[Bug 831404] New: mate : Security Review in view of mate inclusion

bugzilla_noreply＠novell.com

25 Jul 2013 25 Jul '13

15:56

https://bugzilla.novell.com/show_bug.cgi?id=831404 https://bugzilla.novell.com/show_bug.cgi?id=831404#c0 Summary: mate : Security Review in view of mate inclusion Classification: openSUSE Product: openSUSE Factory Version: 13.1 Milestone 3 Platform: All OS/Version: SUSE Other Status: NEW Severity: Normal Priority: P5 - None Component: Security AssignedTo: security-team@suse.de ReportedBy: p.drouand@gmail.com QAContact: qa-bugs@suse.de Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:22.0) Gecko/20100101 Firefox/22.0 Please review some executables with special permissions and services for mate components in X11:MATE:Factory project, in view of inclusion in OpenSUSE : mate-power-manager : polkit-cant-acquire-privilege (no:no:yes). Target file in package : org.mate.power.backlight-helper mate-keyring : * suse-pam-unauthorized-module Target file in package : pam_mate_keyring.so * permissions-file-setuid-bit Target file in package : /usr/bin/mate-keyring-daemon (setuid : 04755 ) mate-settings-daemon: * suse-dbus-unauthorized-service Target files in package : /etc/dbus-1/system.d/org.mate.SettingsDaemon.DateTimeMechanism.conf /usr/share/dbus-1/system-services/org.mate.SettingsDaemon.DateTimeMechanism.service * polkit-untracked-privilege (??:no:auth_admin_keep) Target files in package : org.mate.settingsdaemon.datetimemechanism.settimezone org.mate.settingsdaemon.datetimemechanism.settime org.mate.settingsdaemon.datetimemechanism.configurehwclock * polkit-cant-acquire-privilege Target files in package : org.mate.settingsdaemon.datetimemechanism.settimezone org.mate.settingsdaemon.datetimemechanism.settime org.mate.settingsdaemon.datetimemechanism.configurehwclock mate-applets: (need infos ) Reproducible: Always -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Show replies by thread

bugzilla_noreply＠novell.com

26 Jul 26 Jul

07:27

New subject: [Bug 831404] AUDIT-0: mate : Security Review in view of mate inclusion

https://bugzilla.novell.com/show_bug.cgi?id=831404 https://bugzilla.novell.com/show_bug.cgi?id=831404#c1 Marcus Meissner changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |meissner@suse.com Summary|mate : Security Review in |AUDIT-0: mate : Security |view of mate inclusion |Review in view of mate | |inclusion --- Comment #1 from Marcus Meissner 2013-07-26 07:27:30 UTC --- what is the deadline you would like to have for us to review ... as we have quite a number of audits in the queue? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

bugzilla_noreply＠novell.com

10:48

New subject: [Bug 831404] AUDIT-0: mate : Security Review in view of mate inclusion

https://bugzilla.novell.com/show_bug.cgi?id=831404 https://bugzilla.novell.com/show_bug.cgi?id=831404#c2 --- Comment #2 from Denisart Benjamin 2013-07-26 10:48:15 UTC --- We hope to see Mate in the next OpenSUSE release. Before the first alpha should a good deadline or it's too much early ? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

bugzilla_noreply＠novell.com

3 Aug 3 Aug

15:35

New subject: [Bug 831404] AUDIT-0: mate : Security Review in view of mate inclusion

https://bugzilla.novell.com/show_bug.cgi?id=831404 https://bugzilla.novell.com/show_bug.cgi?id=831404#c3 --- Comment #3 from Denisart Benjamin 2013-08-03 15:35:31 UTC --- Add infos mate-control-center: * polkit-untracked-privilege org.mate.randr.install-system-wide (no:no:auth_admin_keep) -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

bugzilla_noreply＠novell.com

5 Aug 5 Aug

13:20

New subject: [Bug 831404] AUDIT-0: mate : Security Review in view of mate inclusion

https://bugzilla.novell.com/show_bug.cgi?id=831404 https://bugzilla.novell.com/show_bug.cgi?id=831404#c Sebastian Krahmer changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 - None |P2 - High -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

bugzilla_noreply＠novell.com

13:26

New subject: [Bug 831404] AUDIT-0: mate : Security Review in view of mate inclusion

https://bugzilla.novell.com/show_bug.cgi?id=831404 https://bugzilla.novell.com/show_bug.cgi?id=831404#c4 --- Comment #4 from Sebastian Krahmer 2013-08-05 13:26:42 UTC --- For me the soonest possible date where I can start is August 19th. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

bugzilla_noreply＠novell.com

6 Aug 6 Aug

10:28

New subject: [Bug 831404] AUDIT-0: mate : Security Review in view of mate inclusion

https://bugzilla.novell.com/show_bug.cgi?id=831404 https://bugzilla.novell.com/show_bug.cgi?id=831404#c5 --- Comment #5 from Denisart Benjamin 2013-08-06 10:28:41 UTC --- It looks fine. Thanks for your reply and work -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

bugzilla_noreply＠novell.com

7 Aug 7 Aug

13:44

New subject: [Bug 831404] AUDIT-0: mate : Security Review in view of mate inclusion

https://bugzilla.novell.com/show_bug.cgi?id=831404 https://bugzilla.novell.com/show_bug.cgi?id=831404#c Sebastian Krahmer changed: What |Removed |Added ---------------------------------------------------------------------------- Severity|Normal |Major -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

bugzilla_noreply＠novell.com

19 Aug 19 Aug

14:41

New subject: [Bug 831404] AUDIT-0: mate : Security Review in view of mate inclusion

https://bugzilla.novell.com/show_bug.cgi?id=831404 https://bugzilla.novell.com/show_bug.cgi?id=831404#c6 --- Comment #6 from Sebastian Krahmer 2013-08-19 14:41:32 UTC --- /usr/bin/mate-keyring-daemon only needs CAP_IPC_LOCK, so we would prefer patching it to cope with this fscap, so the mode 04755 isnt necessary (the setuid code can be commented out then). -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

bugzilla_noreply＠novell.com

21 Aug 21 Aug

08:27

New subject: [Bug 831404] AUDIT-0: mate : Security Review in view of mate inclusion

https://bugzilla.novell.com/show_bug.cgi?id=831404 https://bugzilla.novell.com/show_bug.cgi?id=831404#c7 --- Comment #7 from Sebastian Krahmer 2013-08-21 08:27:38 UTC --- org.mate.power.backlight-helper seems to be the same as for GNOME, so no problem having the same polkit rules there -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

bugzilla_noreply＠novell.com

08:28

New subject: [Bug 831404] AUDIT-0: mate : Security Review in view of mate inclusion

https://bugzilla.novell.com/show_bug.cgi?id=831404 https://bugzilla.novell.com/show_bug.cgi?id=831404#c8 --- Comment #8 from Sebastian Krahmer 2013-08-21 08:28:41 UTC --- Any no/auth_admin rules for the rest should be fine too. So basically see comment#6 for necessary fixing. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

bugzilla_noreply＠novell.com

08:29

New subject: [Bug 831404] AUDIT-0: mate : Security Review in view of mate inclusion

https://bugzilla.novell.com/show_bug.cgi?id=831404 https://bugzilla.novell.com/show_bug.cgi?id=831404#c Sebastian Krahmer changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |NEEDINFO InfoProvider| |p.drouand@gmail.com -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

bugzilla_noreply＠novell.com

28 Aug 28 Aug

15:58

New subject: [Bug 831404] AUDIT-0: mate : Security Review in view of mate inclusion

https://bugzilla.novell.com/show_bug.cgi?id=831404 https://bugzilla.novell.com/show_bug.cgi?id=831404#c9 --- Comment #9 from Marcus Meissner 2013-08-28 15:58:35 UTC --- org.mate.power.backlight-helper: approved and added to polkit-default-privs pam_mate_keyring.so: pam module approved and added to rpmlint (did you look at that, Sebastian?) Open for us: - DBUS service for changing the time - mate-keyring-daemon setuid / fscaps -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

bugzilla_noreply＠novell.com

16:00

New subject: [Bug 831404] AUDIT-0: mate : Security Review in view of mate inclusion

https://bugzilla.novell.com/show_bug.cgi?id=831404 https://bugzilla.novell.com/show_bug.cgi?id=831404#c10 --- Comment #10 from Bernhard Wiedemann 2013-08-28 18:00:21 CEST --- This is an autogenerated message for OBS integration: This bug (831404) was mentioned in https://build.opensuse.org/request/show/196697 Factory / polkit-default-privs -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

bugzilla_noreply＠novell.com

29 Aug 29 Aug

17:00

New subject: [Bug 831404] AUDIT-0: mate : Security Review in view of mate inclusion

https://bugzilla.novell.com/show_bug.cgi?id=831404 https://bugzilla.novell.com/show_bug.cgi?id=831404#c11 --- Comment #11 from Bernhard Wiedemann 2013-08-29 19:00:11 CEST --- This is an autogenerated message for OBS integration: This bug (831404) was mentioned in https://build.opensuse.org/request/show/196801 Factory / rpmlint -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

bugzilla_noreply＠novell.com

6 Sep 6 Sep

11:25

New subject: [Bug 831404] AUDIT-0: mate : Security Review in view of mate inclusion

https://bugzilla.novell.com/show_bug.cgi?id=831404 https://bugzilla.novell.com/show_bug.cgi?id=831404#c12 --- Comment #12 from Denisart Benjamin 2013-09-06 11:25:47 UTC --- Decision has been take to drop mate-keyring for gnome-keyring. No need audit it anymore. Thanks again -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

bugzilla_noreply＠novell.com

10 Sep 10 Sep

11:36

New subject: [Bug 831404] AUDIT-0: mate : Security Review in view of mate inclusion

https://bugzilla.novell.com/show_bug.cgi?id=831404 https://bugzilla.novell.com/show_bug.cgi?id=831404#c13 --- Comment #13 from Sebastian Krahmer 2013-09-10 11:36:07 UTC --- Ok, so the review of the PAM module is also obsoleted then I guess, as its part of mate-keyring. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

bugzilla_noreply＠novell.com

11:36

New subject: [Bug 831404] AUDIT-0: mate : Security Review in view of mate inclusion

https://bugzilla.novell.com/show_bug.cgi?id=831404 https://bugzilla.novell.com/show_bug.cgi?id=831404#c14 Sebastian Krahmer changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |krahmer@suse.com --- Comment #14 from Sebastian Krahmer 2013-09-10 11:36:56 UTC --- can be closed or is anything left? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

bugzilla_noreply＠novell.com

16:17

New subject: [Bug 831404] AUDIT-0: mate : Security Review in view of mate inclusion

https://bugzilla.novell.com/show_bug.cgi?id=831404 https://bugzilla.novell.com/show_bug.cgi?id=831404#c15 --- Comment #15 from Denisart Benjamin 2013-09-10 16:17:04 UTC --- Marcus Meissner said : Open for us: - DBUS service for changing the time So I don't know if it can be close. Can someone tell me if it is fixed ? About PAM module, yes it is also obsoloted. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

bugzilla_noreply＠novell.com

12 Sep 12 Sep

17:11

New subject: [Bug 831404] AUDIT-0: mate : Security Review in view of mate inclusion

https://bugzilla.novell.com/show_bug.cgi?id=831404 https://bugzilla.novell.com/show_bug.cgi?id=831404#c16 --- Comment #16 from Denisart Benjamin 2013-09-12 17:11:33 UTC --- These two services files need review ever. /etc/dbus-1/system.d/org.mate.SettingsDaemon.DateTimeMechanism.conf /usr/share/dbus-1/system-services/org.mate.SettingsDaemon.DateTimeMechanism.service from mate-settings-daemon. I have finish to clean devel project and I really need that review to submit packages to Factory -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

bugzilla_noreply＠novell.com

16 Sep 16 Sep

11:41

New subject: [Bug 831404] AUDIT-0: mate : Security Review in view of mate inclusion

https://bugzilla.novell.com/show_bug.cgi?id=831404 https://bugzilla.novell.com/show_bug.cgi?id=831404#c17 --- Comment #17 from Sebastian Krahmer 2013-09-16 11:41:33 UTC --- As these are auth_admin authorizations, it should not be a problem. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

bugzilla_noreply＠novell.com

18:11

New subject: [Bug 831404] AUDIT-0: mate : Security Review in view of mate inclusion

https://bugzilla.novell.com/show_bug.cgi?id=831404 https://bugzilla.novell.com/show_bug.cgi?id=831404#c18 --- Comment #18 from Denisart Benjamin 2013-09-16 18:11:25 UTC --- What do you mean ? I can't ever build mate-settings-daemon without rpmlintrc file. Can I submit atm packages to Factory ? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

bugzilla_noreply＠novell.com

17 Sep 17 Sep

08:09

New subject: [Bug 831404] AUDIT-0: mate : Security Review in view of mate inclusion

https://bugzilla.novell.com/show_bug.cgi?id=831404 https://bugzilla.novell.com/show_bug.cgi?id=831404#c19 Sebastian Krahmer changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |NEW InfoProvider|p.drouand@gmail.com | --- Comment #19 from Sebastian Krahmer 2013-09-17 08:09:32 UTC --- security-team is whitelisting above service/config files. It can take a while to have effect. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

bugzilla_noreply＠novell.com

14:00

New subject: [Bug 831404] AUDIT-0: mate : Security Review in view of mate inclusion

https://bugzilla.novell.com/show_bug.cgi?id=831404 https://bugzilla.novell.com/show_bug.cgi?id=831404#c20 --- Comment #20 from Bernhard Wiedemann 2013-09-17 16:00:13 CEST --- This is an autogenerated message for OBS integration: This bug (831404) was mentioned in https://build.opensuse.org/request/show/199402 Factory / rpmlint -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

bugzilla_noreply＠novell.com

18 Sep 18 Sep

07:00

New subject: [Bug 831404] AUDIT-0: mate : Security Review in view of mate inclusion

https://bugzilla.novell.com/show_bug.cgi?id=831404 https://bugzilla.novell.com/show_bug.cgi?id=831404#c21 Alexander Bergmann changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |NEEDINFO CC| |abergmann@suse.com InfoProvider| |p.drouand@gmail.com --- Comment #21 from Alexander Bergmann 2013-09-18 07:00:27 UTC --- mate is now whitelisted in rpmlint Factory (comment 20) and mate-settings-daemon was already rebuild successfully last night.

...

cloud120 finished "build mate-settings-daemon.spec" at Tue Sep 17 21:01:02 UTC 2013.

Please confirm, so we can close this AUDIT bug. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

bugzilla_noreply＠novell.com

08:53

New subject: [Bug 831404] AUDIT-0: mate : Security Review in view of mate inclusion

https://bugzilla.novell.com/show_bug.cgi?id=831404 https://bugzilla.novell.com/show_bug.cgi?id=831404#c22 --- Comment #22 from Denisart Benjamin 2013-09-18 08:53:18 UTC --- I confirm. Thanks guys ! -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

bugzilla_noreply＠novell.com

09:42

New subject: [Bug 831404] AUDIT-0: mate : Security Review in view of mate inclusion

https://bugzilla.novell.com/show_bug.cgi?id=831404 https://bugzilla.novell.com/show_bug.cgi?id=831404#c23 Sebastian Krahmer changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |RESOLVED InfoProvider|p.drouand@gmail.com | Resolution| |FIXED --- Comment #23 from Sebastian Krahmer 2013-09-18 09:42:41 UTC --- closing -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

3899

Age (days ago)

3954

Last active (days ago)

List overview

Download

26 comments

1 participants

participants (1)

bugzilla_noreply＠novell.com

[Bug 831404] New: mate : Security Review in view of mate inclusion

tags

participants (1)