[Bug 1045986] Re: Ubuntu AppArmor policy is too lenient with shell scripts

2014-06-26 Thread Jamie Strandboge
** Changed in: cups (Ubuntu Quantal) Status: Confirmed = Won't Fix ** Changed in: firefox (Ubuntu Quantal) Status: Confirmed = Won't Fix -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to dhcp3 in Ubuntu.

[Bug 1045986] Re: Ubuntu AppArmor policy is too lenient with shell scripts

2013-07-08 Thread Launchpad Bug Tracker
** Branch linked: lp:~kees/apparmor/debian -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to dhcp3 in Ubuntu. https://bugs.launchpad.net/bugs/1045986 Title: Ubuntu AppArmor policy is too lenient with shell scripts To manage

[Bug 1045986] Re: Ubuntu AppArmor policy is too lenient with shell scripts

2013-06-27 Thread Launchpad Bug Tracker
This bug was fixed in the package chromium-browser - 28.0.1500.52-0ubuntu1.12.10.2 --- chromium-browser (28.0.1500.52-0ubuntu1.12.10.2) quantal-security; urgency=low [Chad MILLER] * New stable release 28.0.1500.52 * New stable release 28.0.1500.45 * New stable release

[Bug 1045986] Re: Ubuntu AppArmor policy is too lenient with shell scripts

2013-06-27 Thread Launchpad Bug Tracker
This bug was fixed in the package chromium-browser - 28.0.1500.52-0ubuntu1.13.04.2 --- chromium-browser (28.0.1500.52-0ubuntu1.13.04.2) raring-security; urgency=low [Chad MILLER] * New stable release 28.0.1500.52 * New stable release 28.0.1500.45 * New stable release

[Bug 1045986] Re: Ubuntu AppArmor policy is too lenient with shell scripts

2013-06-27 Thread Launchpad Bug Tracker
This bug was fixed in the package chromium-browser - 28.0.1500.52-0ubuntu1.12.04.2 --- chromium-browser (28.0.1500.52-0ubuntu1.12.04.2) precise-security; urgency=low [Chad MILLER] * New stable release 28.0.1500.52 * New stable release 28.0.1500.45 * New stable release

[Bug 1045986] Re: Ubuntu AppArmor policy is too lenient with shell scripts

2013-06-18 Thread Adolfo Jayme Barrientos
(Untargetting old EOLd releases) ** No longer affects: chromium-browser (Ubuntu Lucid) ** No longer affects: chromium-browser (Ubuntu Natty) ** No longer affects: chromium-browser (Ubuntu Oneiric) ** No longer affects: cups (Ubuntu Lucid) ** No longer affects: cups (Ubuntu Natty) ** No

[Bug 1045986] Re: Ubuntu AppArmor policy is too lenient with shell scripts

2013-04-29 Thread Launchpad Bug Tracker
** Branch linked: lp:~smoser/ubuntu/precise/isc-dhcp/precise- updates.dist -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to dhcp3 in Ubuntu. https://bugs.launchpad.net/bugs/1045986 Title: Ubuntu AppArmor policy is too lenient with

[Bug 1045986] Re: Ubuntu AppArmor policy is too lenient with shell scripts

2013-04-24 Thread Chad Miller
** Changed in: chromium-browser (Ubuntu) Status: Confirmed = Fix Committed ** Changed in: chromium-browser (Ubuntu) Assignee: (unassigned) = Chad Miller (cmiller) -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to dhcp3 in

[Bug 1045986] Re: Ubuntu AppArmor policy is too lenient with shell scripts

2013-03-09 Thread mahesh
** Changed in: apparmor (Ubuntu Lucid) Status: Invalid = Incomplete -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to dhcp3 in Ubuntu. https://bugs.launchpad.net/bugs/1045986 Title: Ubuntu AppArmor policy is too lenient with

[Bug 1045986] Re: Ubuntu AppArmor policy is too lenient with shell scripts

2013-03-09 Thread Jamie Strandboge
** Changed in: apparmor (Ubuntu Lucid) Status: Incomplete = Invalid -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to dhcp3 in Ubuntu. https://bugs.launchpad.net/bugs/1045986 Title: Ubuntu AppArmor policy is too lenient with

