desktop-packages team mailing list archive

[Launchpad Bug Tracker <1392380@xxxxxxxxxxxxxxxxxx>]

This bug was fixed in the package ubuntu-touch-meta - 1.200

---------------
ubuntu-touch-meta (1.200) 14.09; urgency=medium

  * Refreshed dependencies (LP: #1413622), (LP: #1392380)
  * Added signon-apparmor-extension
  * Added ubuntu-keyboard-azerbaijani
  * Added ubuntu-keyboard-bosnian
  * Added ubuntu-keyboard-catalan
  * Added ubuntu-keyboard-croatian
  * Added ubuntu-keyboard-emoji
 -- Oliver Grawert <ogra@xxxxxxxxxx>   Fri, 23 Jan 2015 22:04:23 +0100

** Changed in: ubuntu-touch-meta (Ubuntu RTM)
       Status: New => Fix Released

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to signon in Ubuntu.
https://bugs.launchpad.net/bugs/1392380

Title:
  OA gives out all tokens to any app

Status in the base for Ubuntu mobile products:
  Confirmed
Status in signon package in Ubuntu:
  Fix Released
Status in signon source package in Utopic:
  Confirmed
Status in signon source package in Vivid:
  Fix Released
Status in signon package in Ubuntu RTM:
  In Progress
Status in ubuntu-touch-meta package in Ubuntu RTM:
  Fix Released

Bug description:
  The attached app will steal all your tokens. All it takes is the
  "accounts" permission in the apparmor file.

  Here's the code: https://pastebin.canonical.com/120398/

To manage notifications about this bug go to:
https://bugs.launchpad.net/canonical-devices-system-image/+bug/1392380/+subscriptions