ubuntu-sdk-bugs team mailing list archive

[Florian Boucault <florian.boucault@xxxxxxxxxxxxx>]

** Changed in: ubuntu-ui-toolkit
       Status: Fix Committed => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
SDK bug tracking, which is subscribed to ubuntu-ui-toolkit in Ubuntu.
https://bugs.launchpad.net/bugs/1224126

Title:
  qtdeclarative5-u1db1.0 should not use ~/.local/share/Qt Project for db
  files

Status in Ubuntu UI Toolkit:
  Fix Released
Status in “apparmor-easyprof-ubuntu” package in Ubuntu:
  Triaged
Status in “u1db-qt” package in Ubuntu:
  Confirmed
Status in “ubuntu-ui-toolkit” package in Ubuntu:
  Fix Released
Status in “apparmor-easyprof-ubuntu” source package in Saucy:
  Triaged
Status in “u1db-qt” source package in Saucy:
  Confirmed
Status in “ubuntu-ui-toolkit” source package in Saucy:
  Fix Released

Bug description:
  Similar to bug #1197051, qtdeclarative5-u1db1.0 stores its data files in locations like this:
  /home/phablet/.local/share/Qt Project/QtQmlViewer/ubuntu-tasks.db

  This results in AppArmor rules like the following:
  owner "@{HOME}/.local/share/Qt Project/QtQmlViewer/"
  owner "@{HOME}/.local/share/Qt Project/QtQmlViewer/*.db*" rwk,

  But these rules are too lenient and these paths need to be made
  application specific so that different apps using u1db-qt can't tamper
  with each other's data. Specifically: $XDG_DATA_HOME/<app pkgname>
  where '<app pkgname>' is the "name" field in the Click manifest (see
  bug #1197037 for details).

  com.ubuntu.developer.mdspencer.ubuntu-tasks is an app in the app store that is affected by this. It uses the following QML:
      U1db.Database {
          id: storage
          path: "ubuntu-tasks.db"
      }

  This needs to be fixed for 13.10 otherwise apps are not properly
  isolation under application confinement.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu-ui-toolkit/+bug/1224126/+subscriptions