qtdeclarative5-u1db1.0 should not use ~/.local/share/Qt Project for db files
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
Ubuntu UI Toolkit |
Fix Released
|
Undecided
|
Unassigned | ||
apparmor-easyprof-ubuntu (Ubuntu) |
Fix Released
|
High
|
Cris Dywan | ||
Saucy |
Fix Released
|
High
|
Cris Dywan | ||
u1db-qt (Ubuntu) |
Fix Released
|
High
|
Cris Dywan | ||
Saucy |
Fix Released
|
High
|
Cris Dywan | ||
ubuntu-ui-toolkit (Ubuntu) |
Fix Released
|
Undecided
|
Unassigned | ||
Saucy |
Fix Released
|
Undecided
|
Unassigned |
Bug Description
Similar to bug #1197051, qtdeclarative5-
/home/phablet/
This results in AppArmor rules like the following:
owner "@{HOME}
owner "@{HOME}
But these rules are too lenient and these paths need to be made application specific so that different apps using u1db-qt can't tamper with each other's data. Specifically: $XDG_DATA_HOME/<app pkgname> where '<app pkgname>' is the "name" field in the Click manifest (see bug #1197037 for details).
com.ubuntu.
U1db.Database {
id: storage
path: "ubuntu-tasks.db"
}
This needs to be fixed for 13.10 otherwise apps are not properly isolation under application confinement.
Related branches
- PS Jenkins bot: Approve (continuous-integration)
- Zsombor Egri: Approve
- Tim Peeters: Pending requested
-
Diff: 376 lines (+286/-0)9 files modifiedmodules/Ubuntu/Components/MainView.qml (+5/-0)
modules/Ubuntu/Components/plugin/plugin.cpp (+7/-0)
modules/Ubuntu/Components/plugin/plugin.pro (+2/-0)
modules/Ubuntu/Components/plugin/ucapplication.cpp (+57/-0)
modules/Ubuntu/Components/plugin/ucapplication.h (+53/-0)
tests/unit/tst_mainview/AppName.qml (+23/-0)
tests/unit/tst_mainview/tst_mainview.cpp (+132/-0)
tests/unit/tst_mainview/tst_mainview.pro (+6/-0)
tests/unit/unit.pro (+1/-0)
summary: |
- qtdeclarative5-u1db1.0 should not use ~/.local/share/Qt Project for - sqlite files + qtdeclarative5-u1db1.0 should not use ~/.local/share/Qt Project for db + files |
Changed in apparmor-easyprof-ubuntu (Ubuntu Saucy): | |
status: | New → Triaged |
importance: | Undecided → High |
Changed in apparmor-easyprof-ubuntu (Ubuntu Saucy): | |
assignee: | nobody → Christian Dywan (kalikiana) |
description: | updated |
Changed in u1db-qt (Ubuntu Saucy): | |
assignee: | nobody → Christian Dywan (kalikiana) |
Changed in ubuntu-ui-toolkit: | |
status: | New → Fix Committed |
Changed in ubuntu-ui-toolkit: | |
status: | Fix Committed → Fix Released |
Changed in u1db-qt (Ubuntu Saucy): | |
status: | Confirmed → Fix Released |
Adding apparmor- easyprof- ubuntu task since a workaround to not block the app showdown was put in place.