[Pkg-chromium-maint] Bug#786909: Bug#786909: chromium: unconditionally downloads binary blob

[Yves-Alexis Perez]

On mer., 2015-05-27 at 13:23 +0200, Vincent Bernat wrote:
> Same here. I did delete the extension path but somehow Chromium seems to
> think it's still here (I have the same output as you except "Shared
> Module Platforms"). You can check if it is running using the task
> manager: from various bug reports, it is not hidden here. You can also
> disable it in chrome://settings in the "Search" section: "Enable Ok
> Google to start a voice search". Various bug reports exist to say that
> it may not prevent the extension from running.
> 
> If it is not possible to disable it by default and make it appear in
> chrome://extensions, it would be better to not ship at all this
> extension (only the shared module seems to be downloaded, the remaining
> of the code seems to be still here).

Note that the binary blob is executed throught native client, which is
not enabled by default, so I /think/ you need explicit action from the
user (although if you enable NaCl for something else, then you might
enable stuff you actually don't want).

Having /home noexec won't help, since it's not run directly by the
system but by chromium.

Regards,
-- 
Yves-Alexis
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 473 bytes
Desc: This is a digitally signed message part
URL: <http://lists.alioth.debian.org/pipermail/pkg-chromium-maint/attachments/20150527/ad1de942/attachment-0001.sig>