@asciiwolf: yeah possibly, I haven't dug into the details, a full
security by the security team would be needed before it could be
accepted as a default trusted source at the distro level.

Part of the issue is that we are dealing with different versions of
"trusted". Where a user may trust flathub, but at a distro level we
can't because that would mean making that decision for all of our users,
and having to back it up with the security implications that carries.
For a distro that is really hard to do for a source that is beyond the
distros control.

One of the things that needs to happen is settings to make it easier to
add trusted sources, and have those choices reflected through the
security policy. Which is the problem in this bug, where user are
choosing to trust flathub, or maybe side loaded flatpaks, but the
generic distro security policy isn't being updated to reflect that
choice.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2130388

Title:
  Cannot install flatpaks from io.github.kolunmi.Bazaar

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/2130388/+subscriptions


-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to