Bug ID | 1232231 |
---|---|
Summary | AUDIT-0: mousepad: New PolKit rules added |
Classification | openSUSE |
Product | openSUSE Tumbleweed |
Version | Current |
Hardware | Other |
OS | Other |
Status | NEW |
Severity | Normal |
Priority | P5 - None |
Component | Security |
Assignee | security-team@suse.de |
Reporter | manfred.h@gmx.net |
QA Contact | qa-bugs@suse.de |
Target Milestone | --- |
Found By | --- |
Blocker | --- |
Created attachment 878180 [details] Full build log mousepad update 0.6.3 has added polkit rules [ 31s] RPMLINT report: [ 31s] =============== [ 32s] ============================ rpmlint session starts ============================ [ 32s] rpmlint: 2.6.1 [ 32s] mousepad.x86_64: E: polkit-untracked-privilege (Badness: 10) org.xfce.mousepad (no:auth_admin:auth_admin) [ 32s] The polkit action is not listed in the polkit-default-privs profiles which [ 32s] makes it harder for admins to find. Furthermore improper polkit authorization [ 32s] checks can easily introduce security issues. If the package is intended for [ 32s] inclusion in any SUSE product please open a bug report to request review of [ 32s] the package by the security team. Please refer to [ 32s] https://en.opensuse.org/openSUSE:Package_security_guidelines#audit_bugs for [ 32s] more information. OBS repo: https://build.opensuse.org/package/show/X11:xfce/mousepad