Guest user can not execute files from its home

Bug #383892 reported by Roberto C. Morano
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Guadalinex
Fix Released
Low
Unassigned
gdm-guest-session (Ubuntu)
Fix Released
Medium
Martin Pitt
Declined for Intrepid by Martin Pitt
Declined for Jaunty by Martin Pitt
Declined for Karmic by Martin Pitt

Bug Description

Binary package hint: gdm-guest-session

Due to the apparmor profile loaded, when you use the guest session in an installed system (in live systems apparmor is disabled), you can not execute anything from your $HOME.

One of the consecuences that made me realize about this issue is that .desktops located in your $HOME will not be executed/rendered (no icon is showed), since they are not trusted by default.
They even do not get trusted for some reason when you double-click them and you are answered what to do with it (Execute/Trust/Cancel) , but that's another issue I'd have to research...
This happens because of the new behaviour of nautilus in response of the "virus" menace [1]

As solution, we can change the flags of the apparmor profile allowing user to exec files in /tmp/**. I attach a patch for it.

[1] http://<email address hidden>/msg15426.html

Revision history for this message
Roberto C. Morano (rcmorano) wrote :
Changed in guadalinex:
importance: Undecided → Low
milestone: none → final
Revision history for this message
Roberto C. Morano (rcmorano) wrote :

Added debdiff for development package (karmic).

Revision history for this message
Martin Pitt (pitti) wrote :

Thanks, Roberto!

Changed in gdm-guest-session (Ubuntu):
assignee: nobody → Martin Pitt (pitti)
status: New → In Progress
importance: Undecided → Medium
status: In Progress → Fix Committed
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package gdm-guest-session - 0.10

---------------
gdm-guest-session (0.10) karmic; urgency=low

  [ Roberto C. Morano ]
  * apparmor/gdm-guest-session: added execution permissions to '/tmp/**'
   (Files and directories anywhere underneath /tmp) which hosts guest user
   home directory. (LP: #383892)

  [ Martin Pitt ]
  * debian/control: Update Vcs-Bzr:, branch moved from ~pitti/+junk to proper
    Ubuntu package branch.

 -- Martin Pitt <email address hidden> Tue, 09 Jun 2009 17:16:25 +0200

Changed in gdm-guest-session (Ubuntu):
status: Fix Committed → Fix Released
Juanje Ojeda (juanje)
Changed in guadalinex:
status: New → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.