Bug 1211949

Summary:	virtualbox: VBoxSDL setuid binary dropped?
Product:	[openSUSE] openSUSE Tumbleweed	Reporter:	Matthias Gerstner <matthias.gerstner>
Component:	Security	Assignee:	Larry Finger <Larry.Finger>
Status:	RESOLVED FIXED	QA Contact:	E-mail List <qa-bugs>
Severity:	Normal
Priority:	P5 - None	CC:	security-team
Version:	Current
Target Milestone:	---
Hardware:	Other
OS:	Other
Whiteboard:
Found By:	---	Services Priority:
Business Priority:		Blocker:	---
Marketing QA Status:	---	IT Deployment:	---

Description Matthias Gerstner 2023-06-02 09:10:39 UTC

With OBS sr#1084830 an update to virtualbox 7.0.8 was performed. With this
submission the VBoxSDL setuid-root program is no longer packaged. The relevant
lines in the spec file still remain commented out.

There is no explicit mention of this removal in the package's changelog.

Can you please investigate whether this is dropped permanently? If so, then
please also remove the remaining commented out lines from the spec file. We
will also drop the setuid configuration from the permissions package then.

Otherwise please tell us what the plans are about reinstating that program.

Thanks!

Comment 1 Larry Finger 2023-06-14 17:43:00 UTC

There was a problem in building VBoxSDL for VB 7.0.8. In order to get that release with several critical fixes available to the users, that component was disabled. It is now restored and submitted to Factory with request 1093157.

The versions for Leap 15.4 and 15.5 will be submitted later today.