Bug 485206 - Why does KDE come with geoclue and gpsd running by default (which could be used for location tracking)?
Summary: Why does KDE come with geoclue and gpsd running by default (which could be us...
Status: RESOLVED DOWNSTREAM
Alias: None
Product: kde
Classification: I don't know
Component: general (show other bugs)
Version: unspecified
Platform: Debian stable Linux
: NOR normal
Target Milestone: ---
Assignee: Unassigned bugs mailing-list
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2024-04-07 22:32 UTC by myndstream
Modified: 2024-04-08 00:27 UTC (History)
1 user (show)

See Also:
Latest Commit:
Version Fixed In:
Sentry Crash Report:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description myndstream 2024-04-07 22:32:43 UTC
SUMMARY
Why are these installed and enabled (autostarting) by default on Debian12?

Maybe it could be useful for a few users if it was installed but not enabled and not running by default and just an option one could enable in the configs or which could be enabled by the user through a prompt. If it's running by default this also means that after upgrades it could be running again. This is a privacy issue, an undesired bloat service, and a larger attack surface even if there was a proper and vulnerability-free permissions-management for GPS-location-access. Why is it enabled and running by default?

If there is a specific package to file this for, please move it there.

STEPS TO REPRODUCE
1. Install Debian with KDE or upgrade it
2. Check if these are installed in the package manager and whether it's running with other commands

OBSERVED RESULT
It's installed, enabled and autostarting by default

EXPECTED RESULT
If it is installed at all despite that most users don't/can't use it and don't need it, it shouldn't be enabled and autostarting by default.

SOFTWARE/OS VERSIONS
Linux/KDE Plasma: Debian 12
KDE Plasma Version: 5.27.5
KDE Frameworks Version: 5.103.0
Qt Version: 5.15.8

ADDITIONAL INFORMATION

Disabled/removed it like so but this should be just a toggle button (disabled by default):

    sudo start-stop-daemon -T --name gpsd
    sudo rm /etc/xdg/autostart/geoclue-demo-agent.desktop
    sudo apt-get remove geoclue-2.0 (if not needed at all)
Comment 1 fanzhuyifan 2024-04-08 00:27:05 UTC
The distribution is responsible for deciding what to ship by default and whether to enable these services.