Accepting request 701500 from home:jsegitz:branches:devel:openSUSE:Factory:rpmlint

- Removed whitelisted DBUS files:
  * ConsoleKit.conf
  * NetworkManager-frontend.conf
  * Upstart.conf
  * backup-manager.conf
  * ca.desrt.dconf.service
  * cdemud-dbus.conf
  * com.redhat.storaged.conf
  * com.redhat.storaged.service
  * com.redhat.tuned.service
  * de.berlios.smb4k.mounthelper.conf
  * de.berlios.smb4k.mounthelper.service
  * hal.conf
  * kerneloops.dbus
  * net.hadess.SensorProxy.service
  * nm-avahi-autoipd.conf
  * nm-dhcp-client.conf
  * nm-novellvpn-service.conf
  * openqa-scheduler.service
  * openqa-websockets.service
  * org.blueman.Applet.service
  * org.freedesktop.ColorManager.conf
  * org.freedesktop.ConsoleKit.service
  * org.freedesktop.ModemManager.conf
  * org.freedesktop.ModemManager.service
  * org.freedesktop.PolicyKit.conf
  * org.freedesktop.PolicyKit.service
  * org.freedesktop.UDisks.conf
  * org.freedesktop.UDisks.service
  * org.freedesktop.colord-sane.conf

OBS-URL: https://build.opensuse.org/request/show/701500
OBS-URL: https://build.opensuse.org/package/show/devel:openSUSE:Factory:rpmlint/rpmlint?expand=0&rev=668
This commit is contained in:
Marcus Meissner 2019-05-08 07:50:00 +00:00 committed by Git OBS Bridge
parent 821edb419b
commit 08f40eceb8
4 changed files with 75 additions and 94 deletions

