[Touch-packages] [Bug 1384286] Re: add directory allowing scopes and apps to share data

2015-10-22 Thread Pat McGowan
** Changed in: canonical-devices-system-image
   Status: In Progress => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor-easyprof-ubuntu
in Ubuntu.
https://bugs.launchpad.net/bugs/1384286

Title:
  add directory allowing scopes and apps to share data

Status in Canonical System Image:
  Fix Released
Status in apparmor-easyprof-ubuntu package in Ubuntu:
  Fix Released
Status in click-reviewers-tools package in Ubuntu:
  In Progress
Status in unity-scopes-api package in Ubuntu:
  Fix Released
Status in apparmor-easyprof-ubuntu source package in Utopic:
  Won't Fix
Status in unity-scopes-api source package in Utopic:
  Won't Fix
Status in apparmor-easyprof-ubuntu source package in Vivid:
  Fix Released
Status in click-reviewers-tools source package in Vivid:
  In Progress
Status in unity-scopes-api source package in Vivid:
  Fix Released
Status in apparmor-easyprof-ubuntu package in Ubuntu RTM:
  Fix Released

Bug description:
  Summary says it all, just need to decide on the directory. I propose using 
this rule:
    # Allow scopes to share data with the app shipped in the same click
    owner @{HOME}/.local/share/@{APP_PKGNAME}/r,
    owner @{HOME}/.local/share/@{APP_PKGNAME}/**  mrkl,

To manage notifications about this bug go to:
https://bugs.launchpad.net/canonical-devices-system-image/+bug/1384286/+subscriptions

-- 
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp


[Touch-packages] [Bug 1384286] Re: add directory allowing scopes and apps to share data

2015-10-15 Thread Michi Henning
** Changed in: unity-scopes-api (Ubuntu Utopic)
   Status: New => Won't Fix

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor-easyprof-ubuntu
in Ubuntu.
https://bugs.launchpad.net/bugs/1384286

Title:
  add directory allowing scopes and apps to share data

Status in Canonical System Image:
  In Progress
Status in apparmor-easyprof-ubuntu package in Ubuntu:
  Fix Released
Status in click-reviewers-tools package in Ubuntu:
  In Progress
Status in unity-scopes-api package in Ubuntu:
  Fix Released
Status in apparmor-easyprof-ubuntu source package in Utopic:
  Won't Fix
Status in unity-scopes-api source package in Utopic:
  Won't Fix
Status in apparmor-easyprof-ubuntu source package in Vivid:
  Fix Released
Status in click-reviewers-tools source package in Vivid:
  In Progress
Status in unity-scopes-api source package in Vivid:
  Fix Released
Status in apparmor-easyprof-ubuntu package in Ubuntu RTM:
  Fix Released

Bug description:
  Summary says it all, just need to decide on the directory. I propose using 
this rule:
    # Allow scopes to share data with the app shipped in the same click
    owner @{HOME}/.local/share/@{APP_PKGNAME}/r,
    owner @{HOME}/.local/share/@{APP_PKGNAME}/**  mrkl,

To manage notifications about this bug go to:
https://bugs.launchpad.net/canonical-devices-system-image/+bug/1384286/+subscriptions

-- 
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp


[Touch-packages] [Bug 1384286] Re: add directory allowing scopes and apps to share data

2015-04-20 Thread Jamie Strandboge
I have a todo for what needs to happen with CRT. I plan to do an update
this/next week that will include this change.

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor-easyprof-ubuntu
in Ubuntu.
https://bugs.launchpad.net/bugs/1384286

Title:
  add directory allowing scopes and apps to share data

Status in the base for Ubuntu mobile products:
  In Progress
Status in apparmor-easyprof-ubuntu package in Ubuntu:
  Fix Released
Status in click-reviewers-tools package in Ubuntu:
  In Progress
Status in unity-scopes-api package in Ubuntu:
  Fix Released
Status in apparmor-easyprof-ubuntu source package in Utopic:
  Won't Fix
Status in unity-scopes-api source package in Utopic:
  New
Status in apparmor-easyprof-ubuntu source package in Vivid:
  Fix Released
Status in click-reviewers-tools source package in Vivid:
  In Progress
Status in unity-scopes-api source package in Vivid:
  Fix Released
Status in apparmor-easyprof-ubuntu package in Ubuntu RTM:
  Fix Released

Bug description:
  Summary says it all, just need to decide on the directory. I propose using 
this rule:
    # Allow scopes to share data with the app shipped in the same click
    owner @{HOME}/.local/share/@{APP_PKGNAME}/r,
    owner @{HOME}/.local/share/@{APP_PKGNAME}/**  mrkl,

To manage notifications about this bug go to:
https://bugs.launchpad.net/canonical-devices-system-image/+bug/1384286/+subscriptions

-- 
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp


[Touch-packages] [Bug 1384286] Re: add directory allowing scopes and apps to share data

2015-04-20 Thread Daniel Holbach
What's still required from a click-reviewers-tools perspective?

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor-easyprof-ubuntu
in Ubuntu.
https://bugs.launchpad.net/bugs/1384286

Title:
  add directory allowing scopes and apps to share data

Status in the base for Ubuntu mobile products:
  In Progress
Status in apparmor-easyprof-ubuntu package in Ubuntu:
  Fix Released
Status in click-reviewers-tools package in Ubuntu:
  In Progress
Status in unity-scopes-api package in Ubuntu:
  Fix Released
Status in apparmor-easyprof-ubuntu source package in Utopic:
  Won't Fix
Status in unity-scopes-api source package in Utopic:
  New
Status in apparmor-easyprof-ubuntu source package in Vivid:
  Fix Released
Status in click-reviewers-tools source package in Vivid:
  In Progress
Status in unity-scopes-api source package in Vivid:
  Fix Released
Status in apparmor-easyprof-ubuntu package in Ubuntu RTM:
  Fix Released

Bug description:
  Summary says it all, just need to decide on the directory. I propose using 
this rule:
    # Allow scopes to share data with the app shipped in the same click
    owner @{HOME}/.local/share/@{APP_PKGNAME}/r,
    owner @{HOME}/.local/share/@{APP_PKGNAME}/**  mrkl,

To manage notifications about this bug go to:
https://bugs.launchpad.net/canonical-devices-system-image/+bug/1384286/+subscriptions

-- 
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp


[Touch-packages] [Bug 1384286] Re: add directory allowing scopes and apps to share data

2015-01-09 Thread Jamie Strandboge
** Changed in: apparmor-easyprof-ubuntu (Ubuntu Utopic)
   Status: In Progress = Won't Fix

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor-easyprof-ubuntu
in Ubuntu.
https://bugs.launchpad.net/bugs/1384286

