Bug#1089855: Window manager warnings should not log window titles

Josh Triplett josh at joshtriplett.org
Sat Dec 14 04:01:44 GMT 2024


Package: gnome-shell
Version: 47.2-1
Severity: normal
X-Debbugs-Cc: josh at joshtriplett.org

gnome-shell recently changed its window manager warning messages to
include the titles of windows. This logs potentially sensitive user
information in system log files.

Previous log message format:

Aug 13 10:06:05 o gnome-shell[1072]: Window manager warning: Ping serial 79896884 was reused for window W1, previous use was for window W128.

New log message format:

Dec 13 18:00:59 o gnome-shell[1120]: Window manager warning: Ping serial 35993321 was reused for window W1 (Facing the Git commit-ID collision catastrophe [LWN.net] — Mozilla Firefox), previous use was for window W33 (~).

Many user processes are careful to avoid logging potentially sensitive
information, and this breaks that expectation.

(I recognize that this is a tradeoff between user privacy and the
usefulness of log files.)

-- System Information:
Debian Release: trixie/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: arm64

Kernel: Linux 6.12.3-amd64 (SMP w/12 CPU threads; PREEMPT)
Locale: LANG=C.UTF-8, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages gnome-shell depends on:
ii  dconf-gsettings-backend [gsettings-backend]  0.40.0-4+b3
ii  gir1.2-accountsservice-1.0                   23.13.9-7
ii  gir1.2-adw-1                                 1.6.2-1
ii  gir1.2-atk-1.0                               2.54.0-1
ii  gir1.2-atspi-2.0                             2.54.0-1
ii  gir1.2-freedesktop                           1.82.0-2
ii  gir1.2-gcr-4                                 4.3.0-1
ii  gir1.2-gdesktopenums-3.0                     47.1-1
ii  gir1.2-gdkpixbuf-2.0                         2.42.12+dfsg-1+b1
ii  gir1.2-gdm-1.0                               47.0-3
ii  gir1.2-geoclue-2.0                           2.7.2-1
ii  gir1.2-glib-2.0                              2.82.3-2
ii  gir1.2-gnomebg-4.0                           44.1-1
ii  gir1.2-gnomebluetooth-3.0                    47.1-1
ii  gir1.2-gnomedesktop-4.0                      44.1-1
ii  gir1.2-graphene-1.0                          1.10.8-4
ii  gir1.2-gstreamer-1.0                         1.24.10-2
ii  gir1.2-gtk-4.0                               4.16.7+ds-1
ii  gir1.2-gweather-4.0                          4.4.4-1
ii  gir1.2-ibus-1.0                              1.5.31-1
ii  gir1.2-mutter-15                             47.3-2
ii  gir1.2-nm-1.0                                1.50.0-1+b1
ii  gir1.2-nma4-1.0                              1.10.6-5
ii  gir1.2-pango-1.0                             1.55.0+ds-3
ii  gir1.2-polkit-1.0                            125-2
ii  gir1.2-rsvg-2.0                              2.59.2+dfsg-1
ii  gir1.2-soup-3.0                              3.6.1-1
ii  gir1.2-upowerglib-1.0                        1.90.6-2
ii  gnome-control-center                         1:47.2-2
ii  gnome-settings-daemon                        47.2-1
ii  gnome-shell-common                           47.2-1
ii  gsettings-desktop-schemas                    47.1-1
ii  gstreamer1.0-pipewire                        1.2.7-1
ii  libatk-bridge2.0-0t64                        2.54.0-1
ii  libatk1.0-0t64                               2.54.0-1
ii  libc6                                        2.40-4
ii  libcairo2                                    1.18.2-2
ii  libecal-2.0-3                                3.54.2-1
ii  libedataserver-1.2-27t64                     3.54.2-1
ii  libgcr-4-4                                   4.3.0-1
ii  libgdk-pixbuf-2.0-0                          2.42.12+dfsg-1+b1
ii  libgirepository-1.0-1                        1.82.0-2
ii  libgjs0g                                     1.82.1-1
ii  libgles2                                     1.7.0-1+b2
ii  libglib2.0-0t64                              2.82.3-2
ii  libglib2.0-bin                               2.82.3-2
ii  libgnome-autoar-0-0                          0.4.5-1
ii  libgnome-desktop-4-2t64                      44.1-1
ii  libgraphene-1.0-0                            1.10.8-4
ii  libgtk-4-1                                   4.16.7+ds-1
ii  libical3t64                                  3.0.18-1+b1
ii  libjson-glib-1.0-0                           1.10.6+ds-1
ii  libmutter-15-0                               47.3-2
ii  libnm0                                       1.50.0-1+b1
ii  libpango-1.0-0                               1.55.0+ds-3
ii  libpipewire-0.3-0t64                         1.2.7-1
ii  libpolkit-agent-1-0                          125-2
ii  libpolkit-gobject-1-0                        125-2
ii  libpulse-mainloop-glib0                      17.0+dfsg1-1
ii  libpulse0                                    17.0+dfsg1-1
ii  libsecret-1-0                                0.21.4-3
ii  libsystemd0                                  257-2
ii  libx11-6                                     2:1.8.10-2
ii  libxext6                                     2:1.3.4-1+b2
ii  libxfixes3                                   1:6.0.0-2+b2
ii  python3                                      3.12.7-1
ii  tecla                                        47.0-1

