http://bugzilla.opensuse.org/show_bug.cgi?id=1209921 Bug ID: 1209921 Summary: AUDIT-0: mozillavpn: review of polkit and d-bus files Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: security-team@suse.de Reporter: me@cimba.li QA Contact: security-team@suse.de Found By: --- Blocker: --- I���m trying to package Mozilla VPN cleanly to request inclusion in the network:vpn project. The package is currently found in OBS in home:cimbali:mozillavpn, and I would like to request a whitelisting for the following rpmlint errors: [ 940s] mozillavpn.x86_64: E: polkit-untracked-privilege (Badness: 10) org.mozilla.vpn.activate (no:no:auth_admin) [ 940s] mozillavpn.x86_64: E: polkit-untracked-privilege (Badness: 10) org.mozilla.vpn.deactivate (no:no:auth_admin) and: [ 940s] mozillavpn.x86_64: E: dbus-file-unauthorized (Badness: 10) /usr/share/dbus-1/system.d/org.mozilla.vpn.conf (sha256 file digest default filter:e74ba6daec764d45a243a9e23d1740ec8e9ded2d355bc9ac471964cfc4a6f862 shell filter:3776b809929e0b7fa2edb9163e274ff4c0c04326cc67fae61831d2e01f21bfd4 xml filter:98e9c1413257012deb4f2eedfd107a83497fe143250f70086755b79041208743) [ 940s] mozillavpn.x86_64: E: dbus-file-unauthorized (Badness: 10) /usr/share/dbus-1/system-services/org.mozilla.vpn.dbus.service (sha256 file digest default filter:70eee51675c8fd78189ee97a473ce6612a06af56297fcec8b8d0c76c930d0a81 shell filter:70eee51675c8fd78189ee97a473ce6612a06af56297fcec8b8d0c76c930d0a81 xml filter:<failed-to-calculate>) The various upstream source files are: https://github.com/mozilla-mobile/mozilla-vpn-client/blob/main/src/apps/vpn/... https://github.com/mozilla-mobile/mozilla-vpn-client/blob/main/src/apps/vpn/... https://github.com/mozilla-mobile/mozilla-vpn-client/blob/main/src/apps/vpn/... --- Finally this file is installed as a systemd service, but it is not enabled by default: https://github.com/mozilla-mobile/mozilla-vpn-client/blob/main/linux/mozilla... -- You are receiving this mail because: You are on the CC list for the bug.