Bug ID 1087714
Summary AUDIT-0: Renamed DBus files in kalarm (suse-dbus-unauthorized-service)
Classification openSUSE
Product openSUSE Tumbleweed
Version Current
Hardware Other
OS Other
Status NEW
Severity Normal
Priority P5 - None
Component Security
Assignee security-team@suse.de
Reporter lbeltrame@kde.org
QA Contact qa-bugs@suse.de
Found By ---
Blocker ---

The new version of kalarm, which will be released with KDE Applications 18.04
in April 2018, has renamed its DBUs service files which are used together with
KAuth to enable RTC wake.

The previous files were called 

/etc/dbus-1/system.d/org.kde.kalarmrtcwake.conf
/usr/share/dbus-1/system-services/org.kde.kalarmrtcwake.service

The new ones are instead

/usr/share/dbus-1/system-services/org.kde.kalarm.rtcwake.service
/etc/dbus-1/system.d/org.kde.kalarm.rtcwake.conf

The content and the nature of these files has not changed. They were simply
renamed. As this was already reviewed in the past, what would be needed would
be to whitelist these files as well. Note that the whitelist for the old files
should be kept, as both Leap 15 and 42.3 ship with the old versions of the
files.

The package with the unauthorized files currently lives in the
KDE:Unstable:Applications repository:

https://build.opensuse.org/package/show/KDE:Unstable:Applications/kalarm

There hasn't been a beta release yet, but this bug was filed earlier to get
enough time for the review.


You are receiving this mail because: