Bug ID 939191
Summary AUDIT-0 New untracked dbus service: New package iio-sensor-proxy
Classification openSUSE
Product openSUSE Factory
Version 201505*
Hardware Other
OS Other
Status NEW
Severity Normal
Priority P5 - None
Component Security
Assignee security-team@suse.de
Reporter zaitor@opensuse.org
QA Contact qa-bugs@suse.de
Found By ---
Blocker ---

Hi Sec people

New package with review needed:  iio-sensor-proxy
Lives in GNOME:Next for now (with rpmlintrc). 

[   83s] RPMLINT report:
[   83s] ===============
[   85s] (none): E: badness 10000 exceeds threshold 1000, aborting.
[   85s] iio-sensor-proxy.x86_64: E: suse-dbus-unauthorized-service (Badness:
10000) /etc/dbus-1/system.d/net.hadess.SensorProxy.conf
[   85s] The package installs a DBUS system service file. If the package is
intended
[   85s] for inclusion in any SUSE product please open a bug report to request
review
[   85s] of the service by the security team.
[   85s] 
[   85s] iio-sensor-proxy.x86_64: W: non-conffile-in-etc
/etc/dbus-1/system.d/net.hadess.SensorProxy.conf
[   85s] A non-executable file in your package is being installed in /etc, but
is not a
[   85s] configuration file. All non-executable files in /etc should be
configuration
[   85s] files. Mark the file as %config in the spec file.
[   85s] 
[   85s] iio-sensor-proxy.x86_64: W: no-manual-page-for-binary monitor-sensor
[   85s] iio-sensor-proxy.x86_64: W: no-manual-page-for-binary iio-sensor-proxy
[   85s] Each executable in standard binary directories should have a man page.
[   85s] 
[   85s] iio-sensor-proxy.x86_64: W: dbus-policy-allow-without-destination
/etc/dbus-1/system.d/net.hadess.SensorProxy.conf: <allow
send_interface="net.hadess.SensorProxy"/>
[   85s] 'allow' directives must always specify a 'send_destination'
[   85s] 
[   85s] 2 packages and 0 specfiles checked; 1 errors, 4 warnings.


You are receiving this mail because: