Hide Forgot
Description of problem: I create SELinux policy for KDE dbus system services and I have noticed backlighthelper creates /.config dir which causes AVC denials. These are rules for the AVC msgs. #============= kdebacklighthelper_t ============== allow kdebacklighthelper_t root_t:dir { write remove_name create add_name }; allow kdebacklighthelper_t root_t:file { setattr read lock create write getattr unlink open }; allow kdebacklighthelper_t self:capability dac_override; Not something we want to allow. I believe backlighthelper should not create top level directory. kcmdatetimehelper uses /usr/share/config directory.
Yeah, that's a bug. Lukáš Tinkl is the upstream developer (or at least one of the upstream developers) of that code. Lukáš, can you please have a look at this?
Great. Thanks. Also I am seeing a similar problem during using fontinst_helper. .kde directory is created in this case # ls -RZ /.kde /.kde: drwxrwxr-x. root root system_u:object_r:root_t:s0 share /.kde/share: drwxrwxr-x. root root system_u:object_r:root_t:s0 config /.kde/share/config: -rw-------. root root system_u:object_r:root_t:s0 kdebugrc Lukáš, do you need to open a new bug?
Hmmm, I don't know who wrote the fontinst_helper upstream, but the issue is probably the same in both cases: KAuth helpers get run through D-Bus activation, which doesn't propagate environment variables, so anything relying on $HOME being set won't work as expected and shouldn't be used in a KAuth helper.
Most probably it's a bug in the KAuth code itself, I don't create any such config files in the helper code.
*** Bug 706582 has been marked as a duplicate of this bug. ***
*** Bug 789682 has been marked as a duplicate of this bug. ***
This message is a notice that Fedora 15 is now at end of life. Fedora has stopped maintaining and issuing updates for Fedora 15. It is Fedora's policy to close all bug reports from releases that are no longer maintained. At this time, all open bugs with a Fedora 'version' of '15' have been closed as WONTFIX. (Please note: Our normal process is to give advanced warning of this occurring, but we forgot to do that. A thousand apologies.) Package Maintainer: If you wish for this bug to remain open because you plan to fix it in a currently maintained version, feel free to reopen this bug and simply change the 'version' to a later Fedora version. Bug Reporter: Thank you for reporting this issue and we are sorry that we were unable to fix it before Fedora 15 reached end of life. If you would still like to see this bug fixed and are able to reproduce it against a later version of Fedora, you are encouraged to click on "Clone This Bug" (top right of this page) and open it against that version of Fedora. Although we aim to fix as many bugs as possible during every release's lifetime, sometimes those efforts are overtaken by events. Often a more recent Fedora release includes newer upstream software that fixes bugs or makes them obsolete. The process we are following is described here: http://fedoraproject.org/wiki/BugZappers/HouseKeeping
Still relevant, we still get reports about SELinux denials caused by this bug.
In the KDE control panel I choosed a NTP server to sync the clock Package: (null) OS Release: Fedora release 17 (Beefy Miracle)
Change the system time zone, then hit apply Package: (null) OS Release: Fedora release 17 (Beefy Miracle)
Should be fixed with https://admin.fedoraproject.org/updates/FEDORA-2012-17214/qt-4.8.3-7.fc17 *** This bug has been marked as a duplicate of bug 694385 ***