Bug 1125427

Summary:	cinnamon-control-center: removal of /usr/share/polkit-1/rules.d/cinnamon-control-center.rules
Product:	[openSUSE] openSUSE Tumbleweed	Reporter:	Matthias Gerstner <matthias.gerstner>
Component:	Security	Assignee:	Marguerite Su <i>
Status:	RESOLVED FIXED	QA Contact:	E-mail List <qa-bugs>
Severity:	Normal
Priority:	P5 - None	CC:	johann.luce, security-team
Version:	Current
Target Milestone:	---
Hardware:	Other
OS:	Other
Whiteboard:
Found By:	---	Services Priority:
Business Priority:		Blocker:	---
Marketing QA Status:	---	IT Deployment:	---
Bug Depends on:
Bug Blocks:	1125314

Description Matthias Gerstner 2019-02-14 10:38:21 UTC

As described in bug 1125314 we want to remove polkit rules files that grant
members of the wheel group special privileges. cinnamon-control-center ships
one such rules file in /usr/share/polkit-1/rules.d/cinnamon-control-center.rules.

This file is currently not effective anyways, because the polkit-default-privs
take precendence over it. I suggest to move this file to /usr/share/doc/...
as an example for users that want to manually enable this rule on their system.

Comment 1 Matthias Gerstner 2019-03-15 14:08:11 UTC

A new rpmlint-check is effective in Factory by now that generates a warning
about files installed in rules.d without a whitelisting. In a while we will
make this an error. So please adjust your package accordingly to avoid a
broken build. Thank you.

Comment 2 Matthias Gerstner 2019-05-03 13:19:19 UTC

This is a friendly reminder to work on this topic. In a while the new rpmlint
check will cause badness and thus the package build will fail if this is not
adjusted accordingly. Thank you!

Comment 3 Marguerite Su 2019-08-07 06:59:58 UTC

https://build.opensuse.org/request/show/721439