On Sat, Mar 24, 2012 at 10:39:00PM +0800, Marguerite Su wrote:
Hi, all,
I'm working on a "clean" version of RecordItNow( strip ffmpeg and mplayer off by default but provide rebuild possibility), which actually is the most powerful desktop recorder under KDE enviroment. packge here:
https://build.opensuse.org/package/show?package=recorditnow&project=home%3AMargueriteSu
and the rpmlint.log returns lots of dbus service and polkit policy warnings.
I tried and fixed some, but these two are out of my capability.
recorditnow.x86_64: W: suse-dbus-unauthorized-service /etc/dbus-1/system.d/org.kde.recorditnow.helper.conf recorditnow.x86_64: W: suse-dbus-unauthorized-service /usr/share/dbus-1/system-services/org.kde.recorditnow.helper.service The package installs a DBUS system service file. If the package is intended for inclusion in any SUSE product please open a bug report to request review of the service by the security team.
and
recorditnow.x86_64: I: polkit-untracked-privilege org.kde.recorditnow.helper.watch (auth_admin_keep_always:auth_admin_keep_always:auth_admin) The privilege is not listed in /etc/polkit-default-privs.* which makes it harder for admins to find. If the package is intended for inclusion in any SUSE product please open a bug report to request review of the package by the security team
the first seems okay and can be safely ignored by .rpmlintrc. the second makes some senses.
so I tried to fix it by adding these scriptlets below info %post and %postun:
#fix the submit to suse security team warning %post /sbin/ldconfig kbuildsycoca4 echo "org.kde.recorditnow.helper.watch auth_admin_keep_always:auth_admin_keep_always:auth_admin" >> /etc/polkit-default-privs.standard
%postun /sbin/ldconfig kbuildsycoca4 sed -i "s/org.kde.recorditnow.helper.watch auth_admin_keep_always\:auth_admin_keep_always\:auth_admin//" /etc/polkit-default-privs.standard
on OBS it's just okay, but if you test the generated packages on your own machine, the %post scripts can't be executed and failed. so any suggestion on how to append a new line to /etc/polkit-default-privs.standard? it's already on your system, we can't do a dirty fix by replacing it with a new file with a new line when installation and replacing it with an old file without that new line when uninstallation.
and kbuildsycoca4 code is also something needed be better designed. I installed the generated packages on my own machine and started it, it can't find any backends or "recorder", in konsole it suggested you to run kbuildsycoca4. so I add it to %post and %postun area, but it turns out to be:
kbuildsycoca4 running... kbuildsycoca4(9523): "applications.menu" not found in ("//.config/menus/", "/etc/xdg/menus/")
anyone knows any macros can do the job? I checked /etc/rpm/macro.kde4 but no such macros found.
What about opening a bugreport for the security team like every of those messages say? Ciao, Marcus -- To unsubscribe, e-mail: opensuse-packaging+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-packaging+owner@opensuse.org