[prev in list] [next in list] [prev in thread] [next in thread] 

List:       kde-bugs-dist
Subject:    [Bug 229735] Installing KDE in "/usr/KDE-4.4 breaks Authorization.
From:       James Richard Tyrer <tyrerj () acm ! org>
Date:       2010-03-08 10:35:56
Message-ID: 20100308103556.540CA36A5C () immanuel ! kde ! org
[Download RAW message or body]

https://bugs.kde.org/show_bug.cgi?id=229735


James Richard Tyrer <tyrerj@acm.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|RESOLVED                    |CLOSED




--- Comment #2 from James Richard Tyrer <tyrerj acm org>  2010-03-08 11:35:55 ---
Your brief and unintelligible comment is the reason that I had stopped filing
bug reports on KDE.

To simply say that this is not KDE's problem because it is a problem with
polkit is not correct.  KDE incorporated a new library without proper testing
and it has broken things.  This legitimately makes one question the competence
of the KDE developers.  Didn't anyone test it before the release?  If you knew
it was broken and it was released anyway, that is even worse.

My suggestion is that KDE should take responsibility for the problem and supply
a patch for PolicyKit and polkit to fix the problem.

What I find with Google is arguing about security issues.  There is an easy way
to screen files for security.  Make sure that they are owned by root:root with
permissions 644 or less.  Personally, I would have liked to have seen this use
XDG_DATA_DIRS but since D-Bus doesn't, it appears that it would be best to have
separate configuration files: /etc/PolicyKit/PolicyKit.conf and
/etc/polkit-1/nullbackend.conf.d/*-nullbackend.conf.  

The point is that this needs to be fixed now, rather than making excuses that
it is someone else's problem!

I also note that it is not satisfactory that this configuration can not be
changed without restarting the messagebuss daemon.  And, local configuration
files are needed.

-- 
Configure bugmail: https://bugs.kde.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.
[prev in list] [next in list] [prev in thread] [next in thread]