Ubuntu
apparmor-easyprof-ubuntu package

All apps need access to the D-Bus clipboard

Bug #1372579 reported by Daniel d'Andrada
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
apparmor-easyprof-ubuntu (Ubuntu)
Fix Released
Undecided
Unassigned

Bug Description

All apps need to have send and receive access to the following:

Service: "com.canonical.QtMir",
Object: "/com/canonical/QtMir/Clipboard",
Interface: "com.canonical.QtMir.Clipboard",

It will be provided by the /usr/bin/unity8 binary.

Revision history for this message
Daniel d'Andrada (dandrader) wrote :

The MP that adds that D-Bus clipboard (which solves bug 1367816 and bug 1367814) is here:
https://code.launchpad.net/~dandrader/qtmir/dbusClipboard/+merge/235501

Revision history for this message
Jamie Strandboge (jdstrand) wrote :

Does this rule look ok:

# Mir clicpboard
dbus (receive, send)
      bus=session
      path="/com/canonical/QtMir/Clipboard"
      interface="com.canonical.QtMir.Clipboard",

To test, pick two confined applications: one that should paste into the clipboard and another to copy out of the clipboard. Then, open the corresponding apparmor profile in /var/lib/apparmor/profiles/click_... for the applications, add the above before the file '}', save them and then run: 'sudo apparmor_parser -r /var/lib/apparmor/profiles/click_...' for the profiles you edited. Now, try the clipboard operations.

Revision history for this message
Daniel d'Andrada (dandrader) wrote :

Yeah, it's fine. thanks!

Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package apparmor-easyprof-ubuntu - 1.2.27

---------------
apparmor-easyprof-ubuntu (1.2.27) utopic; urgency=medium

  * ubuntu/ubuntu-{sdk,webapp}: all apps can access the Mir clipboard
    (LP: #1372579). Note, LP: 1371170 will be fixed in a future update
  * ubuntu/push-notification-client: explit deny (with auditing) for access
    to the Mir clipboard (background apps should not have access)
  * ubuntu/ubuntu-scope-network: explicit deny (with auditing) for access
    to the Mir clipboard (scopes should not have access)
  * pending/ubuntu-scope-local-content: bring up to date with changes to
    ubuntu-scope-network
 -- Jamie Strandboge <email address hidden> Tue, 23 Sep 2014 09:07:00 -0500

Changed in apparmor-easyprof-ubuntu (Ubuntu):
status: New → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.