https://bugzilla.novell.com/show_bug.cgi?id=399476 User hmacht@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=399476#c1 Holger Macht changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |dkukawka@novell.com Status|NEW |NEEDINFO Info Provider| |jpr@novell.com --- Comment #1 from Holger Macht 2008-06-23 05:08:57 MDT --- Is the PolicyKit support good for anything else? Is there any application which would like to make use of ConsoleKit's shutdown/reboot methods? Maybe gdm? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=399476 User hmacht@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=399476#c6 Holger Macht changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |lnussel@novell.com Component|Basesystem |Basesystem Product|openSUSE 11.1 |openSUSE 11.0 Target Milestone|--- |RC 3 for Fix| | --- Comment #6 from Holger Macht 2008-07-18 02:51:27 MDT --- Before we can release this as an online update, we have to make 100% sure that noone actually uses this functionality. So NEEDINFO still applies. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=399476 User mmarek@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=399476#c7 --- Comment #7 from Michal Marek 2008-07-18 02:55:06 MDT --- BTW, the 64bit built has wrong paths to the restart/stop helpers: $ rpm -ql ConsoleKit | grep ck-system- /usr/lib/ConsoleKit/scripts/ck-system-restart /usr/lib/ConsoleKit/scripts/ck-system-stop $ strings /usr/sbin/console-kit-daemon | grep ck-system- /usr/lib64/ConsoleKit/scripts/ck-system-stop /usr/lib64/ConsoleKit/scripts/ck-system-restart -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=399476 User lnussel@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=399476#c10 --- Comment #10 from Ludwig Nussel 2008-07-18 03:10:00 MDT --- FWIW I agree with Danny. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=399476 User hmacht@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=399476#c13 --- Comment #13 from Holger Macht 2008-07-18 07:47:36 MDT --- JPR, I know, but his turned out to be a security issue. Any user logged in via ssh can shutdown/reboot the system. This was caused by an update of ConsoleKit late in the release cycle. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=399476 User hmacht@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=399476#c15 --- Comment #15 from Holger Macht 2008-07-18 08:24:22 MDT --- Oh well, if it's not considered a problem, it's ok for me to just do nothing :) -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=399476 User lnussel@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=399476#c19 Ludwig Nussel changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |NEW Info Provider|lnussel@novell.com | Summary|ConsoleKit not built with PolicyKit support |VUL-0: ConsoleKit allows anyone to | |shutdown/restart the machine --- Comment #19 from Ludwig Nussel 2008-07-22 08:44:25 MDT --- MaintenanceTracker-18798 This is a general ConsoleKit problem when it's compiled without PolicyKit support, right? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=399476 User jpr@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=399476#c21 --- Comment #21 from JP Rosevear 2008-07-22 12:14:45 MDT --- (In reply to comment #14 from Ludwig Nussel)

Until now it was not actually considered as security issue :) Should we open a new bug to handle the security update? If noone knows any app that actually uses that feature I'd say it's ok to simply remove it even in an online update.

PackageKit uses it. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=399476 User lnussel@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=399476#c23 Ludwig Nussel changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |security-team@suse.de --- Comment #23 from Ludwig Nussel 2008-07-23 07:40:23 MDT --- It's actually gnome-packagekit. It has a button that triggers the reboot. Could have used hal instead of consolekit. Oh well... -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=399476 User thomas@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=399476#c26 Thomas Biege changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |REOPENED Resolution|FIXED | --- Comment #26 from Thomas Biege 2008-08-04 07:36:51 MDT --- keep open for security update tracking -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=399476 User thomas@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=399476#c27 Thomas Biege changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution| |FIXED --- Comment #27 from Thomas Biege 2008-08-05 03:07:11 MDT --- packages released Thanks everybody! -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.