Add profile for Skype in basic installation

Bug #226624 reported by Андрей Калинин
16
This bug affects 1 person
Affects Status Importance Assigned to Milestone
apparmor (Ubuntu)
Fix Released
Wishlist
Unassigned

Bug Description

http://forum.skype.com/index.php?showtopic=95261 - This is a description of bag from official cite.
Briefly: skype scanning private user information like passwords, web-history, hardware information and more... To limit unwanted actions need to use apparmor.
In attach apparmor profile for skype I use.
P.S. sorry for my english

Tags: apparmor skype

Related branches

Revision history for this message
Андрей Калинин (prize2step) wrote :
Changed in apparmor:
importance: Undecided → Wishlist
Revision history for this message
riu (stanray) wrote :
Kees Cook (kees)
Changed in apparmor (Ubuntu):
status: New → Triaged
Revision history for this message
Jamie Strandboge (jdstrand) wrote :

This won't be shipped by Ubuntu in enforcing mode by default because Ubuntu doesn't ship skype. If Canonical decides to ship it in -partner, we will likely not be able to ship an enforcing profile due to contractual agreements. However, I am going to add a modified profile to /usr/share/doc/apparmor-profiles/extras that people can use if they want.

Changed in apparmor (Ubuntu):
status: Triaged → Won't Fix
Revision history for this message
Jamie Strandboge (jdstrand) wrote :

Actually, a profile is already shipped there. I have updated it to include the additional files needed here.

Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package apparmor - 2.3.1+1403-0ubuntu28

---------------
apparmor (2.3.1+1403-0ubuntu28) lucid; urgency=low

  [ Jamie Strandboge ]
  * update skype profile in extras. Based on work by Андрей Калинин.
    (LP: #226624)
  * abstractions/ubuntu-browsers: add opera and icecat (LP: #432778)
  * abstractions/ubuntu-browsers: add epiphany (epiphany-browser and
    epiphany-webkit were already present, but the recent changes in
    epiphany packaging require /usr/bin/epiphany) (LP: #472952)
  * usr.sbin.dnsmasq: allow pidfiles for /var/run/dnsmasq*.pid (LP: #445818)
  * abstractions/gnome: allow access to ~/.themes (LP: #460125)
  * abstractions/kde: allow access to /etc/kde4rc and /usr/bin/kde4-config
    (LP: #447006)

  [ Marc Deslauriers ]
  * utils/Subdomain.pm: don't skip reading profiles that are also in the
    cache directory (LP: #446449)
  * utils/Subdomain.pm: correctly parse PUxr modes
  * utils/Subdomain.pm: support include directories

 -- Jamie Strandboge <email address hidden> Wed, 04 Nov 2009 11:02:27 -0600

Changed in apparmor (Ubuntu):
status: Won't Fix → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.