Bug 953852

Summary: Option to disable package-kit installs
Product: [Fedora] Fedora Reporter: Patrik Kis <pkis>
Component: realmdAssignee: Stef Walter <stefw>
Status: CLOSED NEXTRELEASE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: high Docs Contact:
Priority: high    
Version: 19CC: jhrozek, jpazdziora, stefw, yaneti, yelley
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2013-05-13 15:17:58 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 918092    

Description Patrik Kis 2013-04-19 10:23:37 UTC
Description of problem:
realmd "silently" install packages to the system when joining the host to idm-server. Admins should know that and it would be expected that realmd at least warn them or even better asks for confirmation.
The process of joining is interrupted to give idm-server admin password anyhow, so it is not fully automatic. This, one more interruption for y/n should not matter. A command line option could be added to skip this and do automatic install ().

Version-Release number of selected component (if applicable):
realmd-0.13.3-2.fc19

How reproducible:
always

Comment 1 Stef Walter 2013-04-19 12:25:24 UTC
This discussion has taken place several times before, but lets document it here for posterity.

 * Installing software *does not* enable it on RHEL / Fedora as per packaging
   policy.
 * Enabling software is what's considered risky.
 * realmd's whole purpose is to *enable* software.
 * Installation is not the step that needs confirmation, enabling is what
   needs confirmation.
 * It seems silly to have the 'realm' command prompt and ask for confirmation
   to do what was just asked of it.

That said there is a bug upstream, with a patch ready for review, of a patch that lets administrators (or packagers) set a default which disables automatic package installation.

See: https://bugs.freedesktop.org/show_bug.cgi?id=61215

Comment 2 Stef Walter 2013-04-29 12:52:54 UTC
Upstream has patch.

Comment 3 Fedora Update System 2013-04-29 18:02:59 UTC
realmd-0.13.90-1.fc19 has been submitted as an update for Fedora 19.
https://admin.fedoraproject.org/updates/realmd-0.13.90-1.fc19

Comment 4 Fedora Update System 2013-04-30 20:12:22 UTC
Package realmd-0.13.90-1.fc19:
* should fix your issue,
* was pushed to the Fedora 19 testing repository,
* should be available at your local mirror within two days.
Update it with:
# su -c 'yum update --enablerepo=updates-testing realmd-0.13.90-1.fc19'
as soon as you are able to.
Please go to the following url:
https://admin.fedoraproject.org/updates/FEDORA-2013-7111/realmd-0.13.90-1.fc19
then log in and leave karma (feedback).

Comment 5 Fedora Update System 2013-05-02 14:13:23 UTC
realmd-0.13.91-1.fc19 has been submitted as an update for Fedora 19.
https://admin.fedoraproject.org/updates/realmd-0.13.91-1.fc19

Comment 6 Patrik Kis 2013-05-03 14:00:26 UTC
Copy/paste of offline discussion"

pkis: IMHO, it would be reasonable to have the installation disabled by default

stefw: This would break most callers of realmd, including remote configuration tools.

 * No valid reasons for this approach have ever been presented.

 * RHEL and Fedora have a policy that package installation does not enable or setup a package. Ergo package installation is innocous, when compared to enabling and configuring a package. realmd does both of the above (installation/enabling).

 * Why is it more dangerous to install+enable a package vs. enable an already installed package? 

 * Please list actual security issues.

 * Obviously only signed software is installed, this is not an attack vector.

 * Use case: One of the big problems with authconfig was that it didn't install software automatically. This made it completely unusable in the installer.

 * Use case: realmd is used by such tools as the CIM provider, GUI clients and on, disabling installation would break most clients.

 * If a given realmd client wishes to implement a prompt, then it could in theory do a non-unixy "yes-please-do-what-i-just-asked-you-even-though-its-a-nondestructive-operation" yum style prompt.

Comment 7 Stef Walter 2013-05-13 15:17:58 UTC
realmd 0.14.0 is now in Fedora 19 stable.

https://admin.fedoraproject.org/updates/FEDORA-2013-7787/realmd-0.14.0-1.fc19