Add apport hook to grab logs

Bug #431081 reported by Guillaume Desmottes
8
This bug affects 1 person
Affects Status Importance Assigned to Milestone
empathy (Ubuntu)
In Progress
Wishlist
Guillaume Desmottes

Bug Description

Binary package hint: empathy

For extra bug report love, the Empathy package could provide a Apport hook [1] which would grab logs from CM and Empathy (using the Debug interface) and attach them to the bug report.
As logs can contain sensitive data, such bug reports shouldn't be public by default.

[1] https://wiki.ubuntu.com/Apport/DeveloperHowTo#Package%20Hooks

Revision history for this message
Guillaume Desmottes (cassidy) wrote :

I started to work on this. Should have something ready soonish.

Changed in empathy (Ubuntu):
assignee: nobody → Guillaume Desmottes (cassidy)
Revision history for this message
Guillaume Desmottes (cassidy) wrote :

First version of the hook.
It warns user about potential private content of logs and ask him if he wants to attach them.

I think it would be better to offer an option to reduce the visibility of the bug and/or logs (or reduce it by default?).
Do you know if it's possible to:
a) reduce the visibility of the logs (for example only Ubuntu dev and the Telepathy team) can read them?
b) if not, to reduce the visibility of the whole bug report?

Revision history for this message
Sebastien Bacher (seb128) wrote :

is there any way we would strip the private content by default in an automatic way?

Revision history for this message
Guillaume Desmottes (cassidy) wrote :

Not really no.

Revision history for this message
Sebastien Bacher (seb128) wrote :

Settings as wishlist for now, that would require to have all bugs private by default and slow bug triage quite a lot to have triagers who have access to review those log, know what to make public and what can be sent upstream etc

Changed in empathy (Ubuntu):
importance: Undecided → Wishlist
Revision history for this message
Guillaume Desmottes (cassidy) wrote :

Could me imagine to have such bugs private but readable by the Telepathy team?

Or just have the logs attachement private but not the whole bug?

Revision history for this message
Sebastien Bacher (seb128) wrote :

having just the log private is not possible I think, limiting the access to the telepathy team should be possible but do you guys look to launchpad often enough that ubuntu bug triagers could rely on that?

Revision history for this message
Brian Curtis (bcurtiswx) wrote :

Since I am a member of the telepathy team and am in Bug Control I can personally make it a priority to look through the private empathy reports and check and remove private information. Is there a way I can get notified of private empathy reports from launchpad to my ubuntu e-mail address?

Revision history for this message
Guillaume Desmottes (cassidy) wrote :

Tbh, I personally don't think I'll have enough time (we are already flooded by upstream bug reports...) but if we can find few people willing to do the extra triaging job I think that's worth it; having logs will make our life much easier.

Revision history for this message
Sebastien Bacher (seb128) wrote :

> can get notified of private empathy reports from launchpad to my ubuntu e-mail address?

no, I think emails have not been judged as a secure media to send private datas

Could we change empathy to not display password and account infos in debug logs? Those are probably not required in most cases anyway

Changed in empathy (Ubuntu):
status: New → Confirmed
Revision history for this message
Guillaume Desmottes (cassidy) wrote :

Passwords are not displayed. But log can contain sensible data like your contacts jabber ID (or MSN, or...), the message you sent/receive, etc.
And we can't remove that without lossing lot of useful info from logs.

Revision history for this message
Vish (vish) wrote :

Setting bug as in-progress...

It just needs to be approved or a bit more tweaking, if Sebastien Bacher needs any more changes.

Changed in empathy (Ubuntu):
status: Confirmed → In Progress
Revision history for this message
Brian Curtis (bcurtiswx) wrote :

Since the apport hook won't let the logs contain any passwords, I think the apport hook should be allowed. Contacts addresses are important for debugging in cases for example a hyphen or dash or period in a username may cause issues.

Since apport reports are private by default, I can go through the private ones with the help of om26er and get thsoe triaged.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Bug attachments

Remote bug watches

Bug watches keep track of this bug in other bug trackers.