[Bug 1045986] Re: Ubuntu AppArmor policy is too lenient with shell scripts

2013-03-05 Thread Launchpad Bug Tracker
** Branch linked: lp:~smoser/ubuntu/raring/isc-dhcp/nouid -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to dhcp3 in Ubuntu. https://bugs.launchpad.net/bugs/1045986 Title: Ubuntu AppArmor policy is too lenient with shell scripts To

[Bug 1045986] Re: Ubuntu AppArmor policy is too lenient with shell scripts

2013-01-04 Thread Jamie Strandboge
The update for this bug was included in an update to precise-security. I tested that 2.0.1-0ubuntu17.1 contains the fix for this bug and that 2.0.1-0ubuntu17.1 passes QRT. Marking 'verification-done'. ** Tags removed: verification-needed ** Tags added: verification-done -- You received this bug

[Bug 1045986] Re: Ubuntu AppArmor policy is too lenient with shell scripts

2013-01-02 Thread Brian Murray
Hello Jamie, or anyone else affected, Accepted apport into precise-proposed. The package will build now and be available at http://launchpad.net/ubuntu/+source/apport/2.0.1-0ubuntu17.1 in a few hours, and then in the -proposed repository. Please help us by testing this new package. See

[Bug 1045986] Re: Ubuntu AppArmor policy is too lenient with shell scripts

2012-12-19 Thread Launchpad Bug Tracker
This bug was fixed in the package apparmor - 2.7.102-0ubuntu3.7 --- apparmor (2.7.102-0ubuntu3.7) precise-security; urgency=low * debian/patches/0001-add-chromium-browser.patch: - add access for newer versions of chromium (LP: #1091862) - add a child profile for xdgsettings

[Bug 1045986] Re: Ubuntu AppArmor policy is too lenient with shell scripts

2012-12-19 Thread Launchpad Bug Tracker
This bug was fixed in the package apparmor - 2.7.0~beta1+bzr1774-1ubuntu2.2 --- apparmor (2.7.0~beta1+bzr1774-1ubuntu2.2) oneiric-security; urgency=low * debian/patches/0001-add-chromium-browser.patch: - add various accesses for newer chromium versions (LP: #1091862) - add

[Bug 1045986] Re: Ubuntu AppArmor policy is too lenient with shell scripts

2012-12-19 Thread Launchpad Bug Tracker
** Branch linked: lp:ubuntu/precise-security/apparmor -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to dhcp3 in Ubuntu. https://bugs.launchpad.net/bugs/1045986 Title: Ubuntu AppArmor policy is too lenient with shell scripts To

[Bug 1045986] Re: Ubuntu AppArmor policy is too lenient with shell scripts

2012-12-19 Thread Launchpad Bug Tracker
** Branch linked: lp:ubuntu/oneiric-updates/apparmor -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to dhcp3 in Ubuntu. https://bugs.launchpad.net/bugs/1045986 Title: Ubuntu AppArmor policy is too lenient with shell scripts To manage

[Bug 1045986] Re: Ubuntu AppArmor policy is too lenient with shell scripts

2012-12-19 Thread Jamie Strandboge
** Changed in: apparmor (Ubuntu Oneiric) Status: Triaged = Fix Committed ** Changed in: apparmor (Ubuntu Oneiric) Assignee: (unassigned) = Jamie Strandboge (jdstrand) ** Changed in: apparmor (Ubuntu Precise) Status: Triaged = Fix Committed ** Changed in: apparmor (Ubuntu

[Bug 1045986] Re: Ubuntu AppArmor policy is too lenient with shell scripts

2012-12-18 Thread Launchpad Bug Tracker
** Branch linked: lp:~ubuntu-core-dev/ubuntu/precise/apport/ubuntu -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to dhcp3 in Ubuntu. https://bugs.launchpad.net/bugs/1045986 Title: Ubuntu AppArmor policy is too lenient with shell

[Bug 1045986] Re: Ubuntu AppArmor policy is too lenient with shell scripts

2012-12-17 Thread Jamie Strandboge
** Changed in: apparmor (Ubuntu Natty) Status: Triaged = Won't Fix ** Changed in: apport (Ubuntu Natty) Status: Fix Committed = Won't Fix ** Changed in: chromium-browser (Ubuntu Natty) Status: Confirmed = Won't Fix ** Changed in: cups (Ubuntu Natty) Status: Confirmed

