** Summary changed: - should have apparmor profile for gnome-thumbnail-font + gnome thumbnailers should have an apparmor profile
** Also affects: totem (Ubuntu) Importance: Undecided Status: New ** Changed in: totem (Ubuntu) Importance: Undecided => Wishlist ** Changed in: totem (Ubuntu) Status: New => Triaged ** Description changed: Binary package hint: gnome-control-center - Nautilus normally uses gnome-thumbnail-font to provide font previews. Eg: + Nautilus normally uses gnome-thumbnail-font, to provide font previews. Eg: $ gconftool-2 -g /desktop/gnome/thumbnailers/application@x-font-ttf/enable true $ gconftool-2 -g /desktop/gnome/thumbnailers/application@x-font-ttf/command gnome-thumbnail-font %u %o If a flaw is discovered in a font library or Gnome and a user navigates to a directory that has a malicious font file, gnome-tumbnail-font could be used to execute arbitrary code, write out to files or leak information. Providing an apparmor profile for gnome-thumbnail-font would be a good step towards proactively protecting the user from this sort of attack. + + nautilus also use totem-video-thumbnail and evince-thumbnailer. evince- + thumbnailer has an apparmor profile already. For images, nautilus uses + gdk-pixbuf routines via gnome-desktop, but these can be altered to use + evince-thumbnailer by installing schema files for these images. ** Also affects: gnome-desktop (Ubuntu) Importance: Undecided Status: New ** Changed in: gnome-desktop (Ubuntu) Importance: Undecided => Wishlist ** Changed in: gnome-desktop (Ubuntu) Status: New => Triaged -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/715874 Title: gnome thumbnailers should have an apparmor profile -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs