Bug 1226694 - svxlink rules allow public access to tty and dsp devices
Summary: svxlink rules allow public access to tty and dsp devices
Keywords:
Status: CLOSED NEXTRELEASE
Alias: None
Product: Fedora
Classification: Fedora
Component: svxlink
Version: 23
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Lucian Langa
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks: 1226704
TreeView+ depends on / blocked
 
Reported: 2015-05-31 19:11 UTC by Zbigniew Jędrzejewski-Szmek
Modified: 2015-09-23 13:51 UTC (History)
1 user (show)

Fixed In Version: 14.08.1-2.fc22
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2015-09-23 07:00:40 UTC
Type: Bug
Embargoed:

Attachments (Terms of Use)

Description Zbigniew Jędrzejewski-Szmek 2015-05-31 19:11:45 UTC 
Description of problem:
Please drop udev rules from svxlink-server. Installing it allows anyone to snoop on /dev/tty* and /dev/dsp*. Iff users should be privileged to do that, they should be added to the right groups.

Version-Release number of selected component (if applicable):
svxlink-server-0.13.1-15.fc23.x86_64
Comment 1 Jan Kurik 2015-07-15 14:04:59 UTC 
This bug appears to have been reported against 'rawhide' during the Fedora 23 development cycle.
Changing version to '23'.

(As we did not run this process for some time, it could affect also pre-Fedora 23 development
cycle bugs. We are very sorry. It will help us with cleanup during Fedora 23 End Of Life. Thank you.)

More information and reason for this action is here:
https://fedoraproject.org/wiki/BugZappers/HouseKeeping/Fedora23
Comment 2 Zbigniew Jędrzejewski-Szmek 2015-08-15 15:02:43 UTC 
2:14.08.1-1 in rawhide fixes this...
Comment 3 Fedora Update System 2015-08-25 12:27:58 UTC 
svxlink-14.08.1-2.fc23 has been submitted as an update to Fedora 23. https://bodhi.fedoraproject.org/updates/FEDORA-2015-14220
Comment 4 Fedora Update System 2015-08-25 12:28:15 UTC 
svxlink-14.08.1-2.fc22 has been submitted as an update to Fedora 22. https://bodhi.fedoraproject.org/updates/FEDORA-2015-14221
Comment 5 Fedora Update System 2015-08-26 04:25:20 UTC 
svxlink-14.08.1-2.fc23 has been pushed to the Fedora 23 testing repository. If problems still persist, please make note of it in this bug report.\nIf you want to test the update, you can install it with \n su -c 'yum --enablerepo=updates-testing update svxlink'. You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2015-14220
Comment 6 Fedora Update System 2015-08-26 17:27:25 UTC 
svxlink-14.08.1-2.fc22 has been pushed to the Fedora 22 testing repository. If problems still persist, please make note of it in this bug report.\nIf you want to test the update, you can install it with \n su -c 'yum --enablerepo=updates-testing update svxlink'. You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2015-14221
Comment 7 Fedora Update System 2015-09-23 07:00:36 UTC 
svxlink-14.08.1-2.fc23 has been pushed to the Fedora 23 stable repository. If problems still persist, please make note of it in this bug report.
Comment 8 Fedora Update System 2015-09-23 13:51:16 UTC 
svxlink-14.08.1-2.fc22 has been pushed to the Fedora 22 stable repository. If problems still persist, please make note of it in this bug report.
Note You need to log in before you can comment on or make changes to this bug.