Title:
  add directory allowing scopes and apps to share data

Status in the base for Ubuntu mobile products:
  In Progress
Status in apparmor-easyprof-ubuntu package in Ubuntu:
  Fix Released
Status in click-reviewers-tools package in Ubuntu:
  In Progress
Status in unity-scopes-api package in Ubuntu:
  Fix Released
Status in apparmor-easyprof-ubuntu source package in Utopic:
  Won't Fix
Status in unity-scopes-api source package in Utopic:
  New
Status in apparmor-easyprof-ubuntu source package in Vivid:
  Fix Released
Status in click-reviewers-tools source package in Vivid:
  In Progress
Status in unity-scopes-api source package in Vivid:
  Fix Released
Status in apparmor-easyprof-ubuntu package in Ubuntu RTM:
  Fix Released

Bug description:
  Summary says it all, just need to decide on the directory. I propose using 
this rule:
    # Allow scopes to share data with the app shipped in the same click
    owner @{HOME}/.local/share/@{APP_PKGNAME}/r,
    owner @{HOME}/.local/share/@{APP_PKGNAME}/**  mrkl,

To manage notifications about this bug go to:
https://bugs.launchpad.net/canonical-devices-system-image/+bug/1384286/+subscriptions

-- 
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp


[Touch-packages] [Bug 1384286] Re: add directory allowing scopes and apps to share data

2014-12-15 Thread Launchpad Bug Tracker
** Branch linked: lp:ubuntu/vivid-proposed/apparmor-easyprof-ubuntu

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor-easyprof-ubuntu
in Ubuntu.
https://bugs.launchpad.net/bugs/1384286

Title:
  add directory allowing scopes and apps to share data

Status in the base for Ubuntu mobile products:
  In Progress
Status in apparmor-easyprof-ubuntu package in Ubuntu:
  In Progress
Status in click-reviewers-tools package in Ubuntu:
  In Progress
Status in unity-scopes-api package in Ubuntu:
  Fix Released
Status in apparmor-easyprof-ubuntu source package in Utopic:
  In Progress
Status in unity-scopes-api source package in Utopic:
  New
Status in apparmor-easyprof-ubuntu source package in Vivid:
  In Progress
Status in click-reviewers-tools source package in Vivid:
  In Progress
Status in unity-scopes-api source package in Vivid:
  Fix Released
Status in apparmor-easyprof-ubuntu package in Ubuntu RTM:
  Fix Released

Bug description:
  Summary says it all, just need to decide on the directory. I propose using 
this rule:
    # Allow scopes to share data with the app shipped in the same click
    owner @{HOME}/.local/share/@{APP_PKGNAME}/r,
    owner @{HOME}/.local/share/@{APP_PKGNAME}/**  mrkl,

To manage notifications about this bug go to:
https://bugs.launchpad.net/canonical-devices-system-image/+bug/1384286/+subscriptions

-- 
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp


[Touch-packages] [Bug 1384286] Re: add directory allowing scopes and apps to share data

2014-12-15 Thread Launchpad Bug Tracker
This bug was fixed in the package apparmor-easyprof-ubuntu - 1.3.1

---
apparmor-easyprof-ubuntu (1.3.1) vivid; urgency=medium

  * ubuntu/ubuntu-sdk:
- explicitly deny reads on ~/.cache/QML/Apps/ to silence noisy denials.
  Undo this when LP: 1381620 is fixed in qtdeclarative-opensource-src
- explicitly deny dbus bind on name=org.freedesktop.Application since
  it is noisy. Undo this when LP: 1378823 is fixed in ubuntu-ui-toolkit
  * ubuntu/1.3/ubuntu-sdk: drop html5-container policy. html5 apps should use
webapp-container and specify the 'webview' policy group with 1.3 (15.04)
policy (LP: #1392461)
  * ubuntu/ubuntu-scope-network, pending/ubuntu-scope-local-content: allow
scopes to read data from the apps data dir (LP: #1384286)
  * adjust all dbus rules to use peer=(label=unconfined) to prevent
coordinated communications between apps over DBus (LP: #1383824)
  * ubuntu/{music,pictures,video}_files*: allow access to global SD card
directories (LP: #1391930)
  * debian/control: Depends on apparmor = 2.8.98-0ubuntu2~ for the dbus peer
changes (we need at least apparmor_parser 2.9.beta4 for these)
 -- Jamie Strandboge ja...@ubuntu.com   Mon, 15 Dec 2014 15:53:32 +

** Changed in: apparmor-easyprof-ubuntu (Ubuntu Vivid)
   Status: In Progress = Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor-easyprof-ubuntu
in Ubuntu.
https://bugs.launchpad.net/bugs/1384286

Title:
  add directory allowing scopes and apps to share data

Status in the base for Ubuntu mobile products:
  In Progress
Status in apparmor-easyprof-ubuntu package in Ubuntu:
  Fix Released
Status in click-reviewers-tools package in Ubuntu:
  In Progress
Status in unity-scopes-api package in Ubuntu:
  Fix Released
Status in apparmor-easyprof-ubuntu source package in Utopic:
  In Progress
Status in unity-scopes-api source package in Utopic:
  New
Status in apparmor-easyprof-ubuntu source package in Vivid:
  Fix Released
Status in click-reviewers-tools source package in Vivid:
  In Progress
Status in unity-scopes-api source package in Vivid:
  Fix Released
Status in apparmor-easyprof-ubuntu package in Ubuntu RTM:
  Fix Released

Bug description:
  Summary says it all, just need to decide on the directory. I propose using 
this rule:
    # Allow scopes to share data with the app shipped in the same click
    owner @{HOME}/.local/share/@{APP_PKGNAME}/r,
    owner @{HOME}/.local/share/@{APP_PKGNAME}/**  mrkl,

To manage notifications about this bug go to:
https://bugs.launchpad.net/canonical-devices-system-image/+bug/1384286/+subscriptions

-- 
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp


[Touch-packages] [Bug 1384286] Re: add directory allowing scopes and apps to share data

2014-12-04 Thread Pat McGowan
** Changed in: canonical-devices-system-image
   Status: New = In Progress

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor-easyprof-ubuntu
in Ubuntu.
https://bugs.launchpad.net/bugs/1384286

Title:
  add directory allowing scopes and apps to share data

Status in the base for Ubuntu mobile products:
  In Progress
Status in apparmor-easyprof-ubuntu package in Ubuntu:
  In Progress
Status in click-reviewers-tools package in Ubuntu:
  In Progress
Status in unity-scopes-api package in Ubuntu:
  Fix Released
Status in apparmor-easyprof-ubuntu source package in Utopic:
  In Progress
Status in unity-scopes-api source package in Utopic:
  New
Status in apparmor-easyprof-ubuntu source package in Vivid:
  In Progress
Status in click-reviewers-tools source package in Vivid:
  In Progress
Status in unity-scopes-api source package in Vivid:
  Fix Released
Status in apparmor-easyprof-ubuntu package in Ubuntu RTM:
  Fix Released

Bug description:
  Summary says it all, just need to decide on the directory. I propose using 
this rule:
    # Allow scopes to share data with the app shipped in the same click
    owner @{HOME}/.local/share/@{APP_PKGNAME}/r,
    owner @{HOME}/.local/share/@{APP_PKGNAME}/**  mrkl,

