https://bugzilla.novell.com/show_bug.cgi?id=862953 https://bugzilla.novell.com/show_bug.cgi?id=862953#c Sebastian Krahmer changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |ASSIGNED CC| |security-team@suse.de AssignedTo|security-team@suse.de |krahmer@suse.com -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=862953 https://bugzilla.novell.com/show_bug.cgi?id=862953#c2 Hrvoje Senjan changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |hrvoje.senjan@gmail.com InfoProvider|hrvoje.senjan@gmail.com |krahmer@suse.com --- Comment #2 from Hrvoje Senjan 2014-02-19 20:41:17 UTC --- Sebastian, to be honest, i am not sure what should i do =) i see a needinfo on me. Are you asking do i agree with your solution, or should i do something with the package? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=862953 https://bugzilla.novell.com/show_bug.cgi?id=862953#c4 David Faure changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |faure@kde.org --- Comment #4 from David Faure 2014-03-02 10:45:53 UTC --- Hello, I can be your "upstream contact", but actually this code is from one of your colleagues, Lubos Lunak :) I am happy to review (or more likely pass along for review) a patch that uses CAP_SYS_RESOURCE (where available - don't assume linux-only), but I don't know much about that myself so I can't write the patch. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=862953 https://bugzilla.novell.com/show_bug.cgi?id=862953#c6 Sebastian Krahmer changed: What |Removed |Added ---------------------------------------------------------------------------- Status|ASSIGNED |NEEDINFO InfoProvider| |faure@kde.org --- Comment #6 from Sebastian Krahmer 2014-03-10 13:05:29 UTC --- Basically a patch like this and rather than having the binary +s root, make it 'setcap cap_sys_resource=ep' -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=862953 https://bugzilla.novell.com/show_bug.cgi?id=862953#c8 --- Comment #8 from David Faure 2014-03-23 00:00:15 UTC --- Well clearly the CMakeLists.txt change to "call setcap after make install" is missing. This cannot go in without that, for people who install from sources (I guess you solve it on your side by a rule in the RPM spec file). -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=862953 https://bugzilla.novell.com/show_bug.cgi?id=862953#c10 --- Comment #10 from Hrvoje Senjan 2014-03-26 09:21:33 UTC --- @Sebastian, i'll try to extend your patch with CMake bits, and attach it here, as also open review upstream. First, and biggest problem i see, is that at least on openSUSE, setcap is not in $PATH -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=862953 https://bugzilla.novell.com/show_bug.cgi?id=862953#c12 --- Comment #12 from Hrvoje Senjan 2014-03-26 23:18:04 UTC --- Created an attachment (id=583870) --> (http://bugzilla.novell.com/attachment.cgi?id=583870) Sebastian's patch + CMake bits -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=862953 https://bugzilla.novell.com/show_bug.cgi?id=862953#c14 --- Comment #14 from Sebastian Krahmer 2014-04-07 08:30:23 UTC --- ping. thats all from my side here. can be closed when patch is applied? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=862953 https://bugzilla.novell.com/show_bug.cgi?id=862953#c16 --- Comment #16 from Sebastian Krahmer 2014-04-08 09:07:40 UTC --- ok. ping us if its accepted upstream, so we can update the permissions file -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.