https://bugzilla.novell.com/show_bug.cgi?id=798273 https://bugzilla.novell.com/show_bug.cgi?id=798273#c5 --- Comment #5 from Marcus Meissner <meissner@suse.com> 2013-04-03 16:16:25 UTC --- RPMLINT report: =============== ModemManager.x86_64: E: suse-dbus-unauthorized-service (Badness: 100) /etc/dbus-1/system.d/org.freedesktop.ModemManager1.conf ModemManager.x86_64: E: suse-dbus-unauthorized-service (Badness: 100) /usr/share/dbus-1/system-services/org.freedesktop.ModemManager1.service The package installs a DBUS system service file. If the package is intended for inclusion in any SUSE product please open a bug report to request review of the service by the security team. ModemManager.x86_64: I: polkit-untracked-privilege org.freedesktop.ModemManager1.Control (??:no:auth_admin) ModemManager.x86_64: I: polkit-untracked-privilege org.freedesktop.ModemManager1.Firmware (??:no:auth_admin) The privilege is not listed in /etc/polkit-default-privs.* which makes it harder for admins to find. If the package is intended for inclusion in any SUSE product please open a bug report to request review of the package by the security team ModemManager.x86_64: E: polkit-unauthorized-privilege (Badness: 100) org.freedesktop.ModemManager1.Device.Control (??:no:auth_self_keep) ModemManager.x86_64: E: polkit-unauthorized-privilege (Badness: 100) org.freedesktop.ModemManager1.Contacts (??:no:auth_self_keep) ModemManager.x86_64: E: polkit-unauthorized-privilege (Badness: 100) org.freedesktop.ModemManager1.Messaging (??:no:auth_self_keep) ModemManager.x86_64: E: polkit-unauthorized-privilege (Badness: 100) org.freedesktop.ModemManager1.Location (??:no:auth_self_keep) ModemManager.x86_64: E: polkit-unauthorized-privilege (Badness: 100) org.freedesktop.ModemManager1.USSD (??:no:yes) The package allows unprivileged users to carry out privileged operations without authentication. This could cause security problems if not done carefully. If the package is intended for inclusion in any SUSE product please open a bug report to request review of the package by the security team ModemManager.x86_64: I: polkit-cant-acquire-privilege org.freedesktop.ModemManager1.Control (??:no:auth_admin) ModemManager.x86_64: I: polkit-cant-acquire-privilege org.freedesktop.ModemManager1.Device.Control (??:no:auth_self_keep) ModemManager.x86_64: I: polkit-cant-acquire-privilege org.freedesktop.ModemManager1.Contacts (??:no:auth_self_keep) ModemManager.x86_64: I: polkit-cant-acquire-privilege org.freedesktop.ModemManager1.Messaging (??:no:auth_self_keep) ModemManager.x86_64: I: polkit-cant-acquire-privilege org.freedesktop.ModemManager1.Location (??:no:auth_self_keep) ModemManager.x86_64: I: polkit-cant-acquire-privilege org.freedesktop.ModemManager1.USSD (??:no:yes) ModemManager.x86_64: I: polkit-cant-acquire-privilege org.freedesktop.ModemManager1.Firmware (??:no:auth_admin) Usability can be improved by allowing users to acquire privileges via authentication. Use e.g. 'auth_admin' instead of 'no' and make sure to define 'allow_any'. This is an issue only if the privilege is not listed in /etc /polkit-default-privs.* -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.