diff --git a/config b/config index 8bc7638..5d7c7fc 100644 --- a/config +++ b/config @@ -731,23 +731,13 @@ setOption('DanglingSymlinkExceptions', )) setOption("DBUSServices.WhiteList", ( - "ConsoleKit.conf", - "hal.conf", "cups.conf", # bnc#515977 - "org.freedesktop.ConsoleKit.service", - "org.freedesktop.PolicyKit.conf", - "org.freedesktop.PolicyKit.service", # # the following are not audited. We accept them as legacy for now # - # gnome-settings-daemon - "org.gnome.SettingsDaemon.DateTimeMechanism.service", - "org.gnome.SettingsDaemon.DateTimeMechanism.conf", # upower "org.freedesktop.UPower.service", "org.freedesktop.UPower.conf", - # podsleuth - "podsleuth.conf", # PackageKit "org.freedesktop.PackageKit.conf", # PackageKit @@ -756,9 +746,6 @@ setOption("DBUSServices.WhiteList", ( "nm-pptp-service.conf", # gdm "gdm.conf", - # udisks - "org.freedesktop.UDisks.service", - "org.freedesktop.UDisks.conf", # udisks2 (bnc#742751) "org.freedesktop.UDisks2.service", "org.freedesktop.UDisks2.conf", @@ -800,48 +787,23 @@ setOption("DBUSServices.WhiteList", ( "org.kde.ksysguard.processlisthelper.conf", # pulseaudio "pulseaudio-system.conf", - # kdebase4-runtime - "org.kde.kcontrol.kcmremotewidgets.service", - "org.kde.kcontrol.kcmremotewidgets.conf", - # k3b - "org.kde.kcontrol.k3bsetup.service", - "org.kde.kcontrol.k3bsetup.conf", - # NetworkManager-novellvpn - "nm-novellvpn-service.conf", # avahi "avahi-dbus.conf", "org.freedesktop.Avahi.service", # hp-drive-guard "hp-drive-guard-dbus.conf", # NetworkManager - "nm-dhcp-client.conf", "nm-dispatcher.conf", - "nm-avahi-autoipd.conf", "org.freedesktop.nm_dispatcher.service", # bnc#747780 "org.freedesktop.NetworkManager.conf", - "NetworkManager-frontend.conf", # bnc#681128 "org.freedesktop.NetworkManager.service", - # ModemManager - "org.freedesktop.ModemManager.service", - "org.freedesktop.ModemManager.conf", - # yast2-dbus-server - "org.opensuse.YaST.modules.service", - "org.opensuse.yast.SCR.conf", - "org.opensuse.YaST.modules.conf", - "org.opensuse.yast.SCR.service", - # webyast (bnc#660981) - "webyast.permissions.conf", - "webyast.permissions.service.service", # bluez (bnc#768062) "bluetooth.conf", "org.bluez.service", # dnsmasq "dnsmasq.conf", - # backup-manager - "org.opensuse.BackupManager.service", - "backup-manager.conf", # gypsy "Gypsy.conf", "org.freedesktop.Gypsy.service", @@ -854,15 +816,6 @@ setOption("DBUSServices.WhiteList", ( # polkit "org.freedesktop.PolicyKit1.conf", "org.freedesktop.PolicyKit1.service", - # dconf - "ca.desrt.dconf.service", - # kerneloops - "kerneloops.dbus", - # polkit-kde-1 - "org.kde.polkitkde1.helper.conf", - "org.kde.polkitkde1.helper.service", - # upstart - "Upstart.conf", # cups-pk-helper "org.opensuse.CupsPkHelper.Mechanism.service", "org.opensuse.CupsPkHelper.Mechanism.conf", @@ -886,29 +839,14 @@ setOption("DBUSServices.WhiteList", ( # account services (bnc#676638) "org.freedesktop.Accounts.service", "org.freedesktop.Accounts.conf", - # synche-connector (bnc#683956) - "org.synce.dccm.service", - "org.synce.dccm.conf", # colord (bnc#698250) "org.freedesktop.ColorManager.service", - "org.freedesktop.ColorManager.conf", - # colord-sane (bnc#752518) - "org.freedesktop.colord-sane.service", - "org.freedesktop.colord-sane.conf", # lightdm (bnc#708205) "org.freedesktop.DisplayManager.conf", # sddm (boo#897788) "sddm_org.freedesktop.DisplayManager.conf", - # kdepim4/kalarm (bnc#707723) - "org.kde.kalarmrtcwake.conf", - "org.kde.kalarmrtcwake.service", # NetworkManager-openvpn (bnc#732915) "nm-openconnect-service.conf", - # smb4k (bnc#749065) - "de.berlios.smb4k.mounthelper.conf", - "de.berlios.smb4k.mounthelper.service", - # cdemu-deamon (bnc#764063) - "cdemud-dbus.conf", # snapper (bnc#759391) "org.opensuse.Snapper.conf", "org.opensuse.Snapper.service", @@ -922,13 +860,6 @@ setOption("DBUSServices.WhiteList", ( # fprintd 0.4.1 (finger print dbus service) (bnc#792095) "net.reactivated.Fprint.service", "net.reactivated.Fprint.conf", - # lightdm-kde-greeter KCM shell dbus helper (bnc#794705) - "org.kde.kcontrol.kcmlightdm.conf", - "org.kde.kcontrol.kcmlightdm.service", - # nepomuk: org.kde.nepomuk.filewatch.service (bnc#825262) - # temporary approved only due to insufficient resources -Marcus - "org.kde.nepomuk.filewatch.service", - "org.kde.nepomuk.filewatch.conf", # wicked network management (bnc#783932) "network-nanny.conf", "wicked-dhcp4.conf", @@ -957,10 +888,6 @@ setOption("DBUSServices.WhiteList", ( "org.mate.SettingsDaemon.DateTimeMechanism.conf", # tuned DBUS service (bnc#787379, bnc#1007279) "com.redhat.tuned.conf", - "com.redhat.tuned.service", - # policycoreutils (bnc#848550) - "org.selinux.conf", - "org.selinux.service", # bluez (bnc#768062) "bluetooth.conf", "org.bluez.service", @@ -972,22 +899,14 @@ setOption("DBUSServices.WhiteList", ( "org.kde.kcontrol.kcmkwallet5.service", # neard (bnc#837978) "org.neard.conf", - "org.neard.service", - # baloo, formerly nepomuk (bnc#866131) - "org.kde.baloo.filewatch.conf", - "org.kde.baloo.filewatch.service", - # policycoreutils new service/config (bnc#878631) + # policycoreutils (bnc#848550, bnc#878631) "org.selinux.service", - "org.selinux.conf", # oFono (bnc#862354) "ofono.conf", # libKF5Auth4 (bnc#864716) "org.kde.kf5auth.conf", # firewalld (bnc#907625) "FirewallD.conf", - # storaged (bnc#915769) - "com.redhat.storaged.conf", - "com.redhat.storaged.service", # systemd networkd (bnc#918799) "org.freedesktop.network1.conf", "org.freedesktop.network1.service", @@ -995,7 +914,6 @@ setOption("DBUSServices.WhiteList", ( "org.freedesktop.realmd.service", "org.freedesktop.realmd.conf", # teamd (bnc#941993) - "teamd@.service", "org.libteam.teamd.conf", # cinnamon settings daemon (bsc#951830) "org.cinnamon.SettingsDaemon.DateTimeMechanism.conf", @@ -1008,7 +926,6 @@ setOption("DBUSServices.WhiteList", ( "org.drbd.drbdmanaged.service", # iio-sensor-proxy (bsc#939191) "net.hadess.SensorProxy.conf", - "net.hadess.SensorProxy.service", # openattic (bsc#972478) "openattic.conf", "openattic.service", @@ -1029,14 +946,11 @@ setOption("DBUSServices.WhiteList", ( "org.kde.powerdevil.discretegpuhelper.service", # rebootmgr (bsc#1019644) "org.opensuse.RebootMgr.conf", - "rebootmgr.service", # blueman (bsc#987141) "org.blueman.Mechanism.conf", "org.blueman.Mechanism.service", - "org.blueman.Applet.service", # os-autoinst (bsc#1032649) "org.opensuse.os_autoinst.switch.conf", - "os-autoinst-openvswitch.service", # thunderbolt (bsc#1033554) "thunderbolt.conf", "thunderbolt.service", @@ -1045,15 +959,11 @@ setOption("DBUSServices.WhiteList", ( "net.launchpad.backintime.serviceHelper.service", # switchroo-control (bsc#1034309) "net.hadess.SwitcherooControl.conf", - "switcheroo-control.service", # openqa (bsc#1039290) "org.opensuse.openqa.conf", - "openqa-scheduler.service", - "openqa-websockets.service", # pam_dbus (bsc#1039709). Take care to # never enable/integrate this by default (see bsc comments) "pam_dbus.conf", - "pam_dbus.service", # tpm2-abrmd (bnc#1049694) "tpm2-abrmd.conf", "com.intel.tss2.Tabrmd.service", @@ -1075,7 +985,6 @@ setOption("DBUSServices.WhiteList", ( "org.kde.kcontrol.kcmsddm.service", # usbauth (bsc#1066877) "org.opensuse.usbauth.conf", - "org.opensuse.usbauth.service", # kalarm (bnc#1087714, renamed from kalarmrtcwake) "org.kde.kalarm.rtcwake.conf", "org.kde.kalarm.rtcwake.service", diff --git a/rpmlint-tests.spec b/rpmlint-tests.spec index 144a96d..337aa46 100644 --- a/rpmlint-tests.spec +++ b/rpmlint-tests.spec @@ -12,7 +12,7 @@ # license that conforms to the Open Source Definition (Version 1.9) # published by the Open Source Initiative. -# Please submit bugfixes or comments via https://bugs.opensuse.org/ +# Please submit bugfixes or comments via http://bugs.opensuse.org/ # # icecream 0 diff --git a/rpmlint.changes b/rpmlint.changes index 289849d..17f9141 100644 --- a/rpmlint.changes +++ b/rpmlint.changes @@ -1,3 +1,75 @@ +------------------------------------------------------------------- +Wed May 8 07:26:24 UTC 2019 - jsegitz@suse.com + +- Removed whitelisted DBUS files: + * ConsoleKit.conf + * NetworkManager-frontend.conf + * Upstart.conf + * backup-manager.conf + * ca.desrt.dconf.service + * cdemud-dbus.conf + * com.redhat.storaged.conf + * com.redhat.storaged.service + * com.redhat.tuned.service + * de.berlios.smb4k.mounthelper.conf + * de.berlios.smb4k.mounthelper.service + * hal.conf + * kerneloops.dbus + * net.hadess.SensorProxy.service + * nm-avahi-autoipd.conf + * nm-dhcp-client.conf + * nm-novellvpn-service.conf + * openqa-scheduler.service + * openqa-websockets.service + * org.blueman.Applet.service + * org.freedesktop.ColorManager.conf + * org.freedesktop.ConsoleKit.service + * org.freedesktop.ModemManager.conf + * org.freedesktop.ModemManager.service + * org.freedesktop.PolicyKit.conf + * org.freedesktop.PolicyKit.service + * org.freedesktop.UDisks.conf + * org.freedesktop.UDisks.service + * org.freedesktop.colord-sane.conf + * org.freedesktop.colord-sane.service + * org.gnome.SettingsDaemon.DateTimeMechanism.conf + * org.gnome.SettingsDaemon.DateTimeMechanism.service + * org.kde.baloo.filewatch.conf + * org.kde.baloo.filewatch.service + * org.kde.kalarmrtcwake.conf + * org.kde.kalarmrtcwake.service + * org.kde.kcontrol.k3bsetup.conf + * org.kde.kcontrol.k3bsetup.service + * org.kde.kcontrol.kcmlightdm.conf + * org.kde.kcontrol.kcmlightdm.service + * org.kde.kcontrol.kcmremotewidgets.conf + * org.kde.kcontrol.kcmremotewidgets.service + * org.kde.nepomuk.filewatch.conf + * org.kde.nepomuk.filewatch.service + * org.kde.polkitkde1.helper.conf + * org.kde.polkitkde1.helper.service + * org.neard.service + * org.opensuse.BackupManager.service + * org.opensuse.YaST.modules.conf + * org.opensuse.YaST.modules.service + * org.opensuse.usbauth.service + * org.opensuse.yast.SCR.conf + * org.opensuse.yast.SCR.service + * org.selinux.conf + * org.synce.dccm.conf + * org.synce.dccm.service + * os-autoinst-openvswitch.service + * pam_dbus.service + * podsleuth.conf + * rebootmgr.service + * switcheroo-control.service + * teamd@.service + * webyast.permissions.conf + * webyast.permissions.service.service + They're not used anymore in current products, were never active or erroneously + added. For details please see + https://pes.suse.de/Maintenance-Security/Whitelists/cleanup_dbus/ + ------------------------------------------------------------------- Tue May 7 13:01:08 UTC 2019 - Malte Kraus diff --git a/rpmlint.spec b/rpmlint.spec index b83d724..02c8bbe 100644 --- a/rpmlint.spec +++ b/rpmlint.spec @@ -12,7 +12,7 @@ # license that conforms to the Open Source Definition (Version 1.9) # published by the Open Source Initiative. -# Please submit bugfixes or comments via https://bugs.opensuse.org/ +# Please submit bugfixes or comments via http://bugs.opensuse.org/ #