Versions of packages gnome-shell recommends:
ii  bolt                                  0.9.8-1
ii  evolution-data-server                 3.54.2-1
ii  gdm3                                  47.0-3
pn  gnome-browser-connector               <none>
ii  gnome-menus                           3.36.0-1.1+b3
ii  gnome-user-docs                       47.2-1
pn  ibus                                  <none>
pn  iio-sensor-proxy                      <none>
ii  josh-provides [gnome-remote-desktop]  209
pn  power-profiles-daemon                 <none>
pn  switcheroo-control                    <none>
ii  unzip                                 6.0-28

Versions of packages gnome-shell suggests:
ii  gir1.2-malcontent-0          0.12.0-1.1+b1
pn  gir1.2-telepathyglib-0.12    <none>
pn  gir1.2-telepathylogger-0.2   <none>
ii  gnome-shell-extension-prefs  47.2-1

Versions of packages gnome-session depends on:
ii  adwaita-icon-theme        47.0-2
ii  fonts-cantarell           0.303.1-2
ii  gnome-session-bin         47.0.1-1
ii  gnome-session-common      47.0.1-1
ii  gnome-settings-daemon     47.2-1
ii  xdg-desktop-portal-gnome  47.1-3

Versions of packages gnome-session recommends:
ii  fonts-inter-variable    4.0+ds-2
pn  gnome-session-xsession  <none>

Versions of packages gnome-session suggests:
ii  desktop-base   13.0.0~pre1
ii  gnome-keyring  46.2-1

Versions of packages gnome-settings-daemon depends on:
ii  gnome-settings-daemon-common  47.2-1
ii  gsettings-desktop-schemas     47.1-1
ii  libasound2t64                 1.2.12-1+b1
ii  libc6                         2.40-4
ii  libcairo2                     1.18.2-2
ii  libcanberra-gtk3-0            0.30-17+b1
ii  libcanberra0                  0.30-17+b1
ii  libcolord2                    1.4.7-1+b2
ii  libcups2t64                   2.4.10-2
ii  libfontconfig1                2.15.0-1.1+b1
ii  libgck-2-2                    4.3.0-1
ii  libgcr-4-4                    4.3.0-1
ii  libgdk-pixbuf-2.0-0           2.42.12+dfsg-1+b1
ii  libgeoclue-2-0                2.7.2-1
ii  libgeocode-glib-2-0           3.26.3-6+b3
ii  libglib2.0-0t64               2.82.3-2
ii  libgnome-desktop-3-20t64      44.1-1
ii  libgtk-3-0t64                 3.24.43-4
ii  libgudev-1.0-0                238-5+b1
ii  libgweather-4-0t64            4.4.4-1
ii  libmm-glib0                   1.22.0-3+b2
ii  libnm0                        1.50.0-1+b1
ii  libnotify4                    0.8.3-1+b2
ii  libp11-kit0                   0.25.5-2+b1
ii  libpam-systemd [logind]       257-2
ii  libpango-1.0-0                1.55.0+ds-3
ii  libpangocairo-1.0-0           1.55.0+ds-3
ii  libpolkit-gobject-1-0         125-2
ii  libpulse-mainloop-glib0       17.0+dfsg1-1
ii  libpulse0                     17.0+dfsg1-1
ii  libspa-0.2-bluetooth          1.2.7-1
ii  libsystemd0                   257-2
ii  libupower-glib3               1.90.6-2
ii  libwacom9                     2.13.0-1
ii  libwayland-client0            1.23.0-1+b1
ii  libx11-6                      2:1.8.10-2
ii  libxext6                      2:1.3.4-1+b2
ii  libxfixes3                    1:6.0.0-2+b2
ii  libxi6                        2:1.8.2-1
ii  pipewire-audio                1.2.7-1

Versions of packages gnome-settings-daemon recommends:
pn  iio-sensor-proxy   <none>
ii  pipewire-audio     1.2.7-1
ii  pkexec             125-2
ii  x11-xserver-utils  7.7+10+b1

Versions of packages gnome-settings-daemon suggests:
pn  usbguard  <none>

Versions of packages libgjs0g depends on:
pn  gir1.2-gio-2.0                                              <none>
ii  gir1.2-girepository-2.0                                     1.82.0-2
ii  gir1.2-glib-2.0 [gir1.2-gobject-2.0]                        2.82.3-2
ii  libc6                                                       2.40-4
ii  libcairo-gobject2                                           1.18.2-2
ii  libcairo2                                                   1.18.2-2
ii  libffi8                                                     3.4.6-1
ii  libgirepository-1.0-1 [libgirepository-1.0-1-with-libffi8]  1.82.0-2
ii  libglib2.0-0t64                                             2.82.3-2
ii  libmozjs-128-0                                              128.5.0-1
ii  libreadline8t64                                             8.2-5
ii  libstdc++6                                                  14.2.0-8
ii  libx11-6                                                    2:1.8.10-2

Versions of packages gnome-shell is related to:
ii  libegl-mesa0 [libegl-vendor]  24.2.8-1
ii  libgl1-mesa-dri               24.2.8-1
ii  libglx-mesa0 [libglx-vendor]  24.2.8-1

-- no debconf information


More information about the pkg-gnome-maintainers mailing list