Details
-
Bug
-
Resolution: Fixed
-
Blocker
-
Flounder, Guppy
Description
Applications and services of AGL are launched with full capabilities. This have to be removed. Applications must run without capabilities.
Attachments
Issue Links
- is blocked by
-
-
- Closed
-
Gerrit Reviews
| # | Subject | Branch | Project | Status | CR | V |
|---|---|---|---|---|---|---|
| 18825,5 | smack-system-setup: Update udev rules | master | AGL/meta-agl | Status: MERGED | +2 | +1 |
| 18827,5 | connman+bluez5: Update rights for smack systems | master | AGL/meta-agl | Status: MERGED | +2 | +1 |
| 18833,5 | linux-agl-4.14: Backport of Smack patch for cgroup2 | master | AGL/meta-agl | Status: MERGED | +2 | +1 |
| 18835,5 | linux-renesas: Add smack patches to R-Car | master | AGL/meta-agl | Status: MERGED | +2 | +1 |
| 18871,2 | afm-unit: Restore removal of capabilities | master | src/app-framework-main | Status: MERGED | +2 | 0 |
| 19929,3 | af-main: bump to latest revision | master | AGL/meta-agl | Status: MERGED | +2 | +1 |
| 19989,3 | af-main: Bump version GUPPY | guppy | AGL/meta-agl | Status: MERGED | +2 | +1 |
| 21156,2 | afm-unit: Restore removal of capabilities | master | src/app-framework-main | Status: MERGED | +2 | 0 |
| 21157,4 | af-main: Drop capabilities of applications | sandbox/jobol/wip-mu | AGL/meta-agl | Status: MERGED | 0 | 0 |
| 21164,1 | af-main: Drop capabilities of applications | master | AGL/meta-agl | Status: ABANDONED | 0 | 0 |
| 21219,1 | Improve management of the group display | master | AGL/meta-agl | Status: ABANDONED | 0 | 0 |
| 21399,1 | gitignore: Add ignore of EXTERNALSRC's artifacts | master | src/app-framework-main | Status: MERGED | +2 | 0 |
| 21633,1 | Require to run at platform scope | master | apps/agl-service-can-low-level | Status: MERGED | +2 | +1 |
| 21634,1 | Require to run at platform scope | master | apps/agl-service-audio-4a | Status: MERGED | +2 | +1 |
| 21635,1 | Add permissions to manage audio | master | apps/agl-service-audio-4a | Status: MERGED | +2 | +1 |
| 21636,1 | Request permission :system:capability:keep-all | master | apps/agl-service-audio-4a | Status: MERGED | +2 | +1 |
| 21637,1 | Require to run at platform scope | master | apps/agl-service-geoclue | Status: MERGED | +2 | +1 |
| 21639,1 | Require to run at platform scope | master | apps/agl-service-unicens | Status: MERGED | +2 | +1 |
| 21640,1 | Require to run at platform scope | master | apps/agl-service-platform-info | Status: MERGED | +2 | +1 |
| 21646,3 | af-main: Improve readability | master | AGL/meta-agl | Status: MERGED | +2 | +1 |
| 21647,3 | af-main: Drop capabilities of applications | master | AGL/meta-agl | Status: MERGED | +2 | +1 |
| 21648,3 | Improve management of the group display | master | AGL/meta-agl | Status: MERGED | +2 | +1 |
| 21650,4 | af-main: Remove afm-user-daemon and bump version | master | AGL/meta-agl | Status: MERGED | +2 | +1 |
| 21656,8 | agl-service-ca-low-level: run at platform scope | master | AGL/meta-agl | Status: MERGED | +2 | +1 |