[Bug 1489489] Re: The org.freedesktop.DBus.GetConnectionAppArmorSecurityContext() method is deprecated
Sergio Cazzolato
1489489 at bugs.launchpad.net
Wed Aug 2 18:18:41 UTC 2023
** Changed in: snapd
Importance: Undecided => Medium
** Changed in: snapd
Status: New => Confirmed
--
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to dbus in Ubuntu.
https://bugs.launchpad.net/bugs/1489489
Title:
The org.freedesktop.DBus.GetConnectionAppArmorSecurityContext() method
is deprecated
Status in Ubuntu Online Accounts API:
Confirmed
Status in snapd:
Confirmed
Status in apparmor package in Ubuntu:
Fix Released
Status in biometryd package in Ubuntu:
New
Status in content-hub package in Ubuntu:
Confirmed
Status in dbus package in Ubuntu:
Triaged
Status in deepin-notifications package in Ubuntu:
New
Status in lomiri-download-manager package in Ubuntu:
New
Status in mediascanner2 package in Ubuntu:
Fix Released
Status in signon-apparmor-extension package in Ubuntu:
Fix Released
Status in ubuntu-system-settings-online-accounts package in Ubuntu:
Fix Released
Bug description:
When upstream D-Bus merged the AppArmor mediation patches, they did
not like the GetConnectionAppArmorSecurityContext() bus method.
Instead, they decided to expose a peer's AppArmor context using the
org.freedesktop.DBus.GetConnectionCredentials() bus method. All users
of the GetConnectionAppArmorSecurityContext() method should switch to
the GetConnectionCredentials() method as soon as possible so that
Ubuntu can drop the patch that implements
GetConnectionAppArmorSecurityContext() by the time 16.04 LTS is
released.
In order to switch to the new method, you'll need to depend on
libapparmor 2.10 or newer.
I'll be adding example code that illustrates how to switch from
GetConnectionAppArmorSecurityContext() to GetConnectionCredentials().
content-hub, media-hub, mediascanner2, signon-apparmor-extension,
ubuntu-download-manager, and ubuntu-system-settings-online-accounts
all need to transition to the new method of obtaining the AppArmor
label.
The apparmor package should be updated to drop the libapparmor-
mention-dbus-method-in-getcon-man.patch patch and the dbus package
should be updated to drop the aa-get-connection-apparmor-security-
context.patch patch.
To manage notifications about this bug go to:
https://bugs.launchpad.net/online-accounts-api/+bug/1489489/+subscriptions
More information about the foundations-bugs
mailing list