[Bug 672145] New: kdebase4-runtime: illegal rpmlintrc
https://bugzilla.novell.com/show_bug.cgi?id=672145 https://bugzilla.novell.com/show_bug.cgi?id=672145#c0 Summary: kdebase4-runtime: illegal rpmlintrc Classification: openSUSE Product: openSUSE 11.4 Version: Factory Platform: Other OS/Version: Other Status: NEW Severity: Critical Priority: P5 - None Component: KDE4 Workspace AssignedTo: kde-maintainers@suse.de ReportedBy: lnussel@novell.com QAContact: qa@suse.de CC: security-team@suse.de Found By: Development Blocker: --- kdebase4-workspace contains an rpmlintrc that suppresses mandatory security checks, circumventing our policies: addFilter("suse-dbus-unauthorized-service") addFilter("polkit-unauthorized-privilege") Please remove the rpmlintrc immediately. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=672145
https://bugzilla.novell.com/show_bug.cgi?id=672145#c
Ludwig Nussel
https://bugzilla.novell.com/show_bug.cgi?id=672145
https://bugzilla.novell.com/show_bug.cgi?id=672145#c1
Ludwig Nussel
https://bugzilla.novell.com/show_bug.cgi?id=672145
https://bugzilla.novell.com/show_bug.cgi?id=672145#c
Ludwig Nussel
https://bugzilla.novell.com/show_bug.cgi?id=672145
https://bugzilla.novell.com/show_bug.cgi?id=672145#c
Ludwig Nussel
https://bugzilla.novell.com/show_bug.cgi?id=672145
https://bugzilla.novell.com/show_bug.cgi?id=672145#c
Sebastian Krahmer
https://bugzilla.novell.com/show_bug.cgi?id=672145
https://bugzilla.novell.com/show_bug.cgi?id=672145#c
Dirk Mueller
https://bugzilla.novell.com/show_bug.cgi?id=672145
https://bugzilla.novell.com/show_bug.cgi?id=672145#c3
--- Comment #3 from Sebastian Krahmer
https://bugzilla.novell.com/show_bug.cgi?id=672145
https://bugzilla.novell.com/show_bug.cgi?id=672145#c5
Will Stephenson
From my mail to you on the 17th: " backlighthelper is a dbus service activated root helper that sets backlight values as root. Empirically this works on my 11.4 install, so i assume the following is happening:
The two methods on the object are both controlled by polkit and allowed to 'active' (whatever that is) by the polkit policy, so they are called as root by polkitd, hence there is no need for the methods to be allowed in the dbus policy. Sound reasonable? " -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=672145
https://bugzilla.novell.com/show_bug.cgi?id=672145#c6
--- Comment #6 from Ludwig Nussel
https://bugzilla.novell.com/show_bug.cgi?id=672145
https://bugzilla.novell.com/show_bug.cgi?id=672145#c7
Marcus Meissner
participants (1)
-
bugzilla_noreply@novell.com