| 2017-02-09 08:12:15 |
Tyler Hicks |
bug |
|
|
added bug |
| 2017-02-09 08:12:32 |
Tyler Hicks |
bug task added |
|
apparmor (Ubuntu) |
|
| 2017-02-09 08:12:40 |
Tyler Hicks |
apparmor (Ubuntu): importance |
Undecided |
High |
|
| 2017-02-24 19:00:35 |
Tyler Hicks |
bug |
|
|
added subscriber Robert Ancell |
| 2017-02-24 19:01:14 |
Tyler Hicks |
bug task added |
|
lightdm |
|
| 2017-02-24 19:04:18 |
Tyler Hicks |
attachment added |
|
pstree-yakkety.txt https://bugs.launchpad.net/lightdm/+bug/1663157/+attachment/4826102/+files/pstree-yakkety.txt |
|
| 2017-02-24 19:05:25 |
Tyler Hicks |
attachment added |
|
pstree-zesty.txt https://bugs.launchpad.net/lightdm/+bug/1663157/+attachment/4826103/+files/pstree-zesty.txt |
|
| 2017-04-04 21:14:29 |
Robert Ancell |
bug |
|
|
added subscriber Will Cooke |
| 2017-04-04 21:15:38 |
Robert Ancell |
bug |
|
|
added subscriber Martin Pitt |
| 2017-04-04 21:17:38 |
Robert Ancell |
bug |
|
|
added subscriber Sebastien Bacher |
| 2017-05-05 15:54:48 |
Will Cooke |
bug |
|
|
added subscriber Iain Lane |
| 2017-05-08 21:28:29 |
Robert Ancell |
nominated for series |
|
Ubuntu Artful |
|
| 2017-05-08 21:28:29 |
Robert Ancell |
bug task added |
|
apparmor (Ubuntu Artful) |
|
| 2017-05-08 21:28:29 |
Robert Ancell |
bug task added |
|
lightdm (Ubuntu Artful) |
|
| 2017-05-08 21:28:29 |
Robert Ancell |
nominated for series |
|
Ubuntu Yakkety |
|
| 2017-05-08 21:28:29 |
Robert Ancell |
bug task added |
|
apparmor (Ubuntu Yakkety) |
|
| 2017-05-08 21:28:29 |
Robert Ancell |
bug task added |
|
lightdm (Ubuntu Yakkety) |
|
| 2017-05-08 21:28:29 |
Robert Ancell |
nominated for series |
|
Ubuntu Zesty |
|
| 2017-05-08 21:28:29 |
Robert Ancell |
bug task added |
|
apparmor (Ubuntu Zesty) |
|
| 2017-05-08 21:28:29 |
Robert Ancell |
bug task added |
|
lightdm (Ubuntu Zesty) |
|
| 2017-05-08 21:28:42 |
Robert Ancell |
lightdm (Ubuntu Zesty): importance |
Undecided |
High |
|
| 2017-05-08 21:28:43 |
Robert Ancell |
lightdm (Ubuntu Yakkety): importance |
Undecided |
High |
|
| 2017-05-08 21:28:48 |
Robert Ancell |
lightdm (Ubuntu Artful): status |
New |
Triaged |
|
| 2017-05-08 21:28:50 |
Robert Ancell |
lightdm (Ubuntu Zesty): status |
New |
Triaged |
|
| 2017-05-08 21:28:52 |
Robert Ancell |
lightdm (Ubuntu Yakkety): status |
New |
Triaged |
|
| 2017-05-08 22:13:45 |
Robert Ancell |
attachment added |
|
lightdm-yakkety-lp1663157.debdiff https://bugs.launchpad.net/ubuntu/+source/lightdm/+bug/1663157/+attachment/4873709/+files/lightdm-yakkety-lp1663157.debdiff |
|
| 2017-05-08 22:14:07 |
Robert Ancell |
attachment added |
|
lightdm-zesty-lp1663157.debdiff https://bugs.launchpad.net/ubuntu/+source/lightdm/+bug/1663157/+attachment/4873710/+files/lightdm-zesty-lp1663157.debdiff |
|
