December 2024 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1211374] AUDIT-TRACKER: deepin-app-services: new dbus services of deepin-app-services
by bugzilla_noreply＠suse.com 12 Dec '24

12 Dec '24

https://bugzilla.suse.com/show_bug.cgi?id=1211374 https://bugzilla.suse.com/show_bug.cgi?id=1211374#c23 Matthias Gerstner <matthias.gerstner(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|matthias.gerstner(a)suse.com |hillwoodroc(a)gmail.com Summary|AUDIT-WHITELIST: |AUDIT-TRACKER: |deepin-app-services: new |deepin-app-services: new |dbus services of |dbus services of |deepin-app-services |deepin-app-services --- Comment #23 from Matthias Gerstner <matthias.gerstner(a)suse.com> --- Sorry for the long delay. I looked into the current status of deepin-app-services just now. While the findings I reported before have been addressed by now, I am still not happy with the current state of the D-Bus services offered here. In the org.desktopspec.ConfigManager interface: - setDelayReleaseTime(): takes a signed integer (milliseconds) after which time registered applications are automatically removed again. This parameter can also be negative, and it will be passed on as a negative value directory to QTimer. The code tries to prevent a too large value here, but negative values could have a similar effect (e.g. disabling the timer completely). This case should be caught. - enableVerboseLogging(), disableVerboseLogging(), setLogRules(in s rules): these methods allow to completely control the QLogger setup of the daemon. This should be restricted to privileged users, or at least to users in a local graphical session. - sync(in s path): There are checks for this path in `getMetaConfigureId()`, but the regular expressions used there only check that the suffix of the path ends in "configs/<subpath>/<resource>.json". The caller can create a structure in its home directory e.g. in $HOME/configs/myapp/myid/myconfig.json, and the path will be accepted. An access() is made on this path, following symlinks, so it can be used for file existence tests (although the service does run as a dedicated service user). Only the "subpath" will be stored for the configuration key, but the call should still be rejected if the file is not found in /usr/share/.../config. - acquireManagerV2(in u uid, in s appid, in s name, in s subpath, out o path): This method allows arbitrary local users to create a key/value store for an arbitrary "uid" and any locally registered apps found in /usr/share/dsg/configs. It allows to access the key/value stores of other users in the system without any privilege checks. Example: # increase the release time so newly created interfaces stay around for long enough gdbus call -y -d org.desktopspec.ConfigManager -o / -m org.desktopspec.ConfigManager.setDelayReleaseTime '300000' # this will create a new key/value store for the example dconfig app, # supposedly belonging to "uid 0", i.e. root gdbus call -y -d org.desktopspec.ConfigManager -o / -m org.desktopspec.ConfigManager.acquireManagerV2 0 dconfig-example example a # get the current configuration value for "canExit" gdbus call -y -d org.desktopspec.ConfigManager -o /dconfig_example/examplea/0 -m org.desktopspec.ConfigManager.Manager.value canExit (<true>,) # change the value to false gdbus call -y -d org.desktopspec.ConfigManager -o /dconfig_example/examplea/0 -m org.desktopspec.ConfigManager.Manager.setValue canExit '<boolean false>' These calls can be performed by any local user, even 'nobody'. Apart from the concrete issues listed above What is missing here is: - Polkit authentication. Only users in a local graphical session should be able to use this service. - User isolation. One user should not be able to access another user's configuration. `uid` should not be passed as a parameter, but the caller's UID should be fetched from the D-Bus connection. I'm turning this bug into a TRACKER bug and reassigning it to you, this needs to be address by upstream. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1234027] New: Unable to connect to WiFi on openSUSE Leap 15.6
by bugzilla_noreply＠suse.com 12 Dec '24

12 Dec '24

https://bugzilla.suse.com/show_bug.cgi?id=1234027 Bug ID: 1234027 Summary: Unable to connect to WiFi on openSUSE Leap 15.6 Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Kernel:Drivers Assignee: kernel-bugs(a)suse.de Reporter: emanuele.cappello(a)suse.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- -- You are receiving this mail because: You are on the CC list for the bug.

1 40

[Bug 1231566] Base:System/dbus-1: Bug Resplit the dbus package.
by bugzilla_noreply＠suse.com 12 Dec '24

12 Dec '24

https://bugzilla.suse.com/show_bug.cgi?id=1231566 https://bugzilla.suse.com/show_bug.cgi?id=1231566#c6 --- Comment #6 from Fxzx mic <fxzxmic(a)hotmail.com> --- /usr/bin/dbus-daemon /usr/bin/dbus-run-session gdm only needs these two. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1234418] New: libhubbub debugging output degrades elinks usability
by bugzilla_noreply＠suse.com 12 Dec '24

