Bug 689925

Summary: backlighthelper creates .config top level directory
Product: [Fedora] Fedora Reporter: Miroslav Grepl <mgrepl>
Component: kdebase-workspaceAssignee: Lukáš Tinkl <ltinkl>
Status: CLOSED DUPLICATE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: medium Docs Contact:
Priority: medium    
Version: rawhideCC: akurtako, artavorel, czenda1985, dwalsh, fedora, george.istudor, greg.martyn, jgrulich, jorti, jreznik, juliooao, kevin, ltinkl, matthias.rambausek, rdieter, redhat, rnovacek, ry, smparrish, spochybova, than, zlatstalker
Target Milestone: ---Keywords: Reopened
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2012-12-10 19:52:01 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:

Description Miroslav Grepl 2011-03-22 19:48:14 UTC
Description of problem:

I create SELinux policy for KDE dbus system services and I have noticed backlighthelper creates /.config dir which causes AVC denials. These are rules for the AVC msgs.


#============= kdebacklighthelper_t ==============
allow kdebacklighthelper_t root_t:dir { write remove_name create add_name };
allow kdebacklighthelper_t root_t:file { setattr read lock create write getattr unlink open };
allow kdebacklighthelper_t self:capability dac_override;


Not something we want to allow. I believe backlighthelper should not create top level directory.

kcmdatetimehelper uses /usr/share/config directory.

Comment 1 Kevin Kofler 2011-03-22 20:50:07 UTC
Yeah, that's a bug. Lukáš Tinkl is the upstream developer (or at least one of the upstream developers) of that code. Lukáš, can you please have a look at this?

Comment 2 Miroslav Grepl 2011-03-22 23:43:20 UTC
Great. Thanks.

Also I am seeing a similar problem during using fontinst_helper. 

.kde directory is created in this case

# ls -RZ /.kde
/.kde:
drwxrwxr-x. root root system_u:object_r:root_t:s0      share

/.kde/share:
drwxrwxr-x. root root system_u:object_r:root_t:s0      config

/.kde/share/config:
-rw-------. root root system_u:object_r:root_t:s0      kdebugrc

Lukáš,
do you need to open a new bug?

Comment 3 Kevin Kofler 2011-03-23 07:50:10 UTC
Hmmm, I don't know who wrote the fontinst_helper upstream, but the issue is probably the same in both cases: KAuth helpers get run through D-Bus activation, which doesn't propagate environment variables, so anything relying on $HOME being set won't work as expected and shouldn't be used in a KAuth helper.

Comment 4 Lukáš Tinkl 2011-03-23 11:37:42 UTC
Most probably it's a  bug in the KAuth code itself, I don't create any such config files in the helper code.

Comment 5 Miroslav Grepl 2011-05-23 09:55:32 UTC
*** Bug 706582 has been marked as a duplicate of this bug. ***

Comment 6 Miroslav Grepl 2012-02-13 20:35:44 UTC
*** Bug 789682 has been marked as a duplicate of this bug. ***

Comment 7 Fedora End Of Life 2012-08-07 19:20:45 UTC
This message is a notice that Fedora 15 is now at end of life. Fedora
has stopped maintaining and issuing updates for Fedora 15. It is
Fedora's policy to close all bug reports from releases that are no
longer maintained. At this time, all open bugs with a Fedora 'version'
of '15' have been closed as WONTFIX.

(Please note: Our normal process is to give advanced warning of this
occurring, but we forgot to do that. A thousand apologies.)

Package Maintainer: If you wish for this bug to remain open because you
plan to fix it in a currently maintained version, feel free to reopen
this bug and simply change the 'version' to a later Fedora version.

Bug Reporter: Thank you for reporting this issue and we are sorry that
we were unable to fix it before Fedora 15 reached end of life. If you
would still like to see this bug fixed and are able to reproduce it
against a later version of Fedora, you are encouraged to click on
"Clone This Bug" (top right of this page) and open it against that
version of Fedora.

Although we aim to fix as many bugs as possible during every release's
lifetime, sometimes those efforts are overtaken by events. Often a
more recent Fedora release includes newer upstream software that fixes
bugs or makes them obsolete.

The process we are following is described here:
http://fedoraproject.org/wiki/BugZappers/HouseKeeping

Comment 8 Kevin Kofler 2012-08-08 20:35:07 UTC
Still relevant, we still get reports about SELinux denials caused by this bug.

Comment 9 Juan Orti 2012-10-19 14:06:14 UTC
In the KDE control panel I choosed a NTP server to sync the clock

Package: (null)
OS Release: Fedora release 17 (Beefy Miracle)

Comment 10 Greg Martyn 2012-12-10 19:47:10 UTC
Change the system time zone, then hit apply

Package: (null)
OS Release: Fedora release 17 (Beefy Miracle)

Comment 11 Rex Dieter 2012-12-10 19:52:01 UTC
Should be fixed with
https://admin.fedoraproject.org/updates/FEDORA-2012-17214/qt-4.8.3-7.fc17

*** This bug has been marked as a duplicate of bug 694385 ***