[Bug 1045986] Re: Ubuntu AppArmor policy is too lenient with shell scripts

2012-12-17 Thread Launchpad Bug Tracker
This bug was fixed in the package apport - 1.23-0ubuntu4.1 --- apport (1.23-0ubuntu4.1) oneiric-security; urgency=low * bin/apport-bug: Explicitly set the PATH to that of ENV_SUPATH in /etc/login.defs and unset ENV and CDPATH. We need do this so that confined applications

[Bug 1045986] Re: Ubuntu AppArmor policy is too lenient with shell scripts

2012-12-17 Thread Launchpad Bug Tracker
This bug was fixed in the package apport - 2.0.1-0ubuntu15.1 --- apport (2.0.1-0ubuntu15.1) precise-security; urgency=low * bin/apport-bug: Explicitly set the PATH to that of ENV_SUPATH in /etc/login.defs and unset ENV and CDPATH. We need do this so that confined

[Bug 1045986] Re: Ubuntu AppArmor policy is too lenient with shell scripts

2012-12-17 Thread Launchpad Bug Tracker
This bug was fixed in the package apport - 1.13.3-0ubuntu2.2 --- apport (1.13.3-0ubuntu2.2) lucid-security; urgency=low * bin/apport-bug: Explicitly set the PATH to that of ENV_SUPATH in /etc/login.defs and unset ENV and CDPATH. We need do this so that confined applications

[Bug 1045986] Re: Ubuntu AppArmor policy is too lenient with shell scripts

2012-12-17 Thread Jamie Strandboge
** CVE removed: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2012-3570 ** CVE removed: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2012-3571 ** CVE removed: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2012-3954 ** CVE removed: http://www.cve.mitre.org/cgi-

[Bug 1045986] Re: Ubuntu AppArmor policy is too lenient with shell scripts

2012-09-25 Thread Rev. Wm. DOC Holliday
** Changed in: cups (Ubuntu Lucid) Assignee: (unassigned) = Rev. Wm. DOC Holliday (r37u2a49ci) -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to dhcp3 in Ubuntu. https://bugs.launchpad.net/bugs/1045986 Title: Ubuntu AppArmor

[Bug 1045986] Re: Ubuntu AppArmor policy is too lenient with shell scripts

2012-09-25 Thread Marc Deslauriers
** Changed in: cups (Ubuntu Lucid) Assignee: Rev. Wm. DOC Holliday (r37u2a49ci) = (unassigned) -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to dhcp3 in Ubuntu. https://bugs.launchpad.net/bugs/1045986 Title: Ubuntu AppArmor

[Bug 1045986] Re: Ubuntu AppArmor policy is too lenient with shell scripts

2012-09-18 Thread Launchpad Bug Tracker
This bug was fixed in the package isc-dhcp - 4.1.1-P1-17ubuntu10.5 --- isc-dhcp (4.1.1-P1-17ubuntu10.5) oneiric-security; urgency=low [ Jamie Strandboge ] * debian/dhclient-script.linux: Explicitly set the PATH to that of ENV_SUPATH in /etc/login.defs and unset various other

[Bug 1045986] Re: Ubuntu AppArmor policy is too lenient with shell scripts

2012-09-18 Thread Launchpad Bug Tracker
This bug was fixed in the package isc-dhcp - 4.1.ESV-R4-0ubuntu5.5 --- isc-dhcp (4.1.ESV-R4-0ubuntu5.5) precise-security; urgency=low [ Jamie Strandboge ] * debian/dhclient-script.linux: Explicitly set the PATH to that of ENV_SUPATH in /etc/login.defs and unset various other

[Bug 1045986] Re: Ubuntu AppArmor policy is too lenient with shell scripts

2012-09-18 Thread Launchpad Bug Tracker
This bug was fixed in the package isc-dhcp - 4.1.1-P1-15ubuntu9.6 --- isc-dhcp (4.1.1-P1-15ubuntu9.6) natty-security; urgency=low [ Jamie Strandboge ] * debian/dhclient-script.linux: Explicitly set the PATH to that of ENV_SUPATH in /etc/login.defs and unset various other