To manage notifications about this bug go to:
https://bugs.launchpad.net/canonical-devices-system-image/+bug/1384286/+subscriptions

-- 
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp


[Touch-packages] [Bug 1384286] Re: add directory allowing scopes and apps to share data

2014-12-01 Thread Michi Henning
** Changed in: unity-scopes-api (Ubuntu Vivid)
   Status: Fix Committed = Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor-easyprof-ubuntu
in Ubuntu.
https://bugs.launchpad.net/bugs/1384286

Title:
  add directory allowing scopes and apps to share data

Status in the base for Ubuntu mobile products:
  New
Status in apparmor-easyprof-ubuntu package in Ubuntu:
  In Progress
Status in click-reviewers-tools package in Ubuntu:
  In Progress
Status in unity-scopes-api package in Ubuntu:
  Fix Released
Status in apparmor-easyprof-ubuntu source package in Utopic:
  In Progress
Status in unity-scopes-api source package in Utopic:
  New
Status in apparmor-easyprof-ubuntu source package in Vivid:
  In Progress
Status in click-reviewers-tools source package in Vivid:
  In Progress
Status in unity-scopes-api source package in Vivid:
  Fix Released
Status in apparmor-easyprof-ubuntu package in Ubuntu RTM:
  Fix Released

Bug description:
  Summary says it all, just need to decide on the directory. I propose using 
this rule:
    # Allow scopes to share data with the app shipped in the same click
    owner @{HOME}/.local/share/@{APP_PKGNAME}/r,
    owner @{HOME}/.local/share/@{APP_PKGNAME}/**  mrkl,

To manage notifications about this bug go to:
https://bugs.launchpad.net/canonical-devices-system-image/+bug/1384286/+subscriptions

-- 
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp


[Touch-packages] [Bug 1384286] Re: add directory allowing scopes and apps to share data

2014-11-30 Thread Michi Henning
** Also affects: canonical-devices-system-image
   Importance: Undecided
   Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor-easyprof-ubuntu
in Ubuntu.
https://bugs.launchpad.net/bugs/1384286

Title:
  add directory allowing scopes and apps to share data

Status in the base for Ubuntu mobile products:
  New
Status in apparmor-easyprof-ubuntu package in Ubuntu:
  In Progress
Status in click-reviewers-tools package in Ubuntu:
  In Progress
Status in unity-scopes-api package in Ubuntu:
  Fix Committed
Status in apparmor-easyprof-ubuntu source package in Utopic:
  In Progress
Status in unity-scopes-api source package in Utopic:
  New
Status in apparmor-easyprof-ubuntu source package in Vivid:
  In Progress
Status in click-reviewers-tools source package in Vivid:
  In Progress
Status in unity-scopes-api source package in Vivid:
  Fix Committed
Status in apparmor-easyprof-ubuntu package in Ubuntu RTM:
  Fix Released

Bug description:
  Summary says it all, just need to decide on the directory. I propose using 
this rule:
    # Allow scopes to share data with the app shipped in the same click
    owner @{HOME}/.local/share/@{APP_PKGNAME}/r,
    owner @{HOME}/.local/share/@{APP_PKGNAME}/**  mrkl,

To manage notifications about this bug go to:
https://bugs.launchpad.net/canonical-devices-system-image/+bug/1384286/+subscriptions

-- 
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp


[Touch-packages] [Bug 1384286] Re: add directory allowing scopes and apps to share data

2014-11-17 Thread Jamie Strandboge
This is in rtm silo 002.

** Changed in: apparmor-easyprof-ubuntu (Ubuntu Utopic)
 Assignee: (unassigned) = Jamie Strandboge (jdstrand)

** Changed in: apparmor-easyprof-ubuntu (Ubuntu RTM)
   Status: New = Fix Committed

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor-easyprof-ubuntu
in Ubuntu.
https://bugs.launchpad.net/bugs/1384286

Title:
  add directory allowing scopes and apps to share data

Status in “apparmor-easyprof-ubuntu” package in Ubuntu:
  In Progress
Status in “click-reviewers-tools” package in Ubuntu:
  In Progress
Status in “unity-scopes-api” package in Ubuntu:
  Fix Committed
Status in “apparmor-easyprof-ubuntu” source package in Utopic:
  In Progress
Status in “click-reviewers-tools” source package in Utopic:
  New
Status in “unity-scopes-api” source package in Utopic:
  New
Status in “apparmor-easyprof-ubuntu” source package in Vivid:
  In Progress
Status in “click-reviewers-tools” source package in Vivid:
  In Progress
Status in “unity-scopes-api” source package in Vivid:
  Fix Committed
Status in “apparmor-easyprof-ubuntu” package in Ubuntu RTM:
  Fix Committed

Bug description:
  Summary says it all, just need to decide on the directory. I propose using 
this rule:
    # Allow scopes to share data with the app shipped in the same click
    owner @{HOME}/.local/share/@{APP_PKGNAME}/r,
    owner @{HOME}/.local/share/@{APP_PKGNAME}/**  mrkl,

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apparmor-easyprof-ubuntu/+bug/1384286/+subscriptions

-- 
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp


[Touch-packages] [Bug 1384286] Re: add directory allowing scopes and apps to share data

2014-11-17 Thread Launchpad Bug Tracker
This bug was fixed in the package apparmor-easyprof-ubuntu - 1.2.39

---
apparmor-easyprof-ubuntu (1.2.39) utopic; urgency=medium

  * ubuntu/{music,pictures,video}_files*: allow access to global SD card
directories (LP: #1391930)
  * ubuntu/ubuntu-scope-network, pending/ubuntu-scope-local-content: allow
scopes to read data from the apps data dir (LP: #1384286)
 -- Jamie Strandboge ja...@ubuntu.com   Thu, 13 Nov 2014 09:54:18 -0600

** Changed in: apparmor-easyprof-ubuntu (Ubuntu RTM)
   Status: Fix Committed = Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor-easyprof-ubuntu
in Ubuntu.
https://bugs.launchpad.net/bugs/1384286

Title:
  add directory allowing scopes and apps to share data

Status in “apparmor-easyprof-ubuntu” package in Ubuntu:
  In Progress
Status in “click-reviewers-tools” package in Ubuntu:
  In Progress
Status in “unity-scopes-api” package in Ubuntu:
  Fix Committed
Status in “apparmor-easyprof-ubuntu” source package in Utopic:
  In Progress
Status in “unity-scopes-api” source package in Utopic:
  New
Status in “apparmor-easyprof-ubuntu” source package in Vivid:
  In Progress
Status in “click-reviewers-tools” source package in Vivid:
  In Progress
Status in “unity-scopes-api” source package in Vivid:
  Fix Committed
Status in “apparmor-easyprof-ubuntu” package in Ubuntu RTM:
  Fix Released

