Ubuntu
libaccounts-glib package

  1. Bug #1029549
  2. Comment #24

Comment 24 for bug 1029549

Revision history for this message
Jamie Strandboge (jdstrand) wrote :

signon-ui:
 * No CVEs (new project), no initscript/upstart jobs, dbus services, setuid, fscaps usage, sudo/su/pkexec or cron jobs. Hardening options are present.
 * Uses standard C++ 'new' and no uses of dangerous C-style strings/memory operations.
 * has a testsuite with no errors in the build

A very high-level review shows signon-ui is suitable for main except for its use of QtWebKit. While QtWebKit is currently in main, no supported applications in main actively use it and Ubuntu Security is discouraging its use because we cannot properly support two separate webkit libraries in Ubuntu. I have talked to the UOA team via email with options for moving forward.

Can someone from the UOA team comment on how signon-ui's use of QtWebKit will be supported in stable releases of Ubuntu?

Thanks!