1016292 – AUDIT-0: spice-gtk: missing suid bit for spice-client-glib-usb-acl-helper

Bug 1016292 - AUDIT-0: spice-gtk: missing suid bit for spice-client-glib-usb-acl-helper

Summary: AUDIT-0: spice-gtk: missing suid bit for spice-client-glib-usb-acl-helper

Status:	RESOLVED DUPLICATE of bug 744251

Alias:	None

Product:	SUSE Security Incidents
Classification:	Novell Products
Component:	Audits (show other bugs)
Version:	unspecified
Hardware:	Other Other

Priority:	P5 - None Severity: Normal
Target Milestone:	---
Assignee:	Security Team bot
QA Contact:	Security Team bot

URL:
Whiteboard:
Keywords:

Depends on:
Blocks:

Clone This Bug

Reported:	2016-12-19 11:01 UTC by Thomas Wagner
Modified:	2017-10-17 08:09 UTC (History)
CC List:	5 users (show)

See Also:
Found By:	---
Services Priority:
Business Priority:
Blocker:	---
Marketing QA Status:	---
IT Deployment:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Thomas Wagner 2016-12-19 11:01:44 UTC

Hi all!

I tested USB-keyboard redirection with spicy from the package spice-gtk to access the graphical frontends of virtual machines.
However, there is a permissions problem on Leap 42.2 and Tumbleweed. The command
 spicy  -h $SERVER -p $PORT --spice-usbredir-redirect-on-connect='-1,0x$KEYBOARD_PID,0x$KEYBOARD_VID,-1,1'
give raise to a window querying for the root password. However, the root-password was not accepted until I changed permissions with the following command
 sudo chmod +s /usr/bin/spice-client-glib-usb-acl-helper
according to https://bugzilla.redhat.com/show_bug.cgi?id=1005009

best regards

Thomas

Comment 1 Stakanov Schufter 2017-08-18 07:16:49 UTC

I confirm this problem be still present in 42.3. 
The chmod u+s /usr/bin/spice-client-glib-usb-acl-helper
command does still work and gives the expected results.

Comment 2 Cédric Bosdonnat 2017-10-17 08:09:31 UTC

This setuid bit won't be set in the package. See duplicate bug for more infos.

*** This bug has been marked as a duplicate of bug 744251 ***