ubuntu-phone team mailing list archive
-
ubuntu-phone team
-
Mailing list archive
-
Message #10040
Re: Addition of signon-apparmor-extension
On Thu, 2014-10-02 at 12:52 +0300, Alberto Mardegan wrote:
> By default, all our plugins add "unconfined" to the account's ACL as
> soon as the account is created, in order to allow all unconfined
> processes to use the account. But the UbuntuOne plugin was not doing that.
But how would adding "unconfined" on new account creation solve the
problem who already have accounts on the system? There's no way for us
to show an appropriate error message to the user, asking them to delete
their account and create a new one, because there's no way to
differentiate this error from a general system permissions problem. Why
can't the extension treat "unconfined" as the same as an empty ACL here?
It seems like this would be the best immediate solution, to me.
Follow ups
References