← Back to team overview

touch-packages team mailing list archive

[Bug 1260101] Re: oxide accesses gsettings, but shouldn't

 

** Branch linked: lp:ubuntu/apparmor-easyprof-ubuntu

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor-easyprof-ubuntu
in Ubuntu.
https://bugs.launchpad.net/bugs/1260101

Title:
  oxide accesses gsettings, but shouldn't

Status in Oxide Webview:
  Triaged
Status in “apparmor-easyprof-ubuntu” package in Ubuntu:
  Fix Released

Bug description:
  Without the following dconf rules, there are apparmor denials when using Oxide:
    owner /run/user/[0-9]*/dconf/user rw,
    owner @{HOME}/.config/dconf/user r,

  gsettings is not supported in the SDK at this team and access to dconf
  is not allowed. Oxide appear to work ok without these rules, but the
  logs are noisy and will almost certainly lead to confusion.

  It is conjectured that this is for proxy settings. Indeed, stderr shows this:
  [1211/162140:WARNING:proxy_service.cc(890)] PAC support disabled because there is no system implementation

  We could silence the apparmor denials, but it is possible that we will
  support gsettings some day and more importantly, silencing these
  denials will make it difficult for people writing apps to diagnose
  that they shouldn't be using gsettings.

To manage notifications about this bug go to:
https://bugs.launchpad.net/oxide/+bug/1260101/+subscriptions