https://bugzilla.novell.com/show_bug.cgi?id=866429 https://bugzilla.novell.com/show_bug.cgi?id=866429#c0 Summary: bluedevil version 2.0~rc1 from extra-repo: binds to untrusted devices, continues search if cancelled, registers all devices found as "known" Classification: openSUSE Product: openSUSE 13.1 Version: Final Platform: x86-64 OS/Version: openSUSE 13.1 Status: NEW Severity: Major Priority: P5 - None Component: KDE4 Applications AssignedTo: kde-maintainers@suse.de ReportedBy: stakanov@freenet.de QAContact: qa-bugs@suse.de Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:27.0) Gecko/20100101 Firefox/27.0 Provided that you accept after that quite long time period after the release some bug report about k-bluetooth support (see release notes) I would like to file this report about the package 2.0~rc1 of bluedevil (and libraries) offered in Extra, since this appears to be a release candidate. If you install these packages you have effectively a fix for the failing support for MS bluetooth mice (and probably for other devices) with the following drawbacks: When you do a search for add new devices and you decide to cancel, the search will go on anyway without your knowledge in background. After a 20 min (I am living in front of a bus stop) you will have about 50 devices as "known devices"). Two of these devices (a blackberry and a bt-card of a pc) I did find them in kde-settings - proxy settings - bluetooth as registered devices to my system!!! I was not asked for any password or pin when this happened. This is not the case with the regular bluetooth package. The package does further have no memory when you set: do not power on bluetooth. After a reboot it is switched on again. I tend to belief that this is also an unwanted behavior. Reproducible: Always Steps to Reproduce: 1. Install the packages 2.0~rc1 with libraries. 2. Put yourself in a crowded place and do: add new device. Interrupt the search with cancel. 3. After more or less 15 min, try to look for new devices. Enjoy 50 new "friends". 4. Do this in front of a bus station or where there is a high throughput of people with devices. You will find new "friends" registered in kde-system settings - proxy settings - bluetooth Actual Results: KDE-bt support does not honor the canceling of search for devices. It does join unknown devices to known devices. It allows registering of devices in "kde-proxy" settings dialog, without pairing. It does not remember the request for being deactivated (setting does not survive a re-log in). Expected Results: KDE does now bind to HID from MS and other mices (compliments). But it should NOT accept devices as known if no pin has been given and if the devices are not paired. It should in ANY case register these devices in proxy-settings of KDE (these ones DO survive a re-log in). It should also cancel a search for new devices when asked to do so. New and not paired devices should not be put in the same list as paired devices. Actually in KNOWN devices there should appear only PAIRED devices. By this current state it is IMO not advisable to leave this package in extra as is. Hardware setting: encountered with Lenovo X201 integrated bt card System is standard 13.1. Package from kde-extra repo. Version: 2.0~rc1 64 bit -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.