[Bug 1182521] New: AUDIT-0: kdiskmark: polkit, dbus
http://bugzilla.opensuse.org/show_bug.cgi?id=1182521 Bug ID: 1182521 Summary: AUDIT-0: kdiskmark: polkit, dbus Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: security-team@suse.de Reporter: jonmagon@gmail.com QA Contact: security-team@suse.de Found By: --- Blocker: --- For my package found in OBS in benchmark:kdiskmark I would like a whitelisting for the following rpmlint error: [ 72s] kdiskmark.x86_64: I: polkit-cant-acquire-privilege org.jonmagon.kdiskmark.dropcache (??:no:auth_admin_keep) [ 72s] kdiskmark.x86_64: E: polkit-untracked-privilege (Badness: 10000) org.jonmagon.kdiskmark.dropcache (??:no:auth_admin_keep) [ 72s] kdiskmark.x86_64: E: suse-dbus-unauthorized-service (Badness: 10000) /usr/share/dbus-1/system-services/org.jonmagon.kdiskmark.service [ 72s] kdiskmark.x86_64: E: suse-dbus-unauthorized-service (Badness: 10000) /usr/share/dbus-1/system.d/org.jonmagon.kdiskmark.conf The newer version uses helper via K5Auth to write to /proc/sys/vm/drop_caches. This action drops pagecache and is safe because dirty pages are not destroyed, but this resolves situations when the kernel ignores O_DIRECT and then the app reports unreal high performance. -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1182521 Dmitry Sidorov <jonmagon@gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |jonmagon@gmail.com -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1182521 Dmitry Sidorov <jonmagon@gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC|jonmagon@gmail.com | -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1182521 Dmitry Sidorov <jonmagon@gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |jonmagon@gmail.com -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1182521 http://bugzilla.opensuse.org/show_bug.cgi?id=1182521#c8 Dominique Leuenberger <dimstar@opensuse.org> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |dimstar@opensuse.org --- Comment #8 from Dominique Leuenberger <dimstar@opensuse.org> --- (In reply to OBSbugzilla Bot from comment #3)
This is an autogenerated message for OBS integration: This bug (1182521) was mentioned in https://build.opensuse.org/request/show/882298 Factory / rpmlint
Seems that was also not complete: [ 70s] kdiskmark.x86_64: E: suse-dbus-unauthorized-service (Badness: 10000) /usr/share/dbus-1/system.d/org.jonmagon.kdiskmark.conf [ 70s] The package installs a DBUS system service file. If the package is [ 70s] intended for inclusion in any SUSE product please open a bug report to request [ 70s] review of the package by the security team. Please refer to [ 70s] https://en.opensuse.org/openSUSE:Package_security_guidelines#audit_bugs for [ 70s] more information. [ 70s] [ 70s] (none): E: badness 10000 exceeds threshold 1000, aborting. the rpmlnit submission only listed the .service, but not the .conf file (as is done in other cases and as is reported in the error message) -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1182521 Johannes Segitz <jsegitz@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |jsegitz@suse.com Assignee|security-team@suse.de |wolfgang.frisch@suse.com -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1182521 http://bugzilla.opensuse.org/show_bug.cgi?id=1182521#c9 --- Comment #9 from OBSbugzilla Bot <bwiedemann+obsbugzillabot@suse.com> --- This is an autogenerated message for OBS integration: This bug (1182521) was mentioned in https://build.opensuse.org/request/show/891225 Factory / rpmlint -- You are receiving this mail because: You are on the CC list for the bug.
participants (1)
-
bugzilla_noreply@suse.com