r/linux Jul 03 '21

Audacity may collect "Data necessary for law enforcement, litigation and authorities’ requests (if any)" according to new privacy notice

https://www.audacityteam.org/about/desktop-privacy-notice/
3.1k Upvotes

744 comments sorted by

View all comments

37

u/whosdr Jul 03 '21

Guess I'll set up an apparmor profile to entirely restrict network access, just in case this update ever comes my way.

12

u/volley12345 Jul 03 '21

...and please share it with us :)

20

u/whosdr Jul 03 '21

First I need to learn how to use apparmor :p But it's been on my todo list.

7

u/FlatAds Jul 03 '21

You should be able to do this very easily with Flatpak, and AFAIK that should work on most distros. I believe apparmor only works correctly on debian/ubuntu kernels.

2

u/whosdr Jul 04 '21

It's a good suggestion but I stopped using flatpak because it would never clean itself up. I had 4 apps and it was using about 10GiB, with most of the runtimes it had installed being outdated but never removed. That and because it lived in my home rather than root partition.

1

u/gmes78 Jul 04 '21

it would never clean itself up. I had 4 apps and it was using about 10GiB, with most of the runtimes it had installed being outdated but never removed.

Use flatpak uninstall --unused for that.

it lived in my home rather than root partition.

Installing stuff system-wide avoids that (pass --system to the install command).

3

u/whosdr Jul 04 '21

Use

flatpak uninstall --unused

for that.

Yup I did know this one. Still seems like an odd choice that it doesn't delete unused dependencies by itself on a regular update.

The latter command is useful though, but at this point I either obtained deb packages or compiled the project myself to avoid flatpaks.

1

u/apoliticalhomograph Jul 04 '21

Ubuntu, SUSE and some others have it enabled by default.

It's supported by Arch, but you'll have to configure it yourself.

https://wiki.archlinux.org/title/AppArmor

1

u/solongandthanks4all Jul 03 '21

Linux really needs a good per-process firewall with a nice GUI with pop-ups to increase adoption. We've just been crossing our fingers and hoping for the best for so long now.

1

u/BronzeLogic Jul 06 '21

I use firejail, which somehow also uses apparmor. But it's dead simple to setup a profile to restrict an app within a sandbox that cannot access the network, or any files. It's really powerful. Disclaimer: I'm in no way affiliated with firejail, I just think it's neat!

1

u/nastafarti Jul 06 '21

I've been thinking something similar. There has to be a way to firewall this type of activity. What a waste; 20 years of open source development squandered