| Summary: | Fedora 21: 'Keep password' check box is not available in tdesu dialog | ||
|---|---|---|---|
| Product: | TDE | Reporter: | Darrell <darrella> |
| Component: | tdebase | Assignee: | Francois Andriot <albator78> |
| Status: | ASSIGNED --- | ||
| Severity: | normal | CC: | albator78, bugwatch, darrella, slavek.banko |
| Priority: | P5 | ||
| Version: | R14.0.x [Trinity] | ||
| Hardware: | Other | ||
| OS: | Linux | ||
| Compiler Version: | TDE Version String: | ||
| Application Version: | Application Name: | ||
|
Description
Darrell
2014-12-29 19:27:15 CST
Funny, I did not even know there was a "keep password" option in tdesu, because I've never seen it :-) It looks like the checkbox is visible only if "tdesud" daemon is run with "setuid" bit. Some the quick fix should be: chmod 2755 /opt/trinity/bin/tdesud BTW: There is some funny code in "tdebase/tdesu/tdesud/CMakeLists.txt" that runs chown/chmod commands to install the tdesud binary. I think we should use the keyword "SETUID" in the "tde_add_executable" macro instead. There are other examples of setuid programs in tdebase (kcheckpass ...) I also need to fix the SPEC file accordingly for RPM packages. To be more precise: tdesud is supposed to be "setgid", not "setuid", and belonging to group "nobody". I see this is disabled on purpose in RPM Spec file; now I think I remember this was disabled on purpose on Fedora because it was considered a security issue. Google gives some old discussions about it, e.g: http://lists.kde.org/?l=kfm-devel&m=99284543029553&w=2 It's not just a matter of packaging after all. (In reply to Francois Andriot from comment #2) > To be more precise: > tdesud is supposed to be "setgid", not "setuid", and belonging to group > "nobody". > > I see this is disabled on purpose in RPM Spec file; now I think I remember > this was disabled on purpose on Fedora because it was considered a security > issue. > > Google gives some old discussions about it, e.g: > http://lists.kde.org/?l=kfm-devel&m=99284543029553&w=2 > > It's not just a matter of packaging after all. Thank you for the clarification of the reason for setgit + nogroup! >tdesud is supposed to be "setgid", not "setuid", and belonging to group
>"nobody".
Okay, thank you. Manually updating does fix the problem. For now. How should this be addressed in the future? I am sure users who want this feature prefer not to have to manually fix this with with every release update.
|