Bug description:
  Summary says it all, just need to decide on the directory. I propose using 
this rule:
    # Allow scopes to share data with the app shipped in the same click
    owner @{HOME}/.local/share/@{APP_PKGNAME}/r,
    owner @{HOME}/.local/share/@{APP_PKGNAME}/**  mrkl,

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apparmor-easyprof-ubuntu/+bug/1384286/+subscriptions

-- 
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp


[Touch-packages] [Bug 1384286] Re: add directory allowing scopes and apps to share data

2014-11-13 Thread Jamie Strandboge
** Tags removed: ota-1

** Also affects: apparmor-easyprof-ubuntu (Ubuntu RTM)
   Importance: Undecided
   Status: New

** Changed in: apparmor-easyprof-ubuntu (Ubuntu RTM)
   Importance: Undecided = Wishlist

** Changed in: apparmor-easyprof-ubuntu (Ubuntu RTM)
   Status: New = In Progress

** Also affects: apparmor-easyprof-ubuntu (Ubuntu Vivid)
   Importance: High
 Assignee: Jamie Strandboge (jdstrand)
   Status: In Progress

** Also affects: click-reviewers-tools (Ubuntu Vivid)
   Importance: High
 Assignee: Jamie Strandboge (jdstrand)
   Status: In Progress

** Also affects: unity-scopes-api (Ubuntu Vivid)
   Importance: High
 Assignee: Michi Henning (michihenning)
   Status: Fix Committed

** Also affects: apparmor-easyprof-ubuntu (Ubuntu Utopic)
   Importance: Undecided
   Status: New

** Also affects: click-reviewers-tools (Ubuntu Utopic)
   Importance: Undecided
   Status: New

** Also affects: unity-scopes-api (Ubuntu Utopic)
   Importance: Undecided
   Status: New

** Changed in: apparmor-easyprof-ubuntu (Ubuntu Utopic)
   Importance: Undecided = High

** Changed in: apparmor-easyprof-ubuntu (Ubuntu Utopic)
   Status: New = In Progress

** Description changed:

  Summary says it all, just need to decide on the directory. I propose using 
this rule:
    # Allow scopes to share data with the app shipped in the same click
-   owner @{HOME}/.local/share/@{APP_PKGNAME}/rw,
-   owner @{HOME}/.local/share/@{APP_PKGNAME}/**  mrwkl,
+   owner @{HOME}/.local/share/@{APP_PKGNAME}/r,
+   owner @{HOME}/.local/share/@{APP_PKGNAME}/**  mrkl,

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor-easyprof-ubuntu
in Ubuntu.
https://bugs.launchpad.net/bugs/1384286

Title:
  add directory allowing scopes and apps to share data

Status in “apparmor-easyprof-ubuntu” package in Ubuntu:
  In Progress
Status in “click-reviewers-tools” package in Ubuntu:
  In Progress
Status in “unity-scopes-api” package in Ubuntu:
  Fix Committed
Status in “apparmor-easyprof-ubuntu” source package in Utopic:
  In Progress
Status in “click-reviewers-tools” source package in Utopic:
  New
Status in “unity-scopes-api” source package in Utopic:
  New
Status in “apparmor-easyprof-ubuntu” source package in Vivid:
  In Progress
Status in “click-reviewers-tools” source package in Vivid:
  In Progress
Status in “unity-scopes-api” source package in Vivid:
  Fix Committed
Status in “apparmor-easyprof-ubuntu” package in Ubuntu RTM:
  In Progress

Bug description:
  Summary says it all, just need to decide on the directory. I propose using 
this rule:
    # Allow scopes to share data with the app shipped in the same click
    owner @{HOME}/.local/share/@{APP_PKGNAME}/r,
    owner @{HOME}/.local/share/@{APP_PKGNAME}/**  mrkl,

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apparmor-easyprof-ubuntu/+bug/1384286/+subscriptions

-- 
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp


[Touch-packages] [Bug 1384286] Re: add directory allowing scopes and apps to share data

2014-11-13 Thread Jamie Strandboge
** Changed in: apparmor-easyprof-ubuntu (Ubuntu RTM)
   Status: In Progress = New

** Changed in: apparmor-easyprof-ubuntu (Ubuntu RTM)
 Assignee: (unassigned) = Jamie Strandboge (jdstrand)

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor-easyprof-ubuntu
in Ubuntu.
https://bugs.launchpad.net/bugs/1384286

Title:
  add directory allowing scopes and apps to share data

Status in “apparmor-easyprof-ubuntu” package in Ubuntu:
  In Progress
Status in “click-reviewers-tools” package in Ubuntu:
  In Progress
Status in “unity-scopes-api” package in Ubuntu:
  Fix Committed
Status in “apparmor-easyprof-ubuntu” source package in Utopic:
  In Progress
Status in “click-reviewers-tools” source package in Utopic:
  New
Status in “unity-scopes-api” source package in Utopic:
  New
Status in “apparmor-easyprof-ubuntu” source package in Vivid:
  In Progress
Status in “click-reviewers-tools” source package in Vivid:
  In Progress
Status in “unity-scopes-api” source package in Vivid:
  Fix Committed
Status in “apparmor-easyprof-ubuntu” package in Ubuntu RTM:
  New

Bug description:
  Summary says it all, just need to decide on the directory. I propose using 
this rule:
    # Allow scopes to share data with the app shipped in the same click
    owner @{HOME}/.local/share/@{APP_PKGNAME}/r,
    owner @{HOME}/.local/share/@{APP_PKGNAME}/**  mrkl,

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apparmor-easyprof-ubuntu/+bug/1384286/+subscriptions

-- 
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp


[Touch-packages] [Bug 1384286] Re: add directory allowing scopes and apps to share data

2014-11-12 Thread Jamie Strandboge
Michi,

this is what is currently in the scopes network template as a writable 
directory:
  @{HOME}/.local/share/unity-scopes/leaf-net/@{APP_PKGNAME}/*

this is the read-only directory I want to add to the scopes network template so 
scopes can surface data from the app:
  @{HOME}/.local/share/@{APP_PKGNAME}/*

As such, scopes have read access to *both*, but only write access to
leaf-net.

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor-easyprof-ubuntu
in Ubuntu.
https://bugs.launchpad.net/bugs/1384286

Title:
  add directory allowing scopes and apps to share data

Status in “apparmor-easyprof-ubuntu” package in Ubuntu:
  In Progress
Status in “click-reviewers-tools” package in Ubuntu:
  In Progress
Status in “unity-scopes-api” package in Ubuntu:
  In Progress

Bug description:
  Summary says it all, just need to decide on the directory. I propose using 
this rule:
    # Allow scopes to share data with the app shipped in the same click
    owner @{HOME}/.local/share/@{APP_PKGNAME}/rw,
    owner @{HOME}/.local/share/@{APP_PKGNAME}/**  mrwkl,

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apparmor-easyprof-ubuntu/+bug/1384286/+subscriptions

-- 
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp


[Touch-packages] [Bug 1384286] Re: add directory allowing scopes and apps to share data

2014-11-12 Thread Michi Henning
Ah, OK, it seems the penny is finally dropping :-)

So, if I understand you correctly, you are saying that
@{HOME}/.local/share/unity-scopes/leaf-net/@{APP_PKGNAME}/* is the
writable cache directory for the scope (exactly as it is now), and
@{HOME}/.local/share/@{APP_PKGNAME}/* is the readable directory where
the scope can read data produced by the app?

