Bug 399790 - Authorization problems
Summary: Authorization problems
Status: RESOLVED UNMAINTAINED
Alias: None
Product: partitionmanager
Classification: Applications
Component: general (show other bugs)
Version: 3.3
Platform: Fedora RPMs Linux
: NOR normal
Target Milestone: ---
Assignee: Andrius Štikonas
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2018-10-14 13:25 UTC by Mattia
Modified: 2018-10-14 13:38 UTC (History)
0 users

See Also:
Latest Commit:
Version Fixed In:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Mattia 2018-10-14 13:25:33 UTC
Some users in Fedora have reported to have authorization problems with current version of PM:
https://bugzilla.redhat.com/show_bug.cgi?id=1575385
https://bugzilla.redhat.com/show_bug.cgi?id=1639020

I don't know if you want to bother with that, since I've tested both problems disappear by using the kauth experimental branch. Is there any ETA for that branch to become stable?
Comment 1 Andrius Štikonas 2018-10-14 13:33:29 UTC
ETA for kauth braunch is not available yet as I don't know when smartmontools will be relased.

That said, neon team wants me to harden kauth helper security before I release. For now I've added command whitelist, but some commands (mv, dd, CopyBlocksHelper needs hardning too... Maybe disallow writing to /usr/ /bin/ /sbin/ /etc /opt /var/ /dev, although I need to allow /etc/fstab)

#1575385 sounds like downstream problem. There is nothing KPM can do if kdesu is not properly configured according to sudo configuration. Unprivileged user has no way of knowing if root account is enabled/disabled.

The second issue is also known to me. It's either connecting to dbus user bus or dbus root bus. Either way breaks something on modern systems.
Comment 2 Andrius Štikonas 2018-10-14 13:38:35 UTC
Let's close this as unmaintained as there isn't much I can do without KAuth.