[Bug 1207585] New: AUDIT-WHITELIST: NetworkManager-fortisslvpn: move dbus system.d file to /usr
https://bugzilla.suse.com/show_bug.cgi?id=1207585 Bug ID: 1207585 Summary: AUDIT-WHITELIST: NetworkManager-fortisslvpn: move dbus system.d file to /usr Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: security-team@suse.de Reporter: gmbr3@opensuse.org QA Contact: qa-bugs@suse.de Found By: --- Blocker: --- Move from /etc to /usr Name: nm-fortisslvpn-service.conf -- You are receiving this mail because: You are on the CC list for the bug.
https://bugzilla.suse.com/show_bug.cgi?id=1207585 https://bugzilla.suse.com/show_bug.cgi?id=1207585#c1 --- Comment #1 from Callum Farmer <gmbr3@opensuse.org> --- https://build.opensuse.org/request/show/1061239 -- You are receiving this mail because: You are on the CC list for the bug.
https://bugzilla.suse.com/show_bug.cgi?id=1207585 https://bugzilla.suse.com/show_bug.cgi?id=1207585#c2 Matthias Gerstner <matthias.gerstner@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |matthias.gerstner@suse.com --- Comment #2 from Matthias Gerstner <matthias.gerstner@suse.com> --- Full error message from rpmlint: NetworkManager-fortisslvpn.x86_64: E: dbus-file-unauthorized (Badness: 10) /usr/share/dbus-1/system.d/nm-fortisslvpn-service.conf (sha256 file digest default filter:7aa7b39b0413c03743f188cb5fbd529859bde479578e56527bc76a98428aed86 shell filter:e9559a3134e1fd3c3da0278a9522cc3012bf0ef2d017ea192db6895313017385 xml filter:382e31dfc5f6a62b811535e54c09d95b59689dff2641f0aaeee4927d5705bfca) -- You are receiving this mail because: You are on the CC list for the bug.
https://bugzilla.suse.com/show_bug.cgi?id=1207585 https://bugzilla.suse.com/show_bug.cgi?id=1207585#c3 --- Comment #3 from Matthias Gerstner <matthias.gerstner@suse.com> --- The initial audit of this was in bug 1109938. See also the Audit notes for it in our internal wiki. A quick survey of the current situation should be enough to adjust this whitelisting. -- You are receiving this mail because: You are on the CC list for the bug.
https://bugzilla.suse.com/show_bug.cgi?id=1207585 https://bugzilla.suse.com/show_bug.cgi?id=1207585#c4 --- Comment #4 from Matthias Gerstner <matthias.gerstner@suse.com> --- Full rpmlint error message: sssd-dbus.x86_64: E: dbus-file-unauthorized (Badness: 10) /usr/share/dbus-1/system.d/org.freedesktop.sssd.infopipe.conf (sha256 file digest default filter:4601b3592d313effe1a70c44167775b06693dc9b72e7bebc718b6c9e8b094b8f shell filter:1aef0a71dba87d6ffa1c26ec568b500d41dd2153d36373b1a9fe8564659700fc xml filter:d9304d507aced6bfd7f14eb5dcc93689ccf2a8b61d346718677fcd97a8b67feb) -- You are receiving this mail because: You are on the CC list for the bug.
https://bugzilla.suse.com/show_bug.cgi?id=1207585 Wolfgang Frisch <wolfgang.frisch@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |CONFIRMED CC| |wolfgang.frisch@suse.com Assignee|security-team@suse.de |wolfgang.frisch@suse.com -- You are receiving this mail because: You are on the CC list for the bug.
https://bugzilla.suse.com/show_bug.cgi?id=1207585 https://bugzilla.suse.com/show_bug.cgi?id=1207585#c7 --- Comment #7 from Wolfgang Frisch <wolfgang.frisch@suse.com> --- Last audited version: 1.2.10 Current version: 1.4.0 Packaging changes: minimal Quick `git diff 1.2.10 1.4.0`: - GTK4 support added - Now Drops privileges in pppd - Interactive connect (e.g. OTP, PIN, ...) * New D-Bus method GetPin * implemented in handle_get_pin() * Looks reasonable, but in any case: - All D-Bus interfaces still require root. Good. I'm proceeding with the whitelisting. -- You are receiving this mail because: You are on the CC list for the bug.
https://bugzilla.suse.com/show_bug.cgi?id=1207585 https://bugzilla.suse.com/show_bug.cgi?id=1207585#c8 --- Comment #8 from Wolfgang Frisch <wolfgang.frisch@suse.com> --- https://github.com/rpm-software-management/rpmlint/commit/c409cd77874ec0e15f... Should be in Factory soon. -- You are receiving this mail because: You are on the CC list for the bug.
https://bugzilla.suse.com/show_bug.cgi?id=1207585 https://bugzilla.suse.com/show_bug.cgi?id=1207585#c9 Wolfgang Frisch <wolfgang.frisch@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|CONFIRMED |RESOLVED Resolution|--- |FIXED --- Comment #9 from Wolfgang Frisch <wolfgang.frisch@suse.com> --- Released. https://build.opensuse.org/package/view_file/openSUSE:Factory/rpmlint/rpmlin... -- You are receiving this mail because: You are on the CC list for the bug.
participants (1)
-
bugzilla_noreply＠suse.com