93
config
View File

@ -731,23 +731,13 @@ setOption('DanglingSymlinkExceptions',
))
setOption("DBUSServices.WhiteList", (
"ConsoleKit.conf",
"hal.conf",
"cups.conf", # bnc#515977
"org.freedesktop.ConsoleKit.service",
"org.freedesktop.PolicyKit.conf",
"org.freedesktop.PolicyKit.service",
#
# the following are not audited. We accept them as legacy for now
#
# gnome-settings-daemon
"org.gnome.SettingsDaemon.DateTimeMechanism.service",
"org.gnome.SettingsDaemon.DateTimeMechanism.conf",
# upower
"org.freedesktop.UPower.service",
"org.freedesktop.UPower.conf",
# podsleuth
"podsleuth.conf",
# PackageKit
"org.freedesktop.PackageKit.conf",
# PackageKit
@ -756,9 +746,6 @@ setOption("DBUSServices.WhiteList", (
"nm-pptp-service.conf",
# gdm
"gdm.conf",
# udisks
"org.freedesktop.UDisks.service",
"org.freedesktop.UDisks.conf",
# udisks2 (bnc#742751)
"org.freedesktop.UDisks2.service",
"org.freedesktop.UDisks2.conf",
@ -800,48 +787,23 @@ setOption("DBUSServices.WhiteList", (
"org.kde.ksysguard.processlisthelper.conf",
# pulseaudio
"pulseaudio-system.conf",
# kdebase4-runtime
"org.kde.kcontrol.kcmremotewidgets.service",
"org.kde.kcontrol.kcmremotewidgets.conf",
# k3b
"org.kde.kcontrol.k3bsetup.service",
"org.kde.kcontrol.k3bsetup.conf",
# NetworkManager-novellvpn
"nm-novellvpn-service.conf",
# avahi
"avahi-dbus.conf",
"org.freedesktop.Avahi.service",
# hp-drive-guard
"hp-drive-guard-dbus.conf",
# NetworkManager
"nm-dhcp-client.conf",
"nm-dispatcher.conf",
"nm-avahi-autoipd.conf",
"org.freedesktop.nm_dispatcher.service",
# bnc#747780
"org.freedesktop.NetworkManager.conf",
"NetworkManager-frontend.conf",
# bnc#681128
"org.freedesktop.NetworkManager.service",
# ModemManager
"org.freedesktop.ModemManager.service",
"org.freedesktop.ModemManager.conf",
# yast2-dbus-server
"org.opensuse.YaST.modules.service",
"org.opensuse.yast.SCR.conf",
"org.opensuse.YaST.modules.conf",
"org.opensuse.yast.SCR.service",
# webyast (bnc#660981)
"webyast.permissions.conf",
"webyast.permissions.service.service",
# bluez (bnc#768062)
"bluetooth.conf",
"org.bluez.service",
# dnsmasq
"dnsmasq.conf",
# backup-manager
"org.opensuse.BackupManager.service",
"backup-manager.conf",
# gypsy
"Gypsy.conf",
"org.freedesktop.Gypsy.service",
@ -854,15 +816,6 @@ setOption("DBUSServices.WhiteList", (
# polkit
"org.freedesktop.PolicyKit1.conf",
"org.freedesktop.PolicyKit1.service",
# dconf
"ca.desrt.dconf.service",
# kerneloops
"kerneloops.dbus",
# polkit-kde-1
"org.kde.polkitkde1.helper.conf",
"org.kde.polkitkde1.helper.service",
# upstart
"Upstart.conf",
# cups-pk-helper
"org.opensuse.CupsPkHelper.Mechanism.service",
"org.opensuse.CupsPkHelper.Mechanism.conf",
@ -886,29 +839,14 @@ setOption("DBUSServices.WhiteList", (
# account services (bnc#676638)
"org.freedesktop.Accounts.service",
"org.freedesktop.Accounts.conf",
# synche-connector (bnc#683956)
"org.synce.dccm.service",
"org.synce.dccm.conf",
# colord (bnc#698250)
"org.freedesktop.ColorManager.service",
"org.freedesktop.ColorManager.conf",
# colord-sane (bnc#752518)
"org.freedesktop.colord-sane.service",
"org.freedesktop.colord-sane.conf",
# lightdm (bnc#708205)
"org.freedesktop.DisplayManager.conf",
# sddm (boo#897788)
"sddm_org.freedesktop.DisplayManager.conf",
# kdepim4/kalarm (bnc#707723)
"org.kde.kalarmrtcwake.conf",
"org.kde.kalarmrtcwake.service",
# NetworkManager-openvpn (bnc#732915)
"nm-openconnect-service.conf",
# smb4k (bnc#749065)
"de.berlios.smb4k.mounthelper.conf",
"de.berlios.smb4k.mounthelper.service",
# cdemu-deamon (bnc#764063)
"cdemud-dbus.conf",
# snapper (bnc#759391)
"org.opensuse.Snapper.conf",
"org.opensuse.Snapper.service",
@ -922,13 +860,6 @@ setOption("DBUSServices.WhiteList", (
# fprintd 0.4.1 (finger print dbus service) (bnc#792095)
"net.reactivated.Fprint.service",
"net.reactivated.Fprint.conf",
# lightdm-kde-greeter KCM shell dbus helper (bnc#794705)
"org.kde.kcontrol.kcmlightdm.conf",
"org.kde.kcontrol.kcmlightdm.service",
# nepomuk: org.kde.nepomuk.filewatch.service (bnc#825262)
# temporary approved only due to insufficient resources -Marcus
"org.kde.nepomuk.filewatch.service",
"org.kde.nepomuk.filewatch.conf",
# wicked network management (bnc#783932)
"network-nanny.conf",
"wicked-dhcp4.conf",
@ -957,10 +888,6 @@ setOption("DBUSServices.WhiteList", (
"org.mate.SettingsDaemon.DateTimeMechanism.conf",
# tuned DBUS service (bnc#787379, bnc#1007279)
"com.redhat.tuned.conf",
"com.redhat.tuned.service",
# policycoreutils (bnc#848550)
"org.selinux.conf",
"org.selinux.service",
# bluez (bnc#768062)
"bluetooth.conf",
"org.bluez.service",
@ -972,22 +899,14 @@ setOption("DBUSServices.WhiteList", (
"org.kde.kcontrol.kcmkwallet5.service",
# neard (bnc#837978)
"org.neard.conf",
"org.neard.service",
# baloo, formerly nepomuk (bnc#866131)
"org.kde.baloo.filewatch.conf",
"org.kde.baloo.filewatch.service",
# policycoreutils new service/config (bnc#878631)
# policycoreutils (bnc#848550, bnc#878631)
"org.selinux.service",
"org.selinux.conf",
# oFono (bnc#862354)
"ofono.conf",
# libKF5Auth4 (bnc#864716)
"org.kde.kf5auth.conf",
# firewalld (bnc#907625)
"FirewallD.conf",
# storaged (bnc#915769)
"com.redhat.storaged.conf",
"com.redhat.storaged.service",
# systemd networkd (bnc#918799)
"org.freedesktop.network1.conf",
"org.freedesktop.network1.service",
@ -995,7 +914,6 @@ setOption("DBUSServices.WhiteList", (
"org.freedesktop.realmd.service",
"org.freedesktop.realmd.conf",
# teamd (bnc#941993)
"teamd@.service",
"org.libteam.teamd.conf",
# cinnamon settings daemon (bsc#951830)
"org.cinnamon.SettingsDaemon.DateTimeMechanism.conf",
@ -1008,7 +926,6 @@ setOption("DBUSServices.WhiteList", (
"org.drbd.drbdmanaged.service",
# iio-sensor-proxy (bsc#939191)
"net.hadess.SensorProxy.conf",
"net.hadess.SensorProxy.service",
# openattic (bsc#972478)
"openattic.conf",
"openattic.service",
@ -1029,14 +946,11 @@ setOption("DBUSServices.WhiteList", (
"org.kde.powerdevil.discretegpuhelper.service",
# rebootmgr (bsc#1019644)
"org.opensuse.RebootMgr.conf",
"rebootmgr.service",
# blueman (bsc#987141)
"org.blueman.Mechanism.conf",
"org.blueman.Mechanism.service",
"org.blueman.Applet.service",
# os-autoinst (bsc#1032649)
"org.opensuse.os_autoinst.switch.conf",
"os-autoinst-openvswitch.service",
# thunderbolt (bsc#1033554)
"thunderbolt.conf",
"thunderbolt.service",
@ -1045,15 +959,11 @@ setOption("DBUSServices.WhiteList", (
"net.launchpad.backintime.serviceHelper.service",
# switchroo-control (bsc#1034309)
"net.hadess.SwitcherooControl.conf",
"switcheroo-control.service",
# openqa (bsc#1039290)
"org.opensuse.openqa.conf",
"openqa-scheduler.service",
"openqa-websockets.service",
# pam_dbus (bsc#1039709). Take care to
# never enable/integrate this by default (see bsc comments)
"pam_dbus.conf",
"pam_dbus.service",
# tpm2-abrmd (bnc#1049694)
"tpm2-abrmd.conf",
"com.intel.tss2.Tabrmd.service",
@ -1075,7 +985,6 @@ setOption("DBUSServices.WhiteList", (
"org.kde.kcontrol.kcmsddm.service",
# usbauth (bsc#1066877)
"org.opensuse.usbauth.conf",
"org.opensuse.usbauth.service",
# kalarm (bnc#1087714, renamed from kalarmrtcwake)
"org.kde.kalarm.rtcwake.conf",
"org.kde.kalarm.rtcwake.service",

