Bug 391157

Summary:	missing policy in dbus mounthelper config file
Product:	[Frameworks and Libraries] frameworks-kauth	Reporter:	t.gruner
Component:	general	Assignee:	kdelibs bugs <kdelibs-bugs-null>
Status:	RESOLVED WORKSFORME
Severity:	normal	CC:	sitter
Priority:	NOR
Version First Reported In:	unspecified
Target Milestone:	---
Platform:	openSUSE
OS:	Linux
Latest Commit:		Version Fixed In:
Sentry Crash Report:

Description t.gruner 2018-02-27 10:32:56 UTC

I got a warning from OBS (opensuse build service)

 smb4k.x86_64: W: dbus-policy-missing-allow /etc/dbus-1/system.d/org.kde.smb4k.mounthelper.conf does not allow communication
 every dbus config normally needs a line of the form <allow
 send_destination="org.foo.bar"/> or similar. If that is missing the service
 will not work with a dbus that uses deny as default policy

and some other warnings 

[   91s] smb4k.x86_64: W: polkit-unauthorized-privilege org.kde.smb4k.mounthelper.mount (??:no:yes)
[   91s] smb4k.x86_64: W: polkit-unauthorized-privilege org.kde.smb4k.mounthelper.unmount (??:no:yes)
[   91s] The package allows unprivileged users to carry out privileged operations
[   91s] without authentication. This could cause security problems if not done
[   91s] carefully. If the package is intended for inclusion in any SUSE product please
[   91s] open a bug report to request review of the package by the security team
[   91s] 
[   91s] smb4k.x86_64: I: polkit-cant-acquire-privilege org.kde.smb4k.mounthelper.mount (??:no:yes)
[   91s] smb4k.x86_64: I: polkit-cant-acquire-privilege org.kde.smb4k.mounthelper.unmount (??:no:yes)
[   91s] Usability can be improved by allowing users to acquire privileges via
[   91s] authentication. Use e.g. 'auth_admin' instead of 'no' and make sure to define
[   91s] 'allow_any'. This is an issue only if the privilege is not listed in /etc
[   91s] /polkit-default-privs.*

Comment 1 t.gruner 2018-03-09 08:03:53 UTC

For the first warning ´dbus-policy-missing-allow´ I add this line after ´<policy user="root">´ :
 <allow send_destination="org.kde.smb4k.mounthelper"/>

Comment 2 Alexander Reinholdt 2018-03-11 06:18:57 UTC

Since the policy file is generate automatically, I assume this is an issue for upstream.

Comment 3 Alexander Reinholdt 2018-03-11 06:21:38 UTC

The following report was filed against Smb4K. Since the DBUS policy file is generated automatically, I guess this is an issue that should be taken care of here.

Comment 4 t.gruner 2018-03-19 13:02:31 UTC

I do not know about DBUS policy. These are just warnings from OBS.

Comment 5 Harald Sitter 2020-09-05 16:53:52 UTC

How would one test this? Or I guess specifically: how would one make dbus use "deny as default policy"?

Comment 6 Bug Janitor Service 2020-09-20 04:33:11 UTC

Dear Bug Submitter,

This bug has been in NEEDSINFO status with no change for at least
15 days. Please provide the requested information as soon as
possible and set the bug status as REPORTED. Due to regular bug
tracker maintenance, if the bug is still in NEEDSINFO status with
no change in 30 days the bug will be closed as RESOLVED > WORKSFORME
due to lack of needed information.

For more information about our bug triaging procedures please read the
wiki located here:
https://community.kde.org/Guidelines_and_HOWTOs/Bug_triaging

If you have already provided the requested information, please
mark the bug as REPORTED so that the KDE team knows that the bug is
ready to be confirmed.

Thank you for helping us make KDE software even better for everyone!

Comment 7 Bug Janitor Service 2020-10-05 04:33:18 UTC

This bug has been in NEEDSINFO status with no change for at least
30 days. The bug is now closed as RESOLVED > WORKSFORME
due to lack of needed information.

For more information about our bug triaging procedures please read the
wiki located here:
https://community.kde.org/Guidelines_and_HOWTOs/Bug_triaging

Thank you for helping us make KDE software even better for everyone!