lp:ubuntu/lucid-security/gdm-guest-session

Created by Ubuntu Package Importer and last modified
Get this branch:
bzr branch lp:ubuntu/lucid-security/gdm-guest-session
Members of Ubuntu branches can upload to this branch. Log in for directions.

Branch merges

Related bugs

Related blueprints

Branch information

Owner:
Ubuntu branches
Review team:
Ubuntu Development Team
Status:
Mature

Recent revisions

17. By Marc Deslauriers

* SECURITY UPDATE: Guest session arbitrary file deletion (LP: #953044)
  - gdm/guest-session-cleanup.sh: Use find/xargs with 0 separators
    instead of spaces. Thanks to Martin Pitt for the fix.
  - Thanks to Ryan Lortie for reporting this issue.
  - CVE-2012-0943

16. By Didier Roche-Tolomelli

[ Martin Pitt ]
* gdm/guest-session-cleanup.sh: Only remove users whose home directory is in
  /tmp/. (side-issue in LP #485731)

[ Didier Roche ]
* enable switching to guest session corresponsding to current one (ie UNE if
  you are in UNE session and gnome if you are in GNOME session) (LP: #562908)
* debian/control:
  - bump gdm dependency to 2.30.0-0ubuntu5
  - Bumped Standards-Version to 3.8.4 (no changes necessary).
  - update Vcs-Bzr

15. By Martin Pitt

[ Marc Deslauriers ]
* gdm/guest-session-setup.sh: create the dmrc file in the gdm cache
  location so the proper session gets started (LP: #449712)
* gdm/guest-session-cleanup.sh: remove guest user directory from gdm
  cache directory to prevent user modifications from staying

[ Martin Pitt ]
* debian/control: Update Vcs-Bzr: for changed branch owner (now
  ~ubuntu-desktop).
* Bumped Standards-Version to 3.8.3 (no changes necessary).
* gdm/guest-session-setup.sh: Don't fail if /var/cache/gdm/guest already
  exists. (Regression from Marc's fix above)

14. By Martin Pitt

gdm/guest-session-setup.sh: Update gconfiscation for disabling screensaver
to the GNOME 2.28 world. Thanks to Robert Ancell! (LP: #425952)

13. By Martin Pitt

* Add guest-restricted.desktop: New X session which runs the
  AppArmor-protected Xsession script wrapper.
* Makefile: Install above file.
* gdm/guest-session-setup.sh: Set "guest-restricted" as Xsession for guest.
  (LP: #425793)

12. By Martin Pitt

* gdm/guest-session-cleanup.sh: Ignore errors from /tmp/ cleanup, so that we
  still attempt to delete the temporary user.
* gdm/guest-session-setup.sh: Use gconftool-2, "gconftool" does not exist
  any more.
* gdm/guest-session-launch: Replace gdmflexiserver call (which only worked
  with the old gdm) with dbus-send invocation which works with the current
  karmic gdm. Bump gdm dependency accordingly. (LP: #404870)
  NOTE: This currently does not enforce AppArmor restrictions, this will be
  fixed in a subsequent update, see LP #425793.

11. By Martin Pitt

[ Roberto C. Morano ]
* apparmor/gdm-guest-session: added execution permissions to '/tmp/**'
 (Files and directories anywhere underneath /tmp) which hosts guest user
 home directory. (LP: #383892)

[ Martin Pitt ]
* debian/control: Update Vcs-Bzr:, branch moved from ~pitti/+junk to proper
  Ubuntu package branch.

10. By Martin Pitt

Drop AppArmor to Recommends. (LP: #346088)

9. By Martin Pitt

[ David D Lowe ]
* Added apparmor dependency. (LP: #310776)
* /etc/skel is copied to guest's home directory. (LP: #296993)
* Added guest-prepare.sh script, a script that end users can modify to
  set guest's default settings.
* Disactivated user-dirs-gtk, jockey-gtk and update-manager services, they
  are redundant for the guest user. (LP: #255557)

[ Martin Pitt ]
* Merge guest-prepare.sh back into guest-session-setup.sh, no reason
  to split it in two.

8. By Martin Pitt

* apparmor/gdm-guest-session: Generously allow flock() for most file system
  parts, too. OpenOffice needs locking in /usr/lib/openoffice/program/, for
  example, and does not start otherwise. (LP: #277418)
* gdm/guest-session-cleanup.sh: Remove guest owned leftovers in /tmp.
  (LP: #289554)
* apparmor/gdm-guest-session: Allow mmap for /tmp and /var/tmp, as required
  by F-Spot. (LP: #288682)

Branch metadata

Branch format:
Branch format 7
Repository format:
Bazaar repository format 2a (needs bzr 1.16 or later)
Stacked on:
lp:ubuntu/precise/gdm-guest-session
This branch contains Public information 
Everyone can see this information.

Subscribers