View File

@ -12,7 +12,7 @@
# license that conforms to the Open Source Definition (Version 1.9)
# published by the Open Source Initiative.
# Please submit bugfixes or comments via https://bugs.opensuse.org/
# Please submit bugfixes or comments via http://bugs.opensuse.org/
#
# icecream 0

View File

@ -1,3 +1,75 @@
-------------------------------------------------------------------
Wed May 8 07:26:24 UTC 2019 - jsegitz@suse.com
- Removed whitelisted DBUS files:
* ConsoleKit.conf
* NetworkManager-frontend.conf
* Upstart.conf
* backup-manager.conf
* ca.desrt.dconf.service
* cdemud-dbus.conf
* com.redhat.storaged.conf
* com.redhat.storaged.service
* com.redhat.tuned.service
* de.berlios.smb4k.mounthelper.conf
* de.berlios.smb4k.mounthelper.service
* hal.conf
* kerneloops.dbus
* net.hadess.SensorProxy.service
* nm-avahi-autoipd.conf
* nm-dhcp-client.conf
* nm-novellvpn-service.conf
* openqa-scheduler.service
* openqa-websockets.service
* org.blueman.Applet.service
* org.freedesktop.ColorManager.conf
* org.freedesktop.ConsoleKit.service
* org.freedesktop.ModemManager.conf
* org.freedesktop.ModemManager.service
* org.freedesktop.PolicyKit.conf
* org.freedesktop.PolicyKit.service
* org.freedesktop.UDisks.conf
* org.freedesktop.UDisks.service
* org.freedesktop.colord-sane.conf
* org.freedesktop.colord-sane.service
* org.gnome.SettingsDaemon.DateTimeMechanism.conf
* org.gnome.SettingsDaemon.DateTimeMechanism.service
* org.kde.baloo.filewatch.conf
* org.kde.baloo.filewatch.service
* org.kde.kalarmrtcwake.conf
* org.kde.kalarmrtcwake.service
* org.kde.kcontrol.k3bsetup.conf
* org.kde.kcontrol.k3bsetup.service
* org.kde.kcontrol.kcmlightdm.conf
* org.kde.kcontrol.kcmlightdm.service
* org.kde.kcontrol.kcmremotewidgets.conf
* org.kde.kcontrol.kcmremotewidgets.service
* org.kde.nepomuk.filewatch.conf
* org.kde.nepomuk.filewatch.service
* org.kde.polkitkde1.helper.conf
* org.kde.polkitkde1.helper.service
* org.neard.service
* org.opensuse.BackupManager.service
* org.opensuse.YaST.modules.conf
* org.opensuse.YaST.modules.service
* org.opensuse.usbauth.service
* org.opensuse.yast.SCR.conf
* org.opensuse.yast.SCR.service
* org.selinux.conf
* org.synce.dccm.conf
* org.synce.dccm.service
* os-autoinst-openvswitch.service
* pam_dbus.service
* podsleuth.conf
* rebootmgr.service
* switcheroo-control.service
* teamd@.service
* webyast.permissions.conf
* webyast.permissions.service.service
They're not used anymore in current products, were never active or erroneously
added. For details please see
https://pes.suse.de/Maintenance-Security/Whitelists/cleanup_dbus/
-------------------------------------------------------------------
Tue May 7 13:01:08 UTC 2019 - Malte Kraus <malte.kraus@suse.com>

View File

@ -12,7 +12,7 @@
# license that conforms to the Open Source Definition (Version 1.9)
# published by the Open Source Initiative.
# Please submit bugfixes or comments via https://bugs.opensuse.org/
# Please submit bugfixes or comments via http://bugs.opensuse.org/
#