Mailinglist Archive: opensuse-packaging (235 mails)
| < Previous | Next > |
[opensuse-packaging] How to fix rpmlint warnings "polkit-untracked-privilege","suse-dbus-unauthorized-service" and kbuildsycoca4?
- From: Marguerite Su <i@xxxxxxxxxxxxx>
- Date: Sat, 24 Mar 2012 22:39:00 +0800
- Message-id: <CAK0PdAndbQKH6GO_aahdOsUpWm1WL8f1vuN4bRKXyv_QmK3z-w@mail.gmail.com>
Hi, all,
I'm working on a "clean" version of RecordItNow( strip ffmpeg and
mplayer off by default but provide rebuild possibility), which
actually is the most powerful desktop recorder under KDE enviroment.
packge here:
https://build.opensuse.org/package/show?package=recorditnow&project=home%3AMargueriteSu
and the rpmlint.log returns lots of dbus service and polkit policy warnings.
I tried and fixed some, but these two are out of my capability.
recorditnow.x86_64: W: suse-dbus-unauthorized-service
/etc/dbus-1/system.d/org.kde.recorditnow.helper.conf
recorditnow.x86_64: W: suse-dbus-unauthorized-service
/usr/share/dbus-1/system-services/org.kde.recorditnow.helper.service
The package installs a DBUS system service file. If the package is intended
for inclusion in any SUSE product please open a bug report to request review
of the service by the security team.
and
recorditnow.x86_64: I: polkit-untracked-privilege
org.kde.recorditnow.helper.watch
(auth_admin_keep_always:auth_admin_keep_always:auth_admin)
The privilege is not listed in /etc/polkit-default-privs.* which makes it
harder for admins to find. If the package is intended for inclusion in any
SUSE product please open a bug report to request review of the package by the
security team
the first seems okay and can be safely ignored by .rpmlintrc. the
second makes some senses.
so I tried to fix it by adding these scriptlets below info %post and %postun:
#fix the submit to suse security team warning
%post
/sbin/ldconfig
kbuildsycoca4
echo "org.kde.recorditnow.helper.watch
auth_admin_keep_always:auth_admin_keep_always:auth_admin" >>
/etc/polkit-default-privs.standard
%postun
/sbin/ldconfig
kbuildsycoca4
sed -i "s/org.kde.recorditnow.helper.watch
auth_admin_keep_always\:auth_admin_keep_always\:auth_admin//"
/etc/polkit-default-privs.standard
on OBS it's just okay, but if you test the generated packages on your
own machine, the %post scripts can't be executed and failed. so any
suggestion on how to append a new line to
/etc/polkit-default-privs.standard? it's already on your system, we
can't do a dirty fix by replacing it with a new file with a new line
when installation and replacing it with an old file without that new
line when uninstallation.
and kbuildsycoca4 code is also something needed be better designed. I
installed the generated packages on my own machine and started it, it
can't find any backends or "recorder", in konsole it suggested you to
run kbuildsycoca4. so I add it to %post and %postun area, but it turns
out to be:
kbuildsycoca4 running...
kbuildsycoca4(9523): "applications.menu" not found in
("//.config/menus/", "/etc/xdg/menus/")
anyone knows any macros can do the job? I checked /etc/rpm/macro.kde4
but no such macros found.
--
To unsubscribe, e-mail: opensuse-packaging+unsubscribe@xxxxxxxxxxxx
To contact the owner, e-mail: opensuse-packaging+owner@xxxxxxxxxxxx
I'm working on a "clean" version of RecordItNow( strip ffmpeg and
mplayer off by default but provide rebuild possibility), which
actually is the most powerful desktop recorder under KDE enviroment.
packge here:
https://build.opensuse.org/package/show?package=recorditnow&project=home%3AMargueriteSu
and the rpmlint.log returns lots of dbus service and polkit policy warnings.
I tried and fixed some, but these two are out of my capability.
recorditnow.x86_64: W: suse-dbus-unauthorized-service
/etc/dbus-1/system.d/org.kde.recorditnow.helper.conf
recorditnow.x86_64: W: suse-dbus-unauthorized-service
/usr/share/dbus-1/system-services/org.kde.recorditnow.helper.service
The package installs a DBUS system service file. If the package is intended
for inclusion in any SUSE product please open a bug report to request review
of the service by the security team.
and
recorditnow.x86_64: I: polkit-untracked-privilege
org.kde.recorditnow.helper.watch
(auth_admin_keep_always:auth_admin_keep_always:auth_admin)
The privilege is not listed in /etc/polkit-default-privs.* which makes it
harder for admins to find. If the package is intended for inclusion in any
SUSE product please open a bug report to request review of the package by the
security team
the first seems okay and can be safely ignored by .rpmlintrc. the
second makes some senses.
so I tried to fix it by adding these scriptlets below info %post and %postun:
#fix the submit to suse security team warning
%post
/sbin/ldconfig
kbuildsycoca4
echo "org.kde.recorditnow.helper.watch
auth_admin_keep_always:auth_admin_keep_always:auth_admin" >>
/etc/polkit-default-privs.standard
%postun
/sbin/ldconfig
kbuildsycoca4
sed -i "s/org.kde.recorditnow.helper.watch
auth_admin_keep_always\:auth_admin_keep_always\:auth_admin//"
/etc/polkit-default-privs.standard
on OBS it's just okay, but if you test the generated packages on your
own machine, the %post scripts can't be executed and failed. so any
suggestion on how to append a new line to
/etc/polkit-default-privs.standard? it's already on your system, we
can't do a dirty fix by replacing it with a new file with a new line
when installation and replacing it with an old file without that new
line when uninstallation.
and kbuildsycoca4 code is also something needed be better designed. I
installed the generated packages on my own machine and started it, it
can't find any backends or "recorder", in konsole it suggested you to
run kbuildsycoca4. so I add it to %post and %postun area, but it turns
out to be:
kbuildsycoca4 running...
kbuildsycoca4(9523): "applications.menu" not found in
("//.config/menus/", "/etc/xdg/menus/")
anyone knows any macros can do the job? I checked /etc/rpm/macro.kde4
but no such macros found.
--
To unsubscribe, e-mail: opensuse-packaging+unsubscribe@xxxxxxxxxxxx
To contact the owner, e-mail: opensuse-packaging+owner@xxxxxxxxxxxx
| < Previous | Next > |