← Back to team overview

touch-packages team mailing list archive

[Bug 1381713] Re: Support policy query interface for file

 

Adding media-hub, mediascanner2 and thumbnailer to this bug since there
is now a way to query apparmor for file access instead of having to
hardcode APP_IDs (see the attached files). This query interface will
improve going forward, but this should be able to clean up the code for
various trusted helpers. Please add any that I may have missed. :)

** Also affects: media-hub
   Importance: Undecided
       Status: New

** Also affects: mediascanner2
   Importance: Undecided
       Status: New

** Also affects: thumbnailer
   Importance: Undecided
       Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor in Ubuntu.
https://bugs.launchpad.net/bugs/1381713

Title:
  Support policy query interface for file

Status in AppArmor Linux application security framework:
  Triaged
Status in Media Hub:
  New
Status in Media Scanner v2:
  New
Status in Thumbnail generator for all kinds of files:
  New
Status in apparmor package in Ubuntu:
  Fix Released

Bug description:
  This bug tracks the work needed to support querying if a label can
  access a file. This is particularly useful with trusted helpers where
  an application requests access to a file and the trusted helper does
  something with it. For example, on Ubuntu when an app wants to play a
  music file, it (eventually) goes through the media-hub service. The
  media-hub service should be able to query if the app's policy has
  access to the file.

To manage notifications about this bug go to:
https://bugs.launchpad.net/apparmor/+bug/1381713/+subscriptions