I think we can do this. In practice, this would mean adding an
app_directory() method to the scopes API that returns the path to the
readable directory that a scope can use to pick up data from the app.
There are some doc implications, but it's doable.

I take it that the readable directory would not be applicable to scopes
that do *not* install together with an app in the same click package?
(We would throw an exception if a scope doesn't have an associated app
and tries to get the directory name.)

Now, if I have this picture correct, it implies that a scope can read
from an app, but an app cannot read from a scope. Is that what we want?
If so, I think I'm good with this. (I haven't implemented anything yet,
so there are the usual caveats. But, off-hand, I don't see a show-
stopper.)

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor-easyprof-ubuntu
in Ubuntu.
https://bugs.launchpad.net/bugs/1384286

Title:
  add directory allowing scopes and apps to share data

Status in “apparmor-easyprof-ubuntu” package in Ubuntu:
  In Progress
Status in “click-reviewers-tools” package in Ubuntu:
  In Progress
Status in “unity-scopes-api” package in Ubuntu:
  In Progress

Bug description:
  Summary says it all, just need to decide on the directory. I propose using 
this rule:
    # Allow scopes to share data with the app shipped in the same click
    owner @{HOME}/.local/share/@{APP_PKGNAME}/rw,
    owner @{HOME}/.local/share/@{APP_PKGNAME}/**  mrwkl,

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apparmor-easyprof-ubuntu/+bug/1384286/+subscriptions

-- 
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp


[Touch-packages] [Bug 1384286] Re: add directory allowing scopes and apps to share data

2014-11-12 Thread Jamie Strandboge
So, if I understand you correctly, you are saying that
@{HOME}/.local/share/unity-scopes/leaf-net/@{APP_PKGNAME}/* is the
writable cache directory for the scope (exactly as it is now), and
@{HOME}/.local/share/@{APP_PKGNAME}/* is the readable directory where
the scope can read data produced by the app?

Yes

I take it that the readable directory would not be applicable to scopes
that do *not* install together with an app in the same click package?
(We would throw an exception if a scope doesn't have an associated app
and tries to get the directory name.)

If I understand the question, APP_PKGNAME is unique to the scopes and
apps installed by a particular click package. A differently named click
package will have a different APP_PKGNAME set, so there is isolation
between clicks. This bug only allows scopes and apps within the same
click to coordinate with each other.

Now, if I have this picture correct, it implies that a scope can read
from an app, but an app cannot read from a scope. Is that what we want?
If so, I think I'm good with this. (I haven't implemented anything yet,
so there are the usual caveats. But, off-hand, I don't see a show-
stopper.)

This is correct and I think it is what we want. I'm still holding out
for the possibility of a local content scope some time down the road and
allowing writes to the app dir in a local content scope would allow an
app to break out of confinement via this shared dir (of course, we could
just not let that scope type coordinate with an app...). Let's go with
what I suggested for now, and I will document the thinking in the policy
so the thinking isn't lost.

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor-easyprof-ubuntu
in Ubuntu.
https://bugs.launchpad.net/bugs/1384286

Title:
  add directory allowing scopes and apps to share data

Status in “apparmor-easyprof-ubuntu” package in Ubuntu:
  In Progress
Status in “click-reviewers-tools” package in Ubuntu:
  In Progress
Status in “unity-scopes-api” package in Ubuntu:
  In Progress

Bug description:
  Summary says it all, just need to decide on the directory. I propose using 
this rule:
    # Allow scopes to share data with the app shipped in the same click
    owner @{HOME}/.local/share/@{APP_PKGNAME}/rw,
    owner @{HOME}/.local/share/@{APP_PKGNAME}/**  mrwkl,

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apparmor-easyprof-ubuntu/+bug/1384286/+subscriptions

-- 
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp


[Touch-packages] [Bug 1384286] Re: add directory allowing scopes and apps to share data

2014-11-12 Thread Michi Henning
Sorry for being so dense. I had the wrong mental model because, all
along, I assumed that the cache_directory was to be used for sharing, so
I was thinking that the proposal was to change the location of the
existing cache dir, instead of adding a completely new one.

The linked branch should fix this.

** Branch linked: lp:~michihenning/unity-scopes-api/app-directory

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor-easyprof-ubuntu
in Ubuntu.
https://bugs.launchpad.net/bugs/1384286

Title:
  add directory allowing scopes and apps to share data

Status in “apparmor-easyprof-ubuntu” package in Ubuntu:
  In Progress
Status in “click-reviewers-tools” package in Ubuntu:
  In Progress
Status in “unity-scopes-api” package in Ubuntu:
  In Progress

Bug description:
  Summary says it all, just need to decide on the directory. I propose using 
this rule:
    # Allow scopes to share data with the app shipped in the same click
    owner @{HOME}/.local/share/@{APP_PKGNAME}/rw,
    owner @{HOME}/.local/share/@{APP_PKGNAME}/**  mrwkl,

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apparmor-easyprof-ubuntu/+bug/1384286/+subscriptions

-- 
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp


[Touch-packages] [Bug 1384286] Re: add directory allowing scopes and apps to share data

2014-11-12 Thread Michi Henning
** Changed in: unity-scopes-api (Ubuntu)
   Status: In Progress = Fix Committed

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor-easyprof-ubuntu
in Ubuntu.
https://bugs.launchpad.net/bugs/1384286

Title:
  add directory allowing scopes and apps to share data

Status in “apparmor-easyprof-ubuntu” package in Ubuntu:
  In Progress
Status in “click-reviewers-tools” package in Ubuntu:
  In Progress
Status in “unity-scopes-api” package in Ubuntu:
  Fix Committed

Bug description:
  Summary says it all, just need to decide on the directory. I propose using 
this rule:
    # Allow scopes to share data with the app shipped in the same click
    owner @{HOME}/.local/share/@{APP_PKGNAME}/rw,
    owner @{HOME}/.local/share/@{APP_PKGNAME}/**  mrwkl,

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apparmor-easyprof-ubuntu/+bug/1384286/+subscriptions

-- 
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp


[Touch-packages] [Bug 1384286] Re: add directory allowing scopes and apps to share data

2014-11-11 Thread Jamie Strandboge
Is it OK to drop the leaf-net and unconfined components from the path?
Currently, a confined scope relies on being able to create the final
path component *itself* by calling mkdir(). So, assuming that
~/.local/share/unity-scopes/leaf-net exists, the scope will try to
create ~/.local/share/unity-scopes/leaf-net/@{APP_PKG_NAME}.

No. This is important for isolation between scopes if we ever decide to
support other scope templates to protect against certain types of
attacks via differently versioned apps.

