Bug#1066910: chromium: downloads non-free component libchromescreenai.so without asking

[Andres Salomon]

Control: tags -1 pending

On Fri, 15 Mar 2024 13:33:47 -0400 Andres Salomon <dilin...@queued.net> wrote:

Control: tags -1 bookworm trixie sid

On 3/15/24 06:57, Helmut Grohne wrote:
> Package: chromium
> Version: 122.0.6261.128-1
> Severity: serious

> ~/.config/chromium/screen_ai/*/libchromescreenai.so. Evidently, the
> source of this shared object is not in the chromium source package. I
> think the chromium package - being in main - should not download a
> shared object and run it without user confirmation.

> > In recent versions, chromium started downloading a file > > Helmut Thanks for reporting this! It looks like this is controlled with the enable_screen_ai_service, I'll test that & fix it in the next series of upload.

https://chromium.googlesource.com/chromium/src/+/3e0233c43b5798a3cacc2592a755feb51c63266a%5E%21/

But I have another solution that seems to work:

https://salsa.debian.org/chromium-team/chromium/-/commit/ee2d7017ed0b99a27f5b763ee782fdd8a0999660

Sadly they're in the process of removing enable_screen_ai_service (because of course they are):

OpenPGP_0x645D0247C36E7637.asc
Description: OpenPGP public key

OpenPGP_signature.asc
Description: OpenPGP digital signature