gdm-guest-session has no formal dependency on apparmor

Bug #310776 reported by Marc D.
2
Affects Status Importance Assigned to Milestone
gdm-guest-session (Ubuntu)
Fix Released
Undecided
Unassigned

Bug Description

Binary package hint: gdm-guest-session

Version: 0.7

Description: Ubuntu jaunty (development branch)
Release: 9.04

gdm-guest-session relies on apparmor for some of its advertised “security” (notably, home directories not being browsable in the guest session). When apparmor is removed, gdm-guest-session still works, but home directories can be browsed by the guest user, only relying on filesystem permissions.

gdm-guest-session has no formal dependency on apparmor. Because much of its functionality is lost without apparmor, gdm-guest-session must at least recommend apparmor, maybe even depend on it.

David D Lowe (flimm)
Changed in gdm-guest-session:
status: New → Confirmed
Revision history for this message
Marc D. (koshy) wrote :

I made up my mind: This should be a recommendation and the package description should be phrased more carefully, the reason being that gdm-guest-session is still useful and still reasonably secure even without apparmor.

Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package gdm-guest-session - 0.8

---------------
gdm-guest-session (0.8) jaunty; urgency=low

  [ David D Lowe ]
  * Added apparmor dependency. (LP: #310776)
  * /etc/skel is copied to guest's home directory. (LP: #296993)
  * Added guest-prepare.sh script, a script that end users can modify to
    set guest's default settings.
  * Disactivated user-dirs-gtk, jockey-gtk and update-manager services, they
    are redundant for the guest user. (LP: #255557)

  [ Martin Pitt ]
  * Merge guest-prepare.sh back into guest-session-setup.sh, no reason
    to split it in two.

 -- Martin Pitt <email address hidden> Tue, 27 Jan 2009 11:56:26 +0100

Changed in gdm-guest-session:
status: Confirmed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.