touch-packages team mailing list archive

[Alberto Mardegan <1376445@xxxxxxxxxxxxxxxxxx>]

@cwayne18: all plugins based on our OAuth code already add "unconfined"
to the ACL. So the problem is probably different, in that case.

As @jdstrand suggested in the ML, your scopes are not running under the
"unconfined" profile (even though they are practically unconfined), so
we need to figure out why they are not in the ACL, and how to add them.

As suggested by Rodney, I'll also hack "unconfined" into the signon-
apparmor plugin to let processes carrying that profile to access any
account. But please remember that this is a temporary hack which I'd
eventually like to remove, so please update the U1 plugin anyway.

** Also affects: signon-apparmor-extension
   Importance: Undecided
       Status: New

** Changed in: signon-apparmor-extension
     Assignee: (unassigned) => Alberto Mardegan (mardy)

** Changed in: signon-apparmor-extension
   Importance: Undecided => High

** Changed in: signon-apparmor-extension
       Status: New => In Progress

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to ubuntuone-credentials in
Ubuntu.
https://bugs.launchpad.net/bugs/1376445

Title:
  Addition of signon-apparmor-extension causes token lookup problems

Status in The Savilerow project:
  New
Status in ACL for signond, AppArmor backend:
  In Progress
Status in “ubuntuone-credentials” package in Ubuntu:
  Triaged
Status in “ubuntuone-credentials” package in Ubuntu RTM:
  Triaged

Bug description:
  As of image ~264 of ubuntu-touch, the signon-apparmor-extension
  package is included. As a result, apps like pay-ui cannot find the
  token any longer, and are not being notified that they are not allowed
  to access the token. The following error appears in the payui log
  file:

  2014-10-01 19:15:51,550 - DEBUG -
  ../../../../lib/SignOn/authsessionimpl.cpp 184 errorSlot
  QDBusError("com.google.code.AccountsSSO.SingleSignOn.Error.PermissionDenied",
  "Client has insuficient permissions to access the
  service.Method:getAuthSessionObjectPath")

To manage notifications about this bug go to:
https://bugs.launchpad.net/savilerow/+bug/1376445/+subscriptions