the cache directory as well, because that could be used for image thumbnails, which could be shared between an app and a scope. It may also be that the application and the scope want to share some configuration values, so I'd suggest sharing the config directory as well. :-) -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor-easyprof-ubuntu in Ubuntu. https://bugs.launchpad.net/bugs/1384286 Title: add directory allowing scopes and apps to share data Status in “apparmor-easyprof-ubuntu” package in Ubuntu: Confirmed Bug description: Summary says it all, just need to decide on the directory. I propose using this rule: # Allow scopes to share data with the app shipped in the same click owner @{HOME}/.local/share/@{APP_PKGNAME}/rw, owner @{HOME}/.local/share/@{APP_PKGNAME}/** mrwkl, To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apparmor-easyprof-ubuntu/+bug/1384286/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp