[Bug 1206143] New: Request to whitelist org.cinnamon.settings-daemon.plugins.wacom.wacom-led-helper
https://bugzilla.suse.com/show_bug.cgi?id=1206143 Bug ID: 1206143 Summary: Request to whitelist org.cinnamon.settings-daemon.plugins.wacom.wacom-led-h elper Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.5 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: security-team@suse.de Reporter: mlin@suse.com QA Contact: qa-bugs@suse.de CC: matthias.gerstner@suse.com, wolfgang.frisch@suse.com Found By: --- Blocker: --- This is generally a clone of https://bugzilla.suse.com/show_bug.cgi?id=1186845 Trying to update Cinnamon to Leap 15.5/Backports:SLE-15-SP5 my test build have got a rpmlint error[1]: cinnamon-settings-daemon.x86_64: E: polkit-unauthorized-privilege (Badness: 10000) org.cinnamon.settings-daemon.plugins.wacom.wacom-led-helper (no:no:yes) That file was whitelisted in Factory before, we need the same change to SLE15 then cinnamon can be whitelisted for Leap 15.5. Can someone please add it to polkit-default-privs to SLE15? [1] https://build.opensuse.org/package/live_build_log/home:mlin7442:rebuild_fail... -- You are receiving this mail because: You are on the CC list for the bug.
https://bugzilla.suse.com/show_bug.cgi?id=1206143 https://bugzilla.suse.com/show_bug.cgi?id=1206143#c1 --- Comment #1 from Matthias Gerstner <matthias.gerstner@suse.com> --- So this is for the SLE-15-SP5 codestream, yes? Which is still in development. -- You are receiving this mail because: You are on the CC list for the bug.
https://bugzilla.suse.com/show_bug.cgi?id=1206143 Marcus Meissner <meissner@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Summary|Request to whitelist |AUDIT-0: Request to |org.cinnamon.settings-daemo |whitelist |n.plugins.wacom.wacom-led-h |org.cinnamon.settings-daemo |elper |n.plugins.wacom.wacom-led-h | |elper -- You are receiving this mail because: You are on the CC list for the bug.
https://bugzilla.suse.com/show_bug.cgi?id=1206143 https://bugzilla.suse.com/show_bug.cgi?id=1206143#c2 --- Comment #2 from Max Lin <mlin@suse.com> --- (In reply to Matthias Gerstner from comment #1)
So this is for the SLE-15-SP5 codestream, yes? Which is still in development.
Yes, this cinnamon update will not submit to Leap 15.4 AFAIK, therefore this should be needed for the SP5 codestream only. -- You are receiving this mail because: You are on the CC list for the bug.
https://bugzilla.suse.com/show_bug.cgi?id=1206143 Matthias Gerstner <matthias.gerstner@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Summary|AUDIT-0: Request to |AUDIT-WHITELIST: |whitelist |cinnamon-settings-daemon: |org.cinnamon.settings-daemo |backport polkit |n.plugins.wacom.wacom-led-h |whitelisting to SLE-15-SP5 |elper |codestream -- You are receiving this mail because: You are on the CC list for the bug.
https://bugzilla.suse.com/show_bug.cgi?id=1206143 https://bugzilla.suse.com/show_bug.cgi?id=1206143#c3 --- Comment #3 from Matthias Gerstner <matthias.gerstner@suse.com> --- The additional polkit file is for calling "/usr/lib64/csd-wacom-led-helper" as root. This program is not packaged anywhere though, as far as I can see. It seems this was dropped from cinnamon-settings-daemon in version 5.2.0 via commit 619ed932aad6fe4026f5651a77b8ab09d6861a97: wacom: Drop LED helper (#337) It seems upstream only forgot to also remove the Polkit policy file for this. I will approach upstream Github to get this file removed. For us this means we simply need to stop packaging the policy file. There is no whitelisting necessary. And in Factory the existing whitelisting can be removed. -- You are receiving this mail because: You are on the CC list for the bug.
https://bugzilla.suse.com/show_bug.cgi?id=1206143 https://bugzilla.suse.com/show_bug.cgi?id=1206143#c4 --- Comment #4 from Matthias Gerstner <matthias.gerstner@suse.com> --- The upstream status of wacom-led-helper is confusing. The program was re-added again in version 5.4.4. I've created an issue: https://github.com/linuxmint/cinnamon-settings-daemon/issues/372 For our version 5.2.0 we can be sure that the Polkit file won't be needed though. -- You are receiving this mail because: You are on the CC list for the bug.
https://bugzilla.suse.com/show_bug.cgi?id=1206143 https://bugzilla.suse.com/show_bug.cgi?id=1206143#c5 Matthias Gerstner <matthias.gerstner@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |INVALID --- Comment #5 from Matthias Gerstner <matthias.gerstner@suse.com> --- Upstream did not react yet to my issue. I'm closing this bug as invalid anyway. As I wrote in comment 3 you simply need to drop the polkit policy file from the packaging (also in Factory) and all will be fine. -- You are receiving this mail because: You are on the CC list for the bug.
https://bugzilla.suse.com/show_bug.cgi?id=1206143 https://bugzilla.suse.com/show_bug.cgi?id=1206143#c6 --- Comment #6 from Matthias Gerstner <matthias.gerstner@suse.com> --- Upstream by now confirmed in the issue that this is dead code / config. -- You are receiving this mail because: You are on the CC list for the bug.
participants (1)
-
bugzilla_noreply＠suse.com