Comment 12 for bug 1392380

Just to add some more information in order to have a more clear idea of the seriousness of this bug: accounts which are created when the signon-apparmor-extension is installed will work fine: apps won't be able to abuse them.

This bug only affects the accounts which were created when the extension was not installed: even if the extension gets installed later on, the ACL checks will be bypassed and any app can get access to any account.

Fixing this bug will make all accounts (regardless of when they were created) be protected by the ACL once the signon-apparmor-extension is installed.