** Also affects: click-reviewers-tools (Ubuntu)
   Importance: Undecided
   Status: New

** Changed in: click-reviewers-tools (Ubuntu)
   Status: New = In Progress

** Changed in: apparmor-easyprof-ubuntu (Ubuntu)
   Status: Triaged = In Progress

** Changed in: click-reviewers-tools (Ubuntu)
   Importance: Undecided = High

** Changed in: click-reviewers-tools (Ubuntu)
 Assignee: (unassigned) = Jamie Strandboge (jdstrand)

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor-easyprof-ubuntu
in Ubuntu.
https://bugs.launchpad.net/bugs/1384286

Title:
  add directory allowing scopes and apps to share data

Status in “apparmor-easyprof-ubuntu” package in Ubuntu:
  In Progress
Status in “click-reviewers-tools” package in Ubuntu:
  In Progress

Bug description:
  Summary says it all, just need to decide on the directory. I propose using 
this rule:
    # Allow scopes to share data with the app shipped in the same click
    owner @{HOME}/.local/share/@{APP_PKGNAME}/rw,
    owner @{HOME}/.local/share/@{APP_PKGNAME}/**  mrwkl,

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apparmor-easyprof-ubuntu/+bug/1384286/+subscriptions

-- 
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp


[Touch-packages] [Bug 1384286] Re: add directory allowing scopes and apps to share data

2014-11-11 Thread Jamie Strandboge
I've added a click-reviewers-tools task to handle this from the scopes
confinement specification: Because scopes share application data with
apps shipped in the same click, reviewers must be careful if the click
package contains any permissions that triggers a manual review
(permissions that pass the automatic checks are considered safe). Eg, if
the app has wide filesystem permissions but no networking and the scope
has networking but no filesystem permissions, then the app can make data
from the system available to the scope and so it could send it out over
the network.

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor-easyprof-ubuntu
in Ubuntu.
https://bugs.launchpad.net/bugs/1384286

Title:
  add directory allowing scopes and apps to share data

Status in “apparmor-easyprof-ubuntu” package in Ubuntu:
  In Progress
Status in “click-reviewers-tools” package in Ubuntu:
  In Progress

Bug description:
  Summary says it all, just need to decide on the directory. I propose using 
this rule:
    # Allow scopes to share data with the app shipped in the same click
    owner @{HOME}/.local/share/@{APP_PKGNAME}/rw,
    owner @{HOME}/.local/share/@{APP_PKGNAME}/**  mrwkl,

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apparmor-easyprof-ubuntu/+bug/1384286/+subscriptions

-- 
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp


[Touch-packages] [Bug 1384286] Re: add directory allowing scopes and apps to share data

2014-11-11 Thread Jamie Strandboge
Ok, so, let's clear the terminology up a little. All click packages are
installed in /opt (this is what Christian was talking about). However,
those packages (whether they by apps or scopes) aren't available to the
user until the user hooks are run, which creates symlinks in $HOME to
the things in /opt (this is what Michi was talking about). Then there
are the writable areas that apps and scopes have (this is what mardy and
michi were talking about). Note, within the apparmor policy,
@{APP_PKGNAME} refers to the 'name' field from the click manifest.

Scopes writable non-volatile areas (ie, not in /run) are:
  (unconfined) @{HOME}/.local/share/unity-scopes/unconfined/@{APP_PKGNAME}/*
  (confined network scope) 
@{HOME}/.local/share/unity-scopes/leaf-net/@{APP_PKGNAME}/*

Whereas apps writable non-volatile areas (excluding the QML cache directory) 
are:
  @{HOME}/.cache/@{APP_PKGNAME}/*
  @{HOME}/.config/@{APP_PKGNAME}/*
  @{HOME}/.local/share/@{APP_PKGNAME}/*

Also note, we already have a precedent for sharing between apps shipped in the 
same click: push helpers. Push helpers writable non-volatile areas are the same 
as for apps:
  @{HOME}/.cache/@{APP_PKGNAME}/*
  @{HOME}/.config/@{APP_PKGNAME}/*
  @{HOME}/.local/share/@{APP_PKGNAME}/*

Michi, my understanding was this would be perhaps a new API call, not
something that you would change on your end, but that is an
implementation detail and I can see arguments on either side.

Since Michi said he doesn't care where the directory is and we have a precedent 
for data sharing already and it seems to make the most sense for scopes to 
surface the data in an app rather than the other way around, I am going to add 
this to the ubuntu-scope-network template:
  # Allow scopes to share data with the app shipped in the same click
  owner @{HOME}/.local/share/@{APP_PKGNAME}/ rw,
  owner @{HOME}/.local/share/@{APP_PKGNAME}/** mrwkl,


** Changed in: apparmor-easyprof-ubuntu (Ubuntu)
 Assignee: Michi Henning (michihenning) = (unassigned)

** Changed in: apparmor-easyprof-ubuntu (Ubuntu)
   Status: Confirmed = Triaged

** Changed in: apparmor-easyprof-ubuntu (Ubuntu)
 Assignee: (unassigned) = Jamie Strandboge (jdstrand)

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor-easyprof-ubuntu
in Ubuntu.
https://bugs.launchpad.net/bugs/1384286

Title:
  add directory allowing scopes and apps to share data

Status in “apparmor-easyprof-ubuntu” package in Ubuntu:
  In Progress
Status in “click-reviewers-tools” package in Ubuntu:
  In Progress

Bug description:
  Summary says it all, just need to decide on the directory. I propose using 
this rule:
    # Allow scopes to share data with the app shipped in the same click
    owner @{HOME}/.local/share/@{APP_PKGNAME}/rw,
    owner @{HOME}/.local/share/@{APP_PKGNAME}/**  mrwkl,

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apparmor-easyprof-ubuntu/+bug/1384286/+subscriptions

-- 
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp


[Touch-packages] [Bug 1384286] Re: add directory allowing scopes and apps to share data

2014-11-11 Thread Jamie Strandboge
Actually, I think I'd prefer this, unless there is a really compelling 
otherwise (ie, read-only):
  # Allow scopes to share data with the app shipped in the same click
  owner @{HOME}/.local/share/@{APP_PKGNAME}/ r,
  owner @{HOME}/.local/share/@{APP_PKGNAME}/** mrkl,

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor-easyprof-ubuntu
in Ubuntu.
https://bugs.launchpad.net/bugs/1384286

Title:
  add directory allowing scopes and apps to share data

Status in “apparmor-easyprof-ubuntu” package in Ubuntu:
  In Progress
Status in “click-reviewers-tools” package in Ubuntu:
  In Progress

Bug description:
  Summary says it all, just need to decide on the directory. I propose using 
this rule:
    # Allow scopes to share data with the app shipped in the same click
    owner @{HOME}/.local/share/@{APP_PKGNAME}/rw,
    owner @{HOME}/.local/share/@{APP_PKGNAME}/**  mrwkl,

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apparmor-easyprof-ubuntu/+bug/1384286/+subscriptions

