Re: CVE-2021-4034: why is pkexec still a thing?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Wed, 2022-01-26 at 23:18 +0000, Patrick O'Callaghan wrote:
> On Wed, 2022-01-26 at 14:21 -0800, Adam Williamson wrote:
> > But that was then, and this is now. Does anything in Workstation use
> > pkexec? Does anything in KDE use it?
> 
> $ sudo dnf erase polkit
> Error: 
>  Problem: The operation would result in removing the following protected packages: plasma-desktop
> (try to add '--skip-broken' to skip uninstallable packages)
> 
> I've no idea why plasma-desktop needs pkexec.

It probably doesn't. It definitely needs *polkit*. But polkit is much
more than just pkexec.

My suggestion is basically to move pkexec to a subpackage and have
things that actually need pkexec specifically require that subpackage.
Identifying them would require more than just a dnf query,
unfortunately.
-- 
Adam Williamson
Fedora QA
IRC: adamw | Twitter: adamw_ha
https://www.happyassassin.net

_______________________________________________
kde mailing list -- kde@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to kde-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/kde@xxxxxxxxxxxxxxxxxxxxxxx
Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure




[Index of Archives]     [KDE Users]     [Fedora General Discussion]     [Older Fedora Users Mail]     [Fedora Advisory Board]     [Fedora Security]     [Fedora Maintainers]     [Fedora Devel Java]     [Fedora Legacy]     [Fedora Desktop]     [ATA RAID]     [Fedora Marketing]     [Fedora Mentors]     [Fedora Package Announce]     [Fedora Package Review]     [Fedora Music]     [Fedora Packaging]     [Centos]     [Fedora SELinux]     [Fedora Triage]     [Coolkey]     [Yum Users]     [Yosemite Forum]     [Fedora Art]     [Fedora Docs]     [Asterisk PBX]

  Powered by Linux