12 Dec '24

https://bugzilla.suse.com/show_bug.cgi?id=1234418 Bug ID: 1234418 Summary: libhubbub debugging output degrades elinks usability Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: screening-team-bugs(a)suse.de Reporter: post(a)jbechtel.de QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Created attachment 879109 --> https://bugzilla.suse.com/attachment.cgi?id=879109&action=edit Elinks window for https://stackoverflow.com/questions/20994959/ The libhubbub debug prints make the use of some websites in elinks more difficult, see screenshot. More specifically, in treebuilder/treebuilder.c following code can be found which I suppose to be the reason for the outputs. Probably there's a macro NDEBUG missing in compilation: /* A slightly nasty debugging hook, but very useful */ #ifdef NDEBUG # define mode(x) \ case x: #else # define mode(x) \ case x: \ printf( #x "\n"); #endif while (err == HUBBUB_REPROCESS) { switch (treebuilder->context.mode) { mode(INITIAL) err = handle_initial(treebuilder, token); break; mode(BEFORE_HTML) err = handle_before_html(treebuilder, token); break; [...] mode(IN_BODY) err = handle_in_body(treebuilder, token); break; [...] -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1229908] qxl drm module issues with proxmox
by bugzilla_noreply＠suse.com 12 Dec '24

12 Dec '24

https://bugzilla.suse.com/show_bug.cgi?id=1229908 https://bugzilla.suse.com/show_bug.cgi?id=1229908#c18 --- Comment #18 from Norbert Möndjen <n.moendjen(a)vodafone.de> --- Seems that nothing is going on here. Just tested it again with the actual updates and it is still broken. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1233246] Random Soft Lockup on Lenovo Yoga Pro 7 14ASP9 with AMD GPU
by bugzilla_noreply＠suse.com 12 Dec '24

12 Dec '24

https://bugzilla.suse.com/show_bug.cgi?id=1233246 https://bugzilla.suse.com/show_bug.cgi?id=1233246#c4 --- Comment #4 from Zhang <2835365572zty(a)gmail.com> --- I'm currently using it. But I need a few days to confirm it was fixed. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1233246] Random Soft Lockup on Lenovo Yoga Pro 7 14ASP9 with AMD GPU
by bugzilla_noreply＠suse.com 12 Dec '24

12 Dec '24

https://bugzilla.suse.com/show_bug.cgi?id=1233246 https://bugzilla.suse.com/show_bug.cgi?id=1233246#c3 --- Comment #3 from Takashi Iwai <tiwai(a)suse.com> --- Could you try with the kernel-firmware-amdgpu package in OBS Kernel:HEAD repo? The version 20241206 or newer. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1234398] [Build 20241209] openQA test fails in opensuse_welcome - Failed to start KRunner
by bugzilla_noreply＠suse.com 12 Dec '24

12 Dec '24

https://bugzilla.suse.com/show_bug.cgi?id=1234398 https://bugzilla.suse.com/show_bug.cgi?id=1234398#c1 Fabian Vogt <fvogt(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |fvogt(a)suse.com Version|Slowroll |Current Status|NEW |CONFIRMED --- Comment #1 from Fabian Vogt <fvogt(a)suse.com> --- I wonder why plasma-krunner.service has a hardcoded TimeoutSec=5sec. The same applies to plasma-kglobalacceld.service and others. I guess we could just remove that? -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1234330] AMDGPU makes CPU stuck
by bugzilla_noreply＠suse.com 12 Dec '24

12 Dec '24

https://bugzilla.suse.com/show_bug.cgi?id=1234330 https://bugzilla.suse.com/show_bug.cgi?id=1234330#c7 --- Comment #7 from Takashi Iwai <tiwai(a)suse.com> --- OK, could you give the kernel log? Also, to be sure, you updated the firmware package, too? If the problem is seen with 6.12.x and the latest firmware, it's time to report to the upstream. Please report on gitlab.freedesktop.org Issues DRI/AMD. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1234364] fish shell in the system group does not work
by bugzilla_noreply＠suse.com 12 Dec '24

12 Dec '24

https://bugzilla.suse.com/show_bug.cgi?id=1234364 https://bugzilla.suse.com/show_bug.cgi?id=1234364#c6 --- Comment #6 from Thomas Nielsen <thomas.nielsen2(a)suse.com> --- oh i cant believe i left out my desktop environment. Here it is : Operating System: openSUSE Tumbleweed 20241208 KDE Plasma Version: 6.2.4 KDE Frameworks Version: 6.8.0 Qt Version: 6.8.1 Kernel Version: 6.11.8-1-default (64-bit) Graphics Platform: X11 Processors: 16 × AMD Ryzen 7 PRO 8840HS w/ Radeon 780M Graphics Memory: 58.5 GiB of RAM Graphics Processor: AMD Radeon Graphics Manufacturer: LENOVO Product Name: 21MF System Version: ThinkPad P14s Gen 5 AMD -- You are receiving this mail because: You are on the CC list for the bug.

1 0