Bug 1215482 - polkit: permissions of /usr/share/polkit-1/rules.d
Summary: polkit: permissions of /usr/share/polkit-1/rules.d
Status: NEW
Alias: None
Product: openSUSE Tumbleweed
Classification: openSUSE
Component: Basesystem (show other bugs)
Version: Current
Hardware: Other Other
: P5 - None : Normal (vote)
Target Milestone: ---
Assignee: Marcus Meissner
QA Contact: E-mail List
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2023-09-19 12:05 UTC by Ludwig Nussel
Modified: 2023-11-20 11:35 UTC (History)
2 users (show)

See Also:
Found By: ---
Services Priority:
Business Priority:
Blocker: ---
Marketing QA Status: ---
IT Deployment: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Ludwig Nussel 2023-09-19 12:05:26 UTC
/usr/share/polkit-1/rules.d is 0750 root:polkit. As the content comes from the OS vendor, there's nothing secret about it. So changing to 755 root:root should be fine. That would avoid having gid!=0 stuff in /usr
Comment 1 Marcus Meissner 2023-09-19 12:23:54 UTC
also see bug 1209282
Comment 2 Ludwig Nussel 2023-09-19 12:28:54 UTC
that one is about an issue when the directory is owned by the polkit user though
Comment 3 Ludwig Nussel 2023-09-19 12:41:46 UTC
https://build.opensuse.org/request/show/1112287
Comment 4 OBSbugzilla Bot 2023-09-19 16:15:03 UTC
This is an autogenerated message for OBS integration:
This bug (1215482) was mentioned in
https://build.opensuse.org/request/show/1112333 Factory / polkit
Comment 5 OBSbugzilla Bot 2023-11-15 10:05:03 UTC
This is an autogenerated message for OBS integration:
This bug (1215482) was mentioned in
https://build.opensuse.org/request/show/1126555 Factory / polkit
Comment 6 OBSbugzilla Bot 2023-11-20 09:35:02 UTC
This is an autogenerated message for OBS integration:
This bug (1215482) was mentioned in
https://build.opensuse.org/request/show/1127634 Factory / polkit
Comment 7 OBSbugzilla Bot 2023-11-20 11:35:02 UTC
This is an autogenerated message for OBS integration:
This bug (1215482) was mentioned in
https://build.opensuse.org/request/show/1127651 Factory / polkit