| 2017-05-10 13:38:04 |
Will Cooke |
bug |
|
|
added subscriber Jamie Bennett |
| 2017-05-11 04:07:40 |
Robert Ancell |
attachment added |
|
lightdm-zesty-lp1663157.debdiff https://bugs.launchpad.net/ubuntu/+source/lightdm/+bug/1663157/+attachment/4874963/+files/lightdm-zesty-lp1663157.debdiff |
|
| 2017-05-11 17:43:05 |
Tyler Hicks |
cve linked |
|
2017-8900 |
|
| 2017-05-11 23:00:28 |
Launchpad Janitor |
lightdm (Ubuntu Yakkety): status |
Triaged |
Fix Released |
|
| 2017-05-11 23:15:16 |
Launchpad Janitor |
lightdm (Ubuntu Zesty): status |
Triaged |
Fix Released |
|
| 2017-05-11 23:17:05 |
Tyler Hicks |
bug task deleted |
apparmor (Ubuntu Artful) |
|
|
| 2017-05-11 23:17:07 |
Tyler Hicks |
bug task deleted |
apparmor (Ubuntu Zesty) |
|
|
| 2017-05-11 23:17:22 |
Tyler Hicks |
bug task deleted |
apparmor (Ubuntu Yakkety) |
|
|
| 2017-05-11 23:17:32 |
Tyler Hicks |
apparmor (Ubuntu): status |
New |
Invalid |
|
| 2017-05-11 23:19:43 |
Tyler Hicks |
description |
Processes launched under a lightdm guest session are not confined by the /usr/lib/lightdm/lightdm-guest-session AppArmor profile in Ubuntu 16.10 and Ubuntu Zesty. The processes are actually unconfined.
The simple test case is to log into a guest session, launch a terminal with ctrl-alt-t, and run the following command:
$ cat /proc/self/attr/current
Expected output, as seen in Ubuntu 16.04 LTS, is:
/usr/lib/lightdm/lightdm-guest-session (enforce)
Running the command inside of an Ubuntu 16.10 and newer guest session results in:
unconfined |
Processes launched under a lightdm guest session are not confined by the /usr/lib/lightdm/lightdm-guest-session AppArmor profile in Ubuntu 16.10, Ubuntu 17.04, and Ubuntu Artful (current dev release). The processes are unconfined.
The simple test case is to log into a guest session, launch a terminal with ctrl-alt-t, and run the following command:
$ cat /proc/self/attr/current
Expected output, as seen in Ubuntu 16.04 LTS, is:
/usr/lib/lightdm/lightdm-guest-session (enforce)
Running the command inside of an Ubuntu 16.10 and newer guest session results in:
unconfined |
|
| 2017-05-11 23:19:50 |
Tyler Hicks |
information type |
Private Security |
Public Security |
|
| 2017-05-11 23:23:56 |
Launchpad Janitor |
branch linked |
|
lp:lightdm/1.20 |
|
| 2017-05-11 23:26:59 |
Launchpad Janitor |
branch linked |
|
lp:lightdm/1.22 |
|
| 2017-05-11 23:31:49 |
Launchpad Janitor |
branch linked |
|
lp:lightdm |
|
| 2017-05-12 00:21:55 |
Ubuntu Foundations Team Bug Bot |
tags |
|
patch |
|
| 2017-05-12 00:22:12 |
Tyler Hicks |
lightdm (Ubuntu Artful): assignee |
|
Robert Ancell (robert-ancell) |
|
| 2017-05-12 00:22:30 |
Tyler Hicks |
lightdm: assignee |
|
Robert Ancell (robert-ancell) |
|
| 2017-05-12 00:22:33 |
Tyler Hicks |
