Details
-
Bug
-
Resolution: Fixed
-
Blocker
-
Flounder, Guppy
Description
Applications and services of AGL are launched with full capabilities. This have to be removed. Applications must run without capabilities.
Attachments
Issue Links
- is blocked by
-
SPEC-2045 improve recipes setup for systemd/udev/smack
-
- Closed
-
Gerrit Reviews
# | Subject | Branch | Project | Status | CR | V |
---|---|---|---|---|---|---|
18825,5 | smack-system-setup: Update udev rules | master | AGL/meta-agl | Status: MERGED | +2 | +1 |
18827,5 | connman+bluez5: Update rights for smack systems | master | AGL/meta-agl | Status: MERGED | +2 | +1 |
18833,5 | linux-agl-4.14: Backport of Smack patch for cgroup2 | master | AGL/meta-agl | Status: MERGED | +2 | +1 |
18835,5 | linux-renesas: Add smack patches to R-Car | master | AGL/meta-agl | Status: MERGED | +2 | +1 |
18871,2 | afm-unit: Restore removal of capabilities | master | src/app-framework-main | Status: MERGED | +2 | 0 |
19929,3 | af-main: bump to latest revision | master | AGL/meta-agl | Status: MERGED | +2 | +1 |
19989,3 | af-main: Bump version GUPPY | guppy | AGL/meta-agl | Status: MERGED | +2 | +1 |
21156,2 | afm-unit: Restore removal of capabilities | master | src/app-framework-main | Status: MERGED | +2 | 0 |
21157,4 | af-main: Drop capabilities of applications | sandbox/jobol/wip-mu | AGL/meta-agl | Status: MERGED | 0 | 0 |
21164,1 | af-main: Drop capabilities of applications | master | AGL/meta-agl | Status: ABANDONED | 0 | 0 |
21219,1 | Improve management of the group display | master | AGL/meta-agl | Status: ABANDONED | 0 | 0 |
21399,1 | gitignore: Add ignore of EXTERNALSRC's artifacts | master | src/app-framework-main | Status: MERGED | +2 | 0 |
21633,1 | Require to run at platform scope | master | apps/agl-service-can-low-level | Status: MERGED | +2 | +1 |
21634,1 | Require to run at platform scope | master | apps/agl-service-audio-4a | Status: MERGED | +2 | +1 |
21635,1 | Add permissions to manage audio | master | apps/agl-service-audio-4a | Status: MERGED | +2 | +1 |
21636,1 | Request permission :system:capability:keep-all | master | apps/agl-service-audio-4a | Status: MERGED | +2 | +1 |
21637,1 | Require to run at platform scope | master | apps/agl-service-geoclue | Status: MERGED | +2 | +1 |
21639,1 | Require to run at platform scope | master | apps/agl-service-unicens | Status: MERGED | +2 | +1 |
21640,1 | Require to run at platform scope | master | apps/agl-service-platform-info | Status: MERGED | +2 | +1 |
21646,3 | af-main: Improve readability | master | AGL/meta-agl | Status: MERGED | +2 | +1 |
21647,3 | af-main: Drop capabilities of applications | master | AGL/meta-agl | Status: MERGED | +2 | +1 |
21648,3 | Improve management of the group display | master | AGL/meta-agl | Status: MERGED | +2 | +1 |
21650,4 | af-main: Remove afm-user-daemon and bump version | master | AGL/meta-agl | Status: MERGED | +2 | +1 |
21656,8 | agl-service-ca-low-level: run at platform scope | master | AGL/meta-agl | Status: MERGED | +2 | +1 |