-- 
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp


[Touch-packages] [Bug 1384286] Re: add directory allowing scopes and apps to share data

2014-11-11 Thread Michi Henning
** Also affects: unity-scopes-api (Ubuntu)
   Importance: Undecided
   Status: New

** Changed in: unity-scopes-api (Ubuntu)
 Assignee: (unassigned) = Michi Henning (michihenning)

** Changed in: unity-scopes-api (Ubuntu)
   Status: New = In Progress

** Changed in: unity-scopes-api (Ubuntu)
   Importance: Undecided = High

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor-easyprof-ubuntu
in Ubuntu.
https://bugs.launchpad.net/bugs/1384286

Title:
  add directory allowing scopes and apps to share data

Status in “apparmor-easyprof-ubuntu” package in Ubuntu:
  In Progress
Status in “click-reviewers-tools” package in Ubuntu:
  In Progress
Status in “unity-scopes-api” package in Ubuntu:
  In Progress

Bug description:
  Summary says it all, just need to decide on the directory. I propose using 
this rule:
    # Allow scopes to share data with the app shipped in the same click
    owner @{HOME}/.local/share/@{APP_PKGNAME}/rw,
    owner @{HOME}/.local/share/@{APP_PKGNAME}/**  mrwkl,

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apparmor-easyprof-ubuntu/+bug/1384286/+subscriptions

-- 
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp


[Touch-packages] [Bug 1384286] Re: add directory allowing scopes and apps to share data

2014-11-11 Thread Michi Henning
 Actually, I think I'd prefer this, unless there is a really compelling 
 otherwise (ie, read-only):
   # Allow scopes to share data with the app shipped in the same click
   owner @{HOME}/.local/share/@{APP_PKGNAME}/ r,
   owner @{HOME}/.local/share/@{APP_PKGNAME}/** mrkl,

Just double-checking here... Earlier, in comment #9, you said that we
couldn't drop the leaf-net and unconfined directories, but your
suggestion does drop these.

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor-easyprof-ubuntu
in Ubuntu.
https://bugs.launchpad.net/bugs/1384286

Title:
  add directory allowing scopes and apps to share data

Status in “apparmor-easyprof-ubuntu” package in Ubuntu:
  In Progress
Status in “click-reviewers-tools” package in Ubuntu:
  In Progress
Status in “unity-scopes-api” package in Ubuntu:
  In Progress

Bug description:
  Summary says it all, just need to decide on the directory. I propose using 
this rule:
    # Allow scopes to share data with the app shipped in the same click
    owner @{HOME}/.local/share/@{APP_PKGNAME}/rw,
    owner @{HOME}/.local/share/@{APP_PKGNAME}/**  mrwkl,

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apparmor-easyprof-ubuntu/+bug/1384286/+subscriptions

-- 
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp


[Touch-packages] [Bug 1384286] Re: add directory allowing scopes and apps to share data

2014-11-10 Thread David Planella
Just to follow up on mardy's suggestion about sharing the cache
directory. On the Reminders app we're integrating the scope and app, and
the notes and their thumbnails are stored under the cache dir, which
would be ideal to share. In this particular case, it might not apply, as
we're shipping the scope and the app in the same click, though, so I
understand they should both be able to access the cache data.

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor-easyprof-ubuntu
in Ubuntu.
https://bugs.launchpad.net/bugs/1384286

Title:
  add directory allowing scopes and apps to share data

Status in “apparmor-easyprof-ubuntu” package in Ubuntu:
  Confirmed

Bug description:
  Summary says it all, just need to decide on the directory. I propose using 
this rule:
    # Allow scopes to share data with the app shipped in the same click
    owner @{HOME}/.local/share/@{APP_PKGNAME}/rw,
    owner @{HOME}/.local/share/@{APP_PKGNAME}/**  mrwkl,

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apparmor-easyprof-ubuntu/+bug/1384286/+subscriptions

-- 
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp


[Touch-packages] [Bug 1384286] Re: add directory allowing scopes and apps to share data

2014-11-10 Thread Michi Henning
As I said, I don't really mind what particular directory is used as the
cache directory. I just think it shouldn't be the same as the click
scope installation directory.

Right now, when you call cache_directory(), you get a path that (as far
as I know) should be shared with the app if the scope and the app are in
the same click package. Is that actually the case? If not, either the
app path or the scope path need to be changed, so they agree.

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor-easyprof-ubuntu
in Ubuntu.
https://bugs.launchpad.net/bugs/1384286

Title:
  add directory allowing scopes and apps to share data

Status in “apparmor-easyprof-ubuntu” package in Ubuntu:
  Confirmed

Bug description:
  Summary says it all, just need to decide on the directory. I propose using 
this rule:
    # Allow scopes to share data with the app shipped in the same click
    owner @{HOME}/.local/share/@{APP_PKGNAME}/rw,
    owner @{HOME}/.local/share/@{APP_PKGNAME}/**  mrwkl,

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apparmor-easyprof-ubuntu/+bug/1384286/+subscriptions

-- 
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp


[Touch-packages] [Bug 1384286] Re: add directory allowing scopes and apps to share data

2014-11-04 Thread Christian Dywan
 currently, ~/.local/share/@{APP_PKGNAME} is used as the click
*installation* directory

There's something mixed up here I think. This is, for apps as well as
scopes, where data is stored, wheras installations are in
/opt/click.ubuntu.com/ .

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor-easyprof-ubuntu
in Ubuntu.
https://bugs.launchpad.net/bugs/1384286

Title:
  add directory allowing scopes and apps to share data

Status in “apparmor-easyprof-ubuntu” package in Ubuntu:
  Confirmed

Bug description:
  Summary says it all, just need to decide on the directory. I propose using 
this rule:
    # Allow scopes to share data with the app shipped in the same click
    owner @{HOME}/.local/share/@{APP_PKGNAME}/rw,
    owner @{HOME}/.local/share/@{APP_PKGNAME}/**  mrwkl,

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apparmor-easyprof-ubuntu/+bug/1384286/+subscriptions

-- 
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp


[Touch-packages] [Bug 1384286] Re: add directory allowing scopes and apps to share data

2014-11-04 Thread Michi Henning
Scopes installed from click packages are, as a matter of fact, installed
in ~/.local/share/unity-scopes/@{APP_PKGNAME}

No scope, no matter where it comes from, is ever installed in
/opt/click. If it is, it won't work because the registry won't look for
it there.

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor-easyprof-ubuntu
in Ubuntu.
https://bugs.launchpad.net/bugs/1384286

Title:
  add directory allowing scopes and apps to share data

Status in “apparmor-easyprof-ubuntu” package in Ubuntu:
  Confirmed

Bug description:
  Summary says it all, just need to decide on the directory. I propose using 
this rule:
    # Allow scopes to share data with the app shipped in the same click
    owner @{HOME}/.local/share/@{APP_PKGNAME}/rw,
    owner @{HOME}/.local/share/@{APP_PKGNAME}/**  mrwkl,

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apparmor-easyprof-ubuntu/+bug/1384286/+subscriptions

-- 
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp


[Touch-packages] [Bug 1384286] Re: add directory allowing scopes and apps to share data

2014-11-03 Thread Jamie Strandboge
Assigning to Michi only so he can comment on the proposed path. Please
assign back to me if you agree.

