Using this for the evernote-account-plugin.apparmor:
{
"template": "ubuntu-account-plugin",
"policy_groups": [
"accounts",
"audio",
"networking",
"webview"
],
"policy_version": 1.2
}
with apparmor-easyprof-ubuntu 1.3.4 (pending upload), I can successfully create
an account under confinement. The reminders app itself is unable to use the
account (I can start it, but it never leaves the splash screen). There are some
denials:
...
Feb 3 21:37:50 ubuntu-phablet kernel: [ 5634.484968] type=1400
audit(1422999470.948:429): apparmor="DENIED" operation="mknod"
profile="com.ubuntu.reminders_evernote-account-plugin_0.5.latest"
name="/tmp/etilqs_R5PWXVRkWjQcVBC" pid=10898 comm="BrowserBlocking"
requested_mask="c" denied_mask="c" fsuid=32011 ouid=32011
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1219644
Title:
Account plugins should be made confinable by apparmor
To manage notifications about this bug go to:
https://bugs.launchpad.net/click-reviewers-tools/+bug/1219644/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
