https://bugzilla.novell.com/show_bug.cgi?id=676638 https://bugzilla.novell.com/show_bug.cgi?id=676638#c0 Summary: [11.5] Please do security review of accountsservice (suse-dbus-unauthorized-service & polkit-unauthorized-privilege) Classification: openSUSE Product: openSUSE 11.4 Version: Factory Platform: Other OS/Version: Other Status: NEW Severity: Major Priority: P5 - None Component: GNOME AssignedTo: security-team@suse.de ReportedBy: vuntz@novell.com QAContact: qa@suse.de Found By: --- Blocker: --- Created an attachment (id=417309) --> (http://bugzilla.novell.com/attachment.cgi?id=417309) polkit policies GNOME 3 will depend on the accountsservice project, that provides dbus interface to manipulate some user data, using useradd, usermod and userdel. You can find the package in GNOME:Next. The package currently fails with this: accountsservice.i586: E: suse-dbus-unauthorized-service (Badness: 10000) /usr/share/dbus-1/system-services/org.freedesktop.Accounts.service accountsservice.i586: E: suse-dbus-unauthorized-service (Badness: 10000) /etc/dbus-1/system.d/org.freedesktop.Accounts.conf accountsservice.i586: I: polkit-unauthorized-privilege (Badness: 10000) org.freedesktop.accounts.user-administration accountsservice.i586: I: polkit-unauthorized-privilege (Badness: 10000) org.freedesktop.accounts.set-login-option accountsservice.i586: E: polkit-unauthorized-privilege (Badness: 10000) org.freedesktop.accounts.change-own-user-data -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.