friends-service should be dropped from 14.10 framework and disallowed by the SDK

Bug #1340869 reported by Steve Langasek
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
qtcreator-plugin-ubuntu
Fix Released
High
Zoltan Balogh
apparmor-easyprof-ubuntu (Ubuntu)
Fix Released
Undecided
Jamie Strandboge
click-reviewers-tools (Ubuntu)
Fix Released
Undecided
Zoltan Balogh
qtcreator-plugin-ubuntu (Ubuntu)
Fix Released
Undecided
Unassigned

Bug Description

'friends' does not actually fit the phone security model (any app with access can impersonate the user with impunity on social media). friends-app is being dropped from the phone, and friends-service should also be dropped from the framework definition for 14.10.

We need to keep friends-service on the phone as long as we support the 14.04 framework, but it should not be allowed by the SDK when targeting 14.10.

Zoltan Balogh (bzoltan)
Changed in qtcreator-plugin-ubuntu:
importance: Undecided → High
status: New → Confirmed
Revision history for this message
Zoltan Balogh (bzoltan) wrote :

I have sent an MR to the click-reviewers-tools to give a packaging error in the SDK when the Friends API is used: https://code.launchpad.net/~bzoltan/click-reviewers-tools/deprecated_friends/+merge/226650

Changed in click-reviewers-tools (Ubuntu):
status: New → In Progress
Zoltan Balogh (bzoltan)
Changed in qtcreator-plugin-ubuntu:
status: Confirmed → Fix Committed
assignee: nobody → Zoltan Balogh (bzoltan)
Changed in click-reviewers-tools (Ubuntu):
assignee: nobody → Zoltan Balogh (bzoltan)
Changed in click-reviewers-tools (Ubuntu):
status: In Progress → Fix Committed
Changed in apparmor-easyprof-ubuntu (Ubuntu):
status: New → In Progress
assignee: nobody → Jamie Strandboge (jdstrand)
Changed in apparmor-easyprof-ubuntu (Ubuntu):
status: In Progress → Fix Committed
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package apparmor-easyprof-ubuntu - 1.2.10

---------------
apparmor-easyprof-ubuntu (1.2.10) utopic; urgency=medium

  * remove ubuntu/1.2/friends policy group and adjust autopackagetest
    accordingly (LP: #1340869)
  * ubuntu/calendar: com.canonical.indicator.datetime.AlarmProperties should
    also be allowed on the org.freedesktop.DBus.Properties interface
    (LP: #1342708)
 -- Jamie Strandboge <email address hidden> Wed, 16 Jul 2014 11:15:29 -0500

Changed in apparmor-easyprof-ubuntu (Ubuntu):
status: Fix Committed → Fix Released
Zoltan Balogh (bzoltan)
Changed in click-reviewers-tools (Ubuntu):
status: Fix Committed → Fix Released
Changed in qtcreator-plugin-ubuntu:
status: Fix Committed → Fix Released
Changed in qtcreator-plugin-ubuntu (Ubuntu):
status: New → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.