-
Bug
-
Resolution: Fixed
-
Blocker
-
Flounder, Guppy
Applications and services of AGL are launched with full capabilities. This have to be removed. Applications must run without capabilities.
- is blocked by
-
SPEC-2045 improve recipes setup for systemd/udev/smack
- Closed
# | Subject | Branch | Project | Status | CR | V |
---|---|---|---|---|---|---|
18825,5 | smack-system-setup: Update udev rules | master | AGL/meta-agl | Status: MERGED | +2 | +1 |
18827,5 | connman+bluez5: Update rights for smack systems | master | AGL/meta-agl | Status: MERGED | +2 | +1 |
18833,5 | linux-agl-4.14: Backport of Smack patch for cgroup2 | master | AGL/meta-agl | Status: MERGED | +2 | +1 |
18835,5 | linux-renesas: Add smack patches to R-Car | master | AGL/meta-agl | Status: MERGED | +2 | +1 |
18871,2 | afm-unit: Restore removal of capabilities | master | src/app-framework-main | Status: MERGED | +2 | 0 |
19929,3 | af-main: bump to latest revision | master | AGL/meta-agl | Status: MERGED | +2 | +1 |
19989,3 | af-main: Bump version GUPPY | guppy | AGL/meta-agl | Status: MERGED | +2 | +1 |
21156,2 | afm-unit: Restore removal of capabilities | master | src/app-framework-main | Status: MERGED | +2 | 0 |
21157,4 | af-main: Drop capabilities of applications | sandbox/jobol/wip-mu | AGL/meta-agl | Status: MERGED | 0 | 0 |
21164,1 | af-main: Drop capabilities of applications | master | AGL/meta-agl | Status: ABANDONED | 0 | 0 |
21169,1 | Add permission to use display | master | apps/agl-service-windowmanager | Status: MERGED | +2 | +1 |
21170,1 | Add permission to use display | master | apps/homescreen | Status: MERGED | +2 | +1 |
21171,1 | Add permission to use display | master | apps/dashboard | Status: MERGED | +2 | +1 |
21172,1 | Add permission to use display | master | apps/hvac | Status: MERGED | +2 | +1 |
21173,1 | Add permission to use display | master | apps/launcher | Status: MERGED | +2 | +1 |
21174,1 | Add permission to use display | master | apps/mediaplayer | Status: MERGED | +2 | +1 |
21175,1 | Add permission to use display | master | apps/mixer | Status: MERGED | +2 | +1 |
21176,1 | Add permission to use display | master | apps/phone | Status: MERGED | +2 | +1 |
21177,1 | Add permission to use display | master | apps/radio | Status: MERGED | +2 | +1 |
21178,1 | Add permission to use display | master | apps/settings | Status: MERGED | +2 | +1 |
21218,3 | agl-service-windowmanager: Permission use display | master | AGL/meta-agl-devel | Status: MERGED | +2 | +1 |
21219,1 | Improve management of the group display | master | AGL/meta-agl | Status: ABANDONED | 0 | 0 |
21393,1 | Remove unused definitions | master | src/app-framework-main | Status: MERGED | +2 | 0 |
21394,1 | Use definition of afm_prefix | master | src/app-framework-main | Status: MERGED | +2 | 0 |
21395,1 | afm-unit conf: Remove useless tests | master | src/app-framework-main | Status: MERGED | +2 | 0 |
21397,1 | afm-unit: Simplify the Makefile | master | src/app-framework-main | Status: MERGED | +2 | 0 |
21398,1 | afm-unit.conf: cleanup of generation | master | src/app-framework-main | Status: MERGED | +2 | 0 |
21399,1 | gitignore: Add ignore of EXTERNALSRC's artifacts | master | src/app-framework-main | Status: MERGED | +2 | 0 |
21400,2 | afm-unit.conf: Refactor its generation | master | src/app-framework-main | Status: MERGED | +2 | 0 |
21633,1 | Require to run at platform scope | master | apps/agl-service-can-low-level | Status: MERGED | +2 | +1 |
21634,1 | Require to run at platform scope | master | apps/agl-service-audio-4a | Status: MERGED | +2 | +1 |
21635,1 | Add permissions to manage audio | master | apps/agl-service-audio-4a | Status: MERGED | +2 | +1 |
21636,1 | Request permission :system:capability:keep-all | master | apps/agl-service-audio-4a | Status: MERGED | +2 | +1 |
21637,1 | Require to run at platform scope | master | apps/agl-service-geoclue | Status: MERGED | +2 | +1 |
21638,1 | Add permission to use display and audio | master | apps/agl-service-mediaplayer | Status: MERGED | +2 | +1 |
21639,1 | Require to run at platform scope | master | apps/agl-service-unicens | Status: MERGED | +2 | +1 |
21640,1 | Require to run at platform scope | master | apps/agl-service-platform-info | Status: MERGED | +2 | +1 |
21646,3 | af-main: Improve readability | master | AGL/meta-agl | Status: MERGED | +2 | +1 |
21647,3 | af-main: Drop capabilities of applications | master | AGL/meta-agl | Status: MERGED | +2 | +1 |
21648,3 | Improve management of the group display | master | AGL/meta-agl | Status: MERGED | +2 | +1 |
21649,3 | af-main: Add dependency to m4 and sed | master | AGL/meta-agl | Status: MERGED | +2 | +1 |
21650,4 | af-main: Remove afm-user-daemon and bump version | master | AGL/meta-agl | Status: MERGED | +2 | +1 |
21650,4 | af-main: Remove afm-user-daemon and bump version | master | AGL/meta-agl | Status: MERGED | +2 | +1 |
21656,8 | agl-service-ca-low-level: run at platform scope | master | AGL/meta-agl | Status: MERGED | +2 | +1 |