signon-ui:
* No CVEs (new project), no initscript/upstart jobs, dbus services, setuid,
fscaps usage, sudo/su/pkexec or cron jobs. Hardening options are present.
* Uses standard C++ 'new' and no uses of dangerous C-style strings/memory
operations.
* has a testsuite with no errors in the build
A very high-level review shows signon-ui is suitable for main except for
its use of QtWebKit. While QtWebKit is currently in main, no supported
applications in main actively use it and Ubuntu Security is discouraging
its use because we cannot properly support two separate webkit libraries
in Ubuntu. I have talked to the UOA team via email with options for
moving forward.
Can someone from the UOA team comment on how signon-ui's use of QtWebKit
will be supported in stable releases of Ubuntu?
Thanks!
** Changed in: signon-ui (Ubuntu)
Status: New => In Progress
** Changed in: signon-ui (Ubuntu)
Assignee: Jamie Strandboge (jdstrand) => (unassigned)
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1029549
Title:
[MIR] online-accounts and friends
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/account-plugins/+bug/1029549/+subscriptions
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
