QSystemInfo has quite a few areas in the system it tries to access
information from, read only. (We've tried hard to keep it read only
access)

Just adding AppArmor to this to hopefully get some comment about this.

I could come up with a policy that would allow QSystemInfo to work, but
it would be up to the security guys to decide whether they would allow
it.

There are a few related bugs regarding wrong or missing information in
QSystemInfo.

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor in Ubuntu.
https://bugs.launchpad.net/bugs/1607217

Title:
  QSysInfo doesn't work properly with AppArmor confinement

Status in apparmor package in Ubuntu:
  New
Status in qtsystems-opensource-src package in Ubuntu:
  Confirmed

Bug description:
  Trying to detect platform (OS) name and version on Ubuntu Touch 15.04
  based phones and tablets using QML. On the Ubuntu Desktop QSysInfo
  provides the following _correct_ values:

  QSysInfo::productType(): "ubuntu"
  QSysInfo::productVersion(): "16.04"
  QSysInfo::prettyProductName(): "Ubuntu 16.04 LTS"

  However, in a confined environment (e.g. bq Aquaris E5 HD Ubuntu
  Edition / 15.04 OTA-11) the following _incorrect_ values are provided
  by QSysInfo:

  QSysInfo::productType(): "unknown"
  QSysInfo::productVersion(): "unknown"
  QSysInfo::prettyProductName(): "Linux 3.4.67"

  I suppose it's because QSysInfo tries to (or would need to) access
  such files on the filesystem that are blocked by AppArmor, like /etc
  /os-release or such.

  Ideally, QSysInfo::productVersion() should return not only "15.04" on
  an Ubuntu Touch device, but also the OTA release number. So it should
  be more like: "15.04 OTA-11". That's because "15.04" alone doesn't
  tell much about the actual Ubuntu Touch OS release installed on a
  mobile device.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/1607217/+subscriptions

-- 
Mailing list: https://launchpad.net/~touch-packages
Post to     : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to