desktop-packages team mailing list archive

[Tyler Hicks <tyhicks@xxxxxxxxxxxxx>]

I can confirm this on Wily. If you click "clear the usage data" from the
Security & Privacy, then the document no longer shows up in the dash but
it seems like adding an excluded directory does not cause the cache to
be invalidated.

I don't see how this could allow attackers to cross privilege boundaries
or directly cause loss of data/privacy so I'm going to go ahead and make
this public so that more developers can have access to the report.

** Changed in: unity-control-center (Ubuntu)
       Status: New => Confirmed

** Changed in: unity-control-center (Ubuntu)
   Importance: Undecided => Low

** Information type changed from Private Security to Public Security

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to unity-control-center in Ubuntu.
https://bugs.launchpad.net/bugs/1477787

Title:
  Files moved to "Exclude"ed folders still exist in Dash

Status in unity-control-center package in Ubuntu:
  Confirmed

Bug description:
  Go to System Settings -> Security & Privacy -> Files & Applications
  Add the Public directory to the Exclude list.

  Now choose a document that shows up in the dash. 
  Move that document to the Public directory.
  Open the dash.

  Expected:
  File is no longer visible or searchable in the dash

  Actual:
  File is visible in dash.
  "Show in Folder" opens the Public directory, revealing the file.

  Marking this as a security issue as it's part of the Security &
  Privacy settings.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/unity-control-center/+bug/1477787/+subscriptions