[Pkg-chromium-maint] Bug#786909: Bug#786909: chromium: unconditionally downloads binary blob
corsac at debian.org
Wed May 27 11:25:32 UTC 2015
On mer., 2015-05-27 at 13:23 +0200, Vincent Bernat wrote:
> Same here. I did delete the extension path but somehow Chromium seems to
> think it's still here (I have the same output as you except "Shared
> Module Platforms"). You can check if it is running using the task
> manager: from various bug reports, it is not hidden here. You can also
> disable it in chrome://settings in the "Search" section: "Enable Ok
> Google to start a voice search". Various bug reports exist to say that
> it may not prevent the extension from running.
> If it is not possible to disable it by default and make it appear in
> chrome://extensions, it would be better to not ship at all this
> extension (only the shared module seems to be downloaded, the remaining
> of the code seems to be still here).
Note that the binary blob is executed throught native client, which is
not enabled by default, so I /think/ you need explicit action from the
user (although if you enable NaCl for something else, then you might
enable stuff you actually don't want).
Having /home noexec won't help, since it's not run directly by the
system but by chromium.
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 473 bytes
Desc: This is a digitally signed message part
More information about the Pkg-chromium-maint