Bug 399790

Summary: Authorization problems
Product: [Applications] partitionmanager Reporter: Mattia <mattia.verga>
Component: generalAssignee: Andrius Štikonas <andrius>
Status: RESOLVED UNMAINTAINED    
Severity: normal    
Priority: NOR    
Version First Reported In: 3.3   
Target Milestone: ---   
Platform: Fedora RPMs   
OS: Linux   
Latest Commit: Version Fixed/Implemented In:
Sentry Crash Report:

Description Mattia 2018-10-14 13:25:33 UTC 
Some users in Fedora have reported to have authorization problems with current version of PM:
https://bugzilla.redhat.com/show_bug.cgi?id=1575385
https://bugzilla.redhat.com/show_bug.cgi?id=1639020

I don't know if you want to bother with that, since I've tested both problems disappear by using the kauth experimental branch. Is there any ETA for that branch to become stable?
Comment 1 Andrius Štikonas 2018-10-14 13:33:29 UTC 
ETA for kauth braunch is not available yet as I don't know when smartmontools will be relased.

That said, neon team wants me to harden kauth helper security before I release. For now I've added command whitelist, but some commands (mv, dd, CopyBlocksHelper needs hardning too... Maybe disallow writing to /usr/ /bin/ /sbin/ /etc /opt /var/ /dev, although I need to allow /etc/fstab)

#1575385 sounds like downstream problem. There is nothing KPM can do if kdesu is not properly configured according to sudo configuration. Unprivileged user has no way of knowing if root account is enabled/disabled.

The second issue is also known to me. It's either connecting to dbus user bus or dbus root bus. Either way breaks something on modern systems.
Comment 2 Andrius Štikonas 2018-10-14 13:38:35 UTC 
Let's close this as unmaintained as there isn't much I can do without KAuth.