| Summary: | Why does KDE come with geoclue and gpsd running by default (which could be used for location tracking)? | ||
|---|---|---|---|
| Product: | [I don't know] kde | Reporter: | myndstream |
| Component: | general | Assignee: | Unassigned bugs mailing-list <unassigned-bugs> |
| Status: | RESOLVED DOWNSTREAM | ||
| Severity: | normal | CC: | fanzhuyifan |
| Priority: | NOR | ||
| Version: | unspecified | ||
| Target Milestone: | --- | ||
| Platform: | Debian stable | ||
| OS: | Linux | ||
| Latest Commit: | Version Fixed In: | ||
| Sentry Crash Report: | |||
The distribution is responsible for deciding what to ship by default and whether to enable these services. |
SUMMARY Why are these installed and enabled (autostarting) by default on Debian12? Maybe it could be useful for a few users if it was installed but not enabled and not running by default and just an option one could enable in the configs or which could be enabled by the user through a prompt. If it's running by default this also means that after upgrades it could be running again. This is a privacy issue, an undesired bloat service, and a larger attack surface even if there was a proper and vulnerability-free permissions-management for GPS-location-access. Why is it enabled and running by default? If there is a specific package to file this for, please move it there. STEPS TO REPRODUCE 1. Install Debian with KDE or upgrade it 2. Check if these are installed in the package manager and whether it's running with other commands OBSERVED RESULT It's installed, enabled and autostarting by default EXPECTED RESULT If it is installed at all despite that most users don't/can't use it and don't need it, it shouldn't be enabled and autostarting by default. SOFTWARE/OS VERSIONS Linux/KDE Plasma: Debian 12 KDE Plasma Version: 5.27.5 KDE Frameworks Version: 5.103.0 Qt Version: 5.15.8 ADDITIONAL INFORMATION Disabled/removed it like so but this should be just a toggle button (disabled by default): sudo start-stop-daemon -T --name gpsd sudo rm /etc/xdg/autostart/geoclue-demo-agent.desktop sudo apt-get remove geoclue-2.0 (if not needed at all)