[Bug 1045986] Re: Ubuntu AppArmor policy is too lenient with shell scripts

2012-09-18 Thread Launchpad Bug Tracker
This bug was fixed in the package dhcp3 - 3.1.3-2ubuntu3.4 --- dhcp3 (3.1.3-2ubuntu3.4) lucid-security; urgency=low * debian/dhclient-script.linux: Explicitly set the PATH to that of ENV_SUPATH in /etc/login.defs and unset various other variables. We need to do this so

[Bug 1045986] Re: Ubuntu AppArmor policy is too lenient with shell scripts

2012-09-18 Thread Launchpad Bug Tracker
** Branch linked: lp:ubuntu/lucid-security/dhcp3 -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to dhcp3 in Ubuntu. https://bugs.launchpad.net/bugs/1045986 Title: Ubuntu AppArmor policy is too lenient with shell scripts To manage

[Bug 1045986] Re: Ubuntu AppArmor policy is too lenient with shell scripts

2012-09-17 Thread Jamie Strandboge
** Changed in: apparmor (Ubuntu Quantal) Status: Triaged = In Progress ** Changed in: apparmor (Ubuntu Quantal) Assignee: (unassigned) = Jamie Strandboge (jdstrand) -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to dhcp3 in

[Bug 1045986] Re: Ubuntu AppArmor policy is too lenient with shell scripts

2012-09-17 Thread Launchpad Bug Tracker
This bug was fixed in the package apparmor - 2.8.0-0ubuntu3 --- apparmor (2.8.0-0ubuntu3) quantal; urgency=low * remove 0010-lp972367.patch and 0012-lp964510.patch which should have been dropped in 2.8.0-0ubuntu1 since they are included upstream *

[Bug 1045986] Re: Ubuntu AppArmor policy is too lenient with shell scripts

2012-09-17 Thread Launchpad Bug Tracker
** Branch linked: lp:ubuntu/apparmor -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to dhcp3 in Ubuntu. https://bugs.launchpad.net/bugs/1045986 Title: Ubuntu AppArmor policy is too lenient with shell scripts To manage notifications

[Bug 1045986] Re: Ubuntu AppArmor policy is too lenient with shell scripts

2012-09-06 Thread Launchpad Bug Tracker
** Branch linked: lp:ubuntu/quantal-proposed/isc-dhcp -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to dhcp3 in Ubuntu. https://bugs.launchpad.net/bugs/1045986 Title: Ubuntu AppArmor policy is too lenient with shell scripts To

[Bug 1045986] Re: Ubuntu AppArmor policy is too lenient with shell scripts

2012-09-06 Thread Launchpad Bug Tracker
** Branch linked: lp:ubuntu/quantal-proposed/apport -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to dhcp3 in Ubuntu. https://bugs.launchpad.net/bugs/1045986 Title: Ubuntu AppArmor policy is too lenient with shell scripts To manage

[Bug 1045986] Re: Ubuntu AppArmor policy is too lenient with shell scripts

2012-09-06 Thread Launchpad Bug Tracker
This bug was fixed in the package isc-dhcp - 4.2.4-1ubuntu7 --- isc-dhcp (4.2.4-1ubuntu7) quantal-proposed; urgency=low * debian/dhclient-script.linux: Explicitly set the PATH to that of ENV_SUPATH in /etc/login.defs and unset various other variables. We need to do this so

[Bug 1045986] Re: Ubuntu AppArmor policy is too lenient with shell scripts

2012-09-05 Thread Jamie Strandboge
isc-dhcp and dhcp3 have been uploaded to the security PPA. ** Changed in: isc-dhcp (Ubuntu Natty) Status: Triaged = Fix Committed ** Changed in: isc-dhcp (Ubuntu Natty) Importance: Undecided = High ** Changed in: isc-dhcp (Ubuntu Oneiric) Status: Triaged = Fix Committed **

[Bug 1045986] Re: Ubuntu AppArmor policy is too lenient with shell scripts

2012-09-05 Thread Jamie Strandboge
While the ubuntu-integration abstraction doesn't exist in 10.04 LTS, the firefox profile has a Ux rule for apport-bug. ** Changed in: apport (Ubuntu Lucid) Status: Triaged = In Progress ** Changed in: apport (Ubuntu Lucid) Assignee: (unassigned) = Jamie Strandboge (jdstrand) **