** Description changed:

- Summary says it all, just need to decide on the directory.
+ Summary says it all, just need to decide on the directory. I propose using 
this rule:
+   # Allow scopes to share data with the app shipped in the same click
+   owner @{HOME}/.local/share/@{APP_PKGNAME}/rw,
+   owner @{HOME}/.local/share/@{APP_PKGNAME}/**  mrwklix,

** Changed in: apparmor-easyprof-ubuntu (Ubuntu)
 Assignee: (unassigned) = Michi Henning (michihenning)

** Description changed:

  Summary says it all, just need to decide on the directory. I propose using 
this rule:
-   # Allow scopes to share data with the app shipped in the same click
-   owner @{HOME}/.local/share/@{APP_PKGNAME}/rw,
-   owner @{HOME}/.local/share/@{APP_PKGNAME}/**  mrwklix,
+   # Allow scopes to share data with the app shipped in the same click
+   owner @{HOME}/.local/share/@{APP_PKGNAME}/rw,
+   owner @{HOME}/.local/share/@{APP_PKGNAME}/**  mrwkl,

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor-easyprof-ubuntu
in Ubuntu.
https://bugs.launchpad.net/bugs/1384286

Title:
  add directory allowing scopes and apps to share data

Status in “apparmor-easyprof-ubuntu” package in Ubuntu:
  Confirmed

Bug description:
  Summary says it all, just need to decide on the directory. I propose using 
this rule:
    # Allow scopes to share data with the app shipped in the same click
    owner @{HOME}/.local/share/@{APP_PKGNAME}/rw,
    owner @{HOME}/.local/share/@{APP_PKGNAME}/**  mrwkl,

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apparmor-easyprof-ubuntu/+bug/1384286/+subscriptions

-- 
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp


[Touch-packages] [Bug 1384286] Re: add directory allowing scopes and apps to share data

2014-11-03 Thread Olli Ries
** Tags added: rtm14

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor-easyprof-ubuntu
in Ubuntu.
https://bugs.launchpad.net/bugs/1384286

Title:
  add directory allowing scopes and apps to share data

Status in “apparmor-easyprof-ubuntu” package in Ubuntu:
  Confirmed

Bug description:
  Summary says it all, just need to decide on the directory. I propose using 
this rule:
    # Allow scopes to share data with the app shipped in the same click
    owner @{HOME}/.local/share/@{APP_PKGNAME}/rw,
    owner @{HOME}/.local/share/@{APP_PKGNAME}/**  mrwkl,

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apparmor-easyprof-ubuntu/+bug/1384286/+subscriptions

-- 
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp


[Touch-packages] [Bug 1384286] Re: add directory allowing scopes and apps to share data

2014-11-03 Thread Olli Ries
** Tags added: ota-1

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor-easyprof-ubuntu
in Ubuntu.
https://bugs.launchpad.net/bugs/1384286

Title:
  add directory allowing scopes and apps to share data

Status in “apparmor-easyprof-ubuntu” package in Ubuntu:
  Confirmed

Bug description:
  Summary says it all, just need to decide on the directory. I propose using 
this rule:
    # Allow scopes to share data with the app shipped in the same click
    owner @{HOME}/.local/share/@{APP_PKGNAME}/rw,
    owner @{HOME}/.local/share/@{APP_PKGNAME}/**  mrwkl,

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apparmor-easyprof-ubuntu/+bug/1384286/+subscriptions

-- 
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp


[Touch-packages] [Bug 1384286] Re: add directory allowing scopes and apps to share data

2014-11-03 Thread Michi Henning
I'm agnostic as to the exact location. We just need to agree :-)

Currently, it is: ~/.local/share/unity-scopes/unconfined/@{APP_PKG_NAME}
for unconfined scopes, and ~/.local/share/unity-scopes/leaf-
net/@{APP_PKG_NAME} for confined scopes.

I can change this easily enough. However, currently,
~/.local/share/@{APP_PKGNAME} is used as the click *installation*
directory. That is the directory where the click package installs the
scope's .so and .ini file.

For data sharing between the application and the scope, I take it that
we are talking about the *cache* directory? It doesn't seem a good idea
to use the same directory for both installation files from the click
package, and data files that are created by the scope and/or the
application, so I think the install dir and the cache dir should be
different locations (but the new location you suggest is the same as the
current click installation location).

Is it OK to drop the leaf-net and unconfined components from the path?
Currently, a confined scope relies on being able to create the final
path component *itself* by calling mkdir(). So, assuming that
~/.local/share/unity-scopes/leaf-net exists, the scope will try to
create ~/.local/share/unity-scopes/leaf-net/@{APP_PKG_NAME}.

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor-easyprof-ubuntu
in Ubuntu.
https://bugs.launchpad.net/bugs/1384286

Title:
  add directory allowing scopes and apps to share data

Status in “apparmor-easyprof-ubuntu” package in Ubuntu:
  Confirmed

Bug description:
  Summary says it all, just need to decide on the directory. I propose using 
this rule:
    # Allow scopes to share data with the app shipped in the same click
    owner @{HOME}/.local/share/@{APP_PKGNAME}/rw,
    owner @{HOME}/.local/share/@{APP_PKGNAME}/**  mrwkl,

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apparmor-easyprof-ubuntu/+bug/1384286/+subscriptions

-- 
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp


[Touch-packages] [Bug 1384286] Re: add directory allowing scopes and apps to share data

2014-11-03 Thread Alberto Mardegan
The cache (~/.cache/) directory is not equivalent to the data directory 
(~/.local/share/), because it's meant for volatile data which could be deleted 
at any time, and which can be recreated later. So, you wouldn't use it for 
storing user-generated content such as drawings or documents, because they 
could get lost.
On the other hand, I like the suggestion of sharing the cache directory as 
well, because that could be used for image thumbnails, which could be shared 
between an app and a scope.

It may also be that the application and the scope want to share some
configuration values, so I'd suggest sharing the config directory as
well. :-)

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor-easyprof-ubuntu
in Ubuntu.
https://bugs.launchpad.net/bugs/1384286

Title:
  add directory allowing scopes and apps to share data

Status in “apparmor-easyprof-ubuntu” package in Ubuntu:
  Confirmed

Bug description:
  Summary says it all, just need to decide on the directory. I propose using 
this rule:
    # Allow scopes to share data with the app shipped in the same click
    owner @{HOME}/.local/share/@{APP_PKGNAME}/rw,
    owner @{HOME}/.local/share/@{APP_PKGNAME}/**  mrwkl,

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apparmor-easyprof-ubuntu/+bug/1384286/+subscriptions

-- 
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp