Mailinglist Archive: opensuse-packaging (235 mails)

< Previous Next >
[opensuse-packaging] How to fix rpmlint warnings "polkit-untracked-privilege","suse-dbus-unauthorized-service" and kbuildsycoca4?
Hi, all,

I'm working on a "clean" version of RecordItNow( strip ffmpeg and
mplayer off by default but provide rebuild possibility), which
actually is the most powerful desktop recorder under KDE enviroment.
packge here:

https://build.opensuse.org/package/show?package=recorditnow&project=home%3AMargueriteSu

and the rpmlint.log returns lots of dbus service and polkit policy warnings.

I tried and fixed some, but these two are out of my capability.

recorditnow.x86_64: W: suse-dbus-unauthorized-service
/etc/dbus-1/system.d/org.kde.recorditnow.helper.conf
recorditnow.x86_64: W: suse-dbus-unauthorized-service
/usr/share/dbus-1/system-services/org.kde.recorditnow.helper.service
The package installs a DBUS system service file. If the package is intended
for inclusion in any SUSE product please open a bug report to request review
of the service by the security team.

and

recorditnow.x86_64: I: polkit-untracked-privilege
org.kde.recorditnow.helper.watch
(auth_admin_keep_always:auth_admin_keep_always:auth_admin)
The privilege is not listed in /etc/polkit-default-privs.* which makes it
harder for admins to find. If the package is intended for inclusion in any
SUSE product please open a bug report to request review of the package by the
security team

the first seems okay and can be safely ignored by .rpmlintrc. the
second makes some senses.

so I tried to fix it by adding these scriptlets below info %post and %postun:

#fix the submit to suse security team warning
%post
/sbin/ldconfig
kbuildsycoca4
echo "org.kde.recorditnow.helper.watch
auth_admin_keep_always:auth_admin_keep_always:auth_admin" >>
/etc/polkit-default-privs.standard

%postun
/sbin/ldconfig
kbuildsycoca4
sed -i "s/org.kde.recorditnow.helper.watch
auth_admin_keep_always\:auth_admin_keep_always\:auth_admin//"
/etc/polkit-default-privs.standard

on OBS it's just okay, but if you test the generated packages on your
own machine, the %post scripts can't be executed and failed. so any
suggestion on how to append a new line to
/etc/polkit-default-privs.standard? it's already on your system, we
can't do a dirty fix by replacing it with a new file with a new line
when installation and replacing it with an old file without that new
line when uninstallation.

and kbuildsycoca4 code is also something needed be better designed. I
installed the generated packages on my own machine and started it, it
can't find any backends or "recorder", in konsole it suggested you to
run kbuildsycoca4. so I add it to %post and %postun area, but it turns
out to be:

kbuildsycoca4 running...
kbuildsycoca4(9523): "applications.menu" not found in
("//.config/menus/", "/etc/xdg/menus/")

anyone knows any macros can do the job? I checked /etc/rpm/macro.kde4
but no such macros found.
--
To unsubscribe, e-mail: opensuse-packaging+unsubscribe@xxxxxxxxxxxx
To contact the owner, e-mail: opensuse-packaging+owner@xxxxxxxxxxxx

< Previous Next >
Follow Ups