[Bug 1739531] [NEW] apport-collect SHOULD NOT collect gnome-shell command history and favorites

[fermulator]

Public bug reported:

In https://bugs.launchpad.net/ubuntu/+source/gnome-
shell/+bug/1739525/comments/4, I ran apport-collect for that bug report.

To my horror, it posted "org.gnome.shell command-history" and "favorites" in the "GsettingsChanges.txt"!
https://launchpadlibrarian.net/349970997/GsettingsChanges.txt

It's _completely_ reasonable to see:
 * enabled-extensions
 * org.gnome.shell.* diffs
 * org.gnome.desktop.* diffs

But it is _NOT_ acceptable (privacy reasons) to automatically harvest a
user's favorites in the gnome-shell, nor their command histories.

_IF_ we must harvest for bug-data gathering, it MUST come in a secure
mechanism that is private only to submitter + the assigned dev.

** Affects: apport (Ubuntu)
     Importance: Undecided
         Status: New


** Tags: apport privacy

** Description changed:

  In https://bugs.launchpad.net/ubuntu/+source/gnome-
  shell/+bug/1739525/comments/4, I ran apport-collect for that bug report.
  
- To my horror, it posted "org.gnome.shell command-history" in the "GsettingsChanges.txt"!
+ To my horror, it posted "org.gnome.shell command-history" and "favorites" in the "GsettingsChanges.txt"!
  https://launchpadlibrarian.net/349970997/GsettingsChanges.txt
  
  It's _completely_ reasonable to see:
-  * enabled-extensions
-  * org.gnome.shell.* diffs
-  * org.gnome.desktop.* diffs
+  * enabled-extensions
+  * org.gnome.shell.* diffs
+  * org.gnome.desktop.* diffs
  
  But it is _NOT_ acceptable (privacy reasons) to automatically harvest a
  user's favorites in the gnome-shell, nor their command histories.
  
  _IF_ we must harvest for bug-data gathering, it MUST come in a secure
  mechanism that is private only to submitter + the assigned dev.

** Summary changed:

- apport-collect SHOULD NOT collect gnome-shell command history
+ apport-collect SHOULD NOT collect gnome-shell command history and favorites

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to apport in Ubuntu.
https://bugs.launchpad.net/bugs/1739531

Title:
  apport-collect SHOULD NOT collect gnome-shell command history and
  favorites

Status in apport package in Ubuntu:
  New

Bug description:
  In https://bugs.launchpad.net/ubuntu/+source/gnome-
  shell/+bug/1739525/comments/4, I ran apport-collect for that bug
  report.

  To my horror, it posted "org.gnome.shell command-history" and "favorites" in the "GsettingsChanges.txt"!
  https://launchpadlibrarian.net/349970997/GsettingsChanges.txt

  It's _completely_ reasonable to see:
   * enabled-extensions
   * org.gnome.shell.* diffs
   * org.gnome.desktop.* diffs

  But it is _NOT_ acceptable (privacy reasons) to automatically harvest
  a user's favorites in the gnome-shell, nor their command histories.

  _IF_ we must harvest for bug-data gathering, it MUST come in a secure
  mechanism that is private only to submitter + the assigned dev.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apport/+bug/1739531/+subscriptions