Ubuntu Permission Prompting
Talkat Linux Security Summit North America 2025 · on Thursday, 2025-06-26· at 11:55· Bluebird Ballroom (BBB) 3GH·
summary
Ubuntu 24.10 ships an experimental permission-prompting system that adds per-file and per-operation prompts for snaps only, mediating kernel AppArmor events through snapd orchestrates prompts and a user-space security center and prompt client. It records unique 64-bit prompt IDs, uses policy and object (FD) caches, and adds AppArmor tags to map events to higher-level capabilities. It already works for basic downloads but is noisy (multi-part downloads, frozen UIs like Firefox) and aims to confine legacy apps that can’t be rewritten for portals.
AI-written summary · about
chapters (9)
- 0:00Ubuntu permission prompting
- 3:15Ubuntu Core drives this
- 8:11How permission prompting works
- 15:11User-friendly security prompts
- 20:53AppArmor policy and caching
- 25:14Notification mechanisms
- 29:09Current issues and UX challenges
- 32:21Future improvements
- 37:45Community integration
related talks
50mImproving Unmodified Classic Application Confinement
23mNative messaging for strictly confined browsers
47mRestricting Unprivileged User Namespaces in Ubuntu
45mPrompt-Jacking: The Rise of a New Supply Chain Risk
17mAppArmor
55mWhat Use Is a Confined User Shell?
02h 01mPrompt Engineering and AI Red Teaming
41m"Mother, May I?" Asking for Permissions