lightdm (Ubuntu Yakkety): assignee |
|
Tyler Hicks (tyhicks) |
|
| 2017-05-12 00:22:34 |
Tyler Hicks |
lightdm (Ubuntu Zesty): assignee |
|
Tyler Hicks (tyhicks) |
|
| 2017-05-12 15:06:22 |
Jordan |
bug |
|
|
added subscriber Jordan |
| 2017-05-12 15:07:41 |
Bryan Quigley |
bug |
|
|
added subscriber Bryan Quigley |
| 2017-05-16 01:04:12 |
Mathew Hodson |
bug |
|
|
added subscriber Mathew Hodson |
| 2017-05-16 02:04:14 |
Jeremy Bícha |
bug |
|
|
added subscriber Jeremy Bicha |
| 2017-05-16 03:02:56 |
Rocko |
bug |
|
|
added subscriber Rocko |
| 2017-05-16 18:14:00 |
Steve Langasek |
lightdm (Ubuntu Artful): milestone |
|
ubuntu-17.05 |
|
| 2017-05-16 18:14:00 |
Steve Langasek |
lightdm (Ubuntu Artful): assignee |
Robert Ancell (robert-ancell) |
Balint Reczey (rbalint) |
|
| 2017-05-19 21:15:40 |
Brett Randall |
bug |
|
|
added subscriber Brett Randall |
| 2017-05-22 17:04:34 |
Balint Reczey |
lightdm (Ubuntu Artful): status |
Triaged |
In Progress |
|
| 2017-06-19 07:16:05 |
Launchpad Janitor |
lightdm (Ubuntu Artful): status |
In Progress |
Fix Released |
|
| 2017-06-23 02:14:38 |
Mathew Hodson |
bug task deleted |
apparmor (Ubuntu) |
|
|
| 2017-06-23 02:14:45 |
Mathew Hodson |
removed subscriber Mathew Hodson |
|
|
|
| 2017-08-18 11:38:47 |
sudodus |
bug |
|
|
added subscriber sudodus |
| 2017-11-14 08:30:11 |
Gunnar Hjalmarsson |
bug |
|
|
added subscriber Gunnar Hjalmarsson |
| 2017-11-14 08:30:23 |
Gunnar Hjalmarsson |
removed subscriber Gunnar Hjalmarsson |
|
|
|
| 2017-11-14 08:30:40 |
Gunnar Hjalmarsson |
bug |
|
|
added subscriber Magezi Sagesse |
| 2017-11-16 14:49:35 |
Khurshid Alam |
bug |
|
|
added subscriber Khurshid Alam |
| 2017-11-16 14:49:52 |
Khurshid Alam |
removed subscriber Khurshid Alam |
|
|
|
| 2018-01-11 15:49:37 |
Balint Reczey |
lightdm (Ubuntu): status |
Fix Released |
Triaged |
|
| 2018-01-12 11:06:55 |
Balint Reczey |
lightdm (Ubuntu): status |
Triaged |
Fix Released |
|
| 2018-02-15 19:39:34 |
Francis Ginther |
tags |
patch |
id-5a57962350afc7d4aa391919 patch |
|
| 2018-03-06 08:45:41 |
Robert Ancell |
lightdm: assignee |
Robert Ancell (robert-ancell) |
|
|
| 2018-08-19 15:13:19 |
Pablo Fontoura |
bug |
|
|
added subscriber Pablo Fontoura |
| 2018-10-28 08:36:00 |
ulrich |
bug |
|
|
added subscriber ulrich |
| 2019-01-12 07:47:29 |
Jarno Suni |
bug |
|
|
added subscriber Jarno Suni |
| 2019-04-06 15:47:08 |
Markus Kwaśnicki |
bug |
|
|
added subscriber Markus Kwaśnicki |
| 2019-05-03 12:42:12 |
Michel-Ekimia |
bug |
|
|
added subscriber Michel-Ekimia |
| 2019-08-27 06:41:39 |
Karl Maier |
bug |
|
|
added subscriber Karl Maier |
| 2021-01-13 15:48:13 |
Msd |
bug |
|
|
added subscriber Msd |
| 2023-05-12 15:34:58 |
Bryan Quigley |
removed subscriber Bryan Quigley |
|
|
|