[Bug 1045986] Re: Ubuntu AppArmor policy is too lenient with shell scripts

2012-09-05 Thread Jamie Strandboge
apport has been uploaded to the security PPA. ** Changed in: apport (Ubuntu Quantal) Status: In Progress = Fix Committed ** Changed in: apport (Ubuntu Lucid) Status: In Progress = Fix Committed ** Changed in: apport (Ubuntu Natty) Status: In Progress = Fix Committed **

[Bug 1045986] Re: Ubuntu AppArmor policy is too lenient with shell scripts

2012-09-04 Thread Jamie Strandboge
** Description changed: - Placeholder description. Dan Rosenberg is planning to blog about some - AppArmor profile weaknesses in Ubuntu. This bug will track the work - needed to fix it. + Dan Rosenberg has blogged about some AppArmor profile weaknesses in Ubuntu: +

[Bug 1045986] Re: Ubuntu AppArmor policy is too lenient with shell scripts

2012-09-04 Thread Jamie Strandboge
** Also affects: dhcp3 (Ubuntu Quantal) Importance: High Status: Triaged ** Also affects: firefox (Ubuntu Quantal) Importance: Undecided Status: Confirmed ** Also affects: apport (Ubuntu Quantal) Importance: Undecided Status: Triaged ** Also affects: apparmor

[Bug 1045986] Re: Ubuntu AppArmor policy is too lenient with shell scripts

2012-09-04 Thread Jamie Strandboge
** Changed in: isc-dhcp (Ubuntu Quantal) Status: Triaged = In Progress -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to dhcp3 in Ubuntu. https://bugs.launchpad.net/bugs/1045986 Title: Ubuntu AppArmor policy is too lenient with

[Bug 1045986] Re: Ubuntu AppArmor policy is too lenient with shell scripts

2012-09-04 Thread Till Kamppeter
pitti, any idea how to improve the situation with CUPS? -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to dhcp3 in Ubuntu. https://bugs.launchpad.net/bugs/1045986 Title: Ubuntu AppArmor policy is too lenient with shell scripts To

[Bug 1045986] Re: Ubuntu AppArmor policy is too lenient with shell scripts

2012-09-04 Thread Jamie Strandboge
An updated apport is in quantal-proposed. ** Changed in: apport (Ubuntu Quantal) Status: Triaged = In Progress ** Changed in: apport (Ubuntu Quantal) Assignee: (unassigned) = Jamie Strandboge (jdstrand) ** Changed in: apport (Ubuntu Quantal) Status: In Progress = Fix

[Bug 1045986] Re: Ubuntu AppArmor policy is too lenient with shell scripts

2012-09-04 Thread Jamie Strandboge
isc-dhcp uploaded to quantal-proposed. ** Changed in: isc-dhcp (Ubuntu Quantal) Status: In Progress = Fix Committed -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to dhcp3 in Ubuntu. https://bugs.launchpad.net/bugs/1045986

[Bug 1045986] Re: Ubuntu AppArmor policy is too lenient with shell scripts

2012-09-04 Thread Jamie Strandboge
I need to respin isc-dhcp on quantal since 4.2.4-1ubuntu6 was already there. -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to dhcp3 in Ubuntu. https://bugs.launchpad.net/bugs/1045986 Title: Ubuntu AppArmor policy is too lenient with

[Bug 1045986] Re: Ubuntu AppArmor policy is too lenient with shell scripts

2012-09-04 Thread Jamie Strandboge
Ok, both apport and isc-dhcp needed to be respun. Both are uploaded and sitting in unapproved. -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to dhcp3 in Ubuntu. https://bugs.launchpad.net/bugs/1045986 Title: Ubuntu AppArmor policy is

[Bug 1045986] Re: Ubuntu AppArmor policy is too lenient with shell scripts

2012-09-04 Thread Martin Pitt
Thanks Jamie; do you have a pointer to the apport patch, or can attach it here? I'd like to apply it to trunk as well (or make it suitable for that). -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to dhcp3 in Ubuntu.