[OT] Re: App-Armor profile for Skype with XFCE

[Christoph Wickert]

Am Donnerstag, den 24.02.2011, 13:06 +0100 schrieb Al Bogner:
> Am Do, 24 Feb 2011 11:50:29 CET schrieb Christoph Wickert:
> 
> > Am Donnerstag, den 24.02.2011, 00:04 +0100 schrieb Al Bogner:
> > > Am Mi, 23 Feb 2011 23:16:00 CET schrieb Yves-Alexis Perez:
> > > 
> > > > On Wed, 2011-02-23 at 22:20 +0100, Al Bogner wrote:
> > > > > I found this app-armor-profile below for skype:
> > > > > 
> > > > > What must be added, that it works with XFCE?
> > > > > 
> > > > 
> > > > I don't think skype nor apparmor has anything to do with Xfce.
> > > 
> > > I don't know, but I don't think so:
> > > 
> > > Look at this e.g.:
> > > 
> > > 
> > >   /etc/kde4/share/config/kdebugrc r,
> > >   /etc/kde4rc r,
> > > 
> > >   owner /var/tmp/kdecache-*/icon-cache.kcache mrw,
> > >   owner /var/tmp/kdecache-*/kpc/kde-icon-cache.data mrw,
> > >   owner /var/tmp/kdecache-*/kpc/kde-icon-cache.index mrw,

These are files for KDE. Where is the counterpart for Xfce?

> > > These are entries for KDE, so I think there is something similar
> > > which should be configured for XFCE.
> > 
> > You mean for Skype. What part of Xfce gets blocked by app-amor?
> 
> I don't think, that Skype blocks, something, but:

As long as nothing of Xfce gets blocked or should be blocked, this is
not an Xfce problem.

> http://en.opensuse.org/SDB:Skype
> Privacy and security
> A lot of people do not want to run Skype because it tries to collect
> data from your system which it shouldn't do. It tries to read your
> Firefox profile for whatever reason (said to be because of
> autodetecting proxy settings but could be more).
> 
> To avoid such things you can use AppArmor to protect your system.

So you want AppAmor to block some parts of Skype? This has nothing to do
with Xfce, it will exactly the same with GNOME, KDE or whatever desktop
you run. Please address your questions to the AppArmor people or your
distribution.

Regards,
Christoph