1:10 p.m.
https://bugzilla.redhat.com/show_bug.cgi?id=1226680
Bug ID: 1226680
Summary: fbterm-udevrules allows public access to frame buffer
devices
Product: Fedora
Version: rawhide
Component: fbterm
Assignee: bazanluis20(a)gmail.com
Reporter: zbyszek(a)in.waw.pl
QA Contact: extras-qa(a)fedoraproject.org
CC: bazanluis20(a)gmail.com, dchen(a)redhat.com,
i18n-bugs(a)lists.fedoraproject.org
Description of problem:
Please drop fbterm-udevrules subpackage. Installing it allows anyone to snoop
on /dev/fb*. Iff users should be privileged to do that, they should be added to
the video group.
Version-Release number of selected component (if applicable):
E.g. fbterm-udevrules-1.7-6.fc23.x86_64, this package hasn't changed in years.
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug
https://bugzilla.redhat.com/token.cgi?t=m1wxZq02zP&a=cc_unsubscribe
1:37 p.m.
New subject: [Fedora-i18n-bugs] [Bug 1226680] fbterm-udevrules allows public access to frame buffer devices
https://bugzilla.redhat.com/show_bug.cgi?id=1226680
Zbigniew Jędrzejewski-Szmek <zbyszek(a)in.waw.pl> changed:
What |Removed |Added
----------------------------------------------------------------------------
See Also| |https://bugzilla.redhat.com
| |/show_bug.cgi?id=1226379
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug
https://bugzilla.redhat.com/token.cgi?t=oqY6gkeFbH&a=cc_unsubscribe
2:48 p.m.
New subject: [Fedora-i18n-bugs] [Bug 1226680] fbterm-udevrules allows public access to frame buffer devices
https://bugzilla.redhat.com/show_bug.cgi?id=1226680
Zbigniew Jędrzejewski-Szmek <zbyszek(a)in.waw.pl> changed:
What |Removed |Added
----------------------------------------------------------------------------
Blocks| |1226704
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=1226704
[Bug 1226704] TRACKER: files in /etc/udev/rules.d
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug
https://bugzilla.redhat.com/token.cgi?t=ifi6Wr8iCx&a=cc_unsubscribe
2:49 p.m.
New subject: [Fedora-i18n-bugs] [Bug 1226680] fbterm-udevrules allows public access to frame buffer devices
https://bugzilla.redhat.com/show_bug.cgi?id=1226680
Zbigniew Jędrzejewski-Szmek <zbyszek(a)in.waw.pl> changed:
What |Removed |Added
----------------------------------------------------------------------------
See Also|https://bugzilla.redhat.com |
|/show_bug.cgi?id=1226379 |
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug
https://bugzilla.redhat.com/token.cgi?t=L5TZnGcvMv&a=cc_unsubscribe
11:14 p.m.
New subject: [Fedora-i18n-bugs] [Bug 1226680] fbterm-udevrules allows public access to frame buffer devices
https://bugzilla.redhat.com/show_bug.cgi?id=1226680
fujiwara <tfujiwar(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |tfujiwar(a)redhat.com
--- Comment #2 from fujiwara <tfujiwar(a)redhat.com> ---
I think the purpose is to provide any users who runs fbterm with the permission
of the frame buffer in console login.
Do you have any ideas to fix it?
If the udev rule could be applied to the specific command, it might be nice.
--
You are receiving this mail because:
You are on the CC list for the bug.
7:45 a.m.
New subject: [Fedora-i18n-bugs] [Bug 1226680] fbterm-udevrules allows public access to frame buffer devices
https://bugzilla.redhat.com/show_bug.cgi?id=1226680
--- Comment #3 from Zbigniew Jędrzejewski-Szmek <zbyszek(a)in.waw.pl> ---
uaccess tag seems to be the right solution. I filed
https://github.com/systemd/systemd/pull/2858 upstream.
--
You are receiving this mail because:
You are on the CC list for the bug.
8:45 p.m.
New subject: [Fedora-i18n-bugs] [Bug 1226680] fbterm-udevrules allows public access to frame buffer devices
https://bugzilla.redhat.com/show_bug.cgi?id=1226680
fujiwara <tfujiwar(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|NEW |ASSIGNED
--- Comment #4 from fujiwara <tfujiwar(a)redhat.com> ---
Thank you for the patch.
--
You are receiving this mail because:
You are on the CC list for the bug.
10:03 a.m.
New subject: [Fedora-i18n-bugs] [Bug 1226680] fbterm-udevrules allows public access to frame buffer devices
https://bugzilla.redhat.com/show_bug.cgi?id=1226680
--- Comment #5 from Zbigniew Jędrzejewski-Szmek <zbyszek(a)in.waw.pl> ---
systemd patch has been released in systemd 230.
--
You are receiving this mail because:
You are on the CC list for the bug.
4:37 a.m.
New subject: [Fedora-i18n-bugs] [Bug 1226680] fbterm-udevrules allows public access to frame buffer devices
https://bugzilla.redhat.com/show_bug.cgi?id=1226680
fujiwara <tfujiwar(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |zbyszek(a)in.waw.pl
Flags| |needinfo?(zbyszek(a)in.waw.pl
| |)
--- Comment #6 from fujiwara <tfujiwar(a)redhat.com> ---
I tried systemd-231-10.
It seems the patch is not available and 99-fbterm.rules is still needed.
% cat /usr/lib/udev/rules.d/70-uaccess.rules | grep -i fb
--
You are receiving this mail because:
You are on the CC list for the bug.
4:38 a.m.
New subject: [Fedora-i18n-bugs] [Bug 1226680] fbterm-udevrules allows public access to frame buffer devices
https://bugzilla.redhat.com/show_bug.cgi?id=1226680
--- Comment #7 from fujiwara <tfujiwar(a)redhat.com> ---
% rpm -qf /usr/lib/udev/rules.d/70-uaccess.rules
systemd-udev-231-10.fc25.x86_64
--
You are receiving this mail because:
You are on the CC list for the bug.
6:40 a.m.
New subject: [Fedora-i18n-bugs] [Bug 1226680] fbterm-udevrules allows public access to frame buffer devices
https://bugzilla.redhat.com/show_bug.cgi?id=1226680
Zbigniew Jędrzejewski-Szmek <zbyszek(a)in.waw.pl> changed:
What |Removed |Added
----------------------------------------------------------------------------
Flags|needinfo?(zbyszek(a)in.waw.pl |
|) |
--- Comment #8 from Zbigniew Jędrzejewski-Szmek <zbyszek(a)in.waw.pl> ---
That patch was reversed (https://github.com/systemd/systemd/commit/e77813ca9f),
see the commit for the reasons. My original comment still stands, I believe
'video' group is the only non-insecure option at this point.
--
You are receiving this mail because:
You are on the CC list for the bug.
9:58 p.m.
New subject: [Fedora-i18n-bugs] [Bug 1226680] fbterm-udevrules allows public access to frame buffer devices
https://bugzilla.redhat.com/show_bug.cgi?id=1226680
--- Comment #9 from fujiwara <tfujiwar(a)redhat.com> ---
I wish if a child process could be launched from console login prompt.
E.g. When users log from GDM, Xorg with root privilege and a user session with
user privilege are launched.
--
You are receiving this mail because:
You are on the CC list for the bug.
10:24 p.m.
New subject: [Fedora-i18n-bugs] [Bug 1226680] fbterm-udevrules allows public access to frame buffer devices
https://bugzilla.redhat.com/show_bug.cgi?id=1226680
--- Comment #10 from Fedora Update System <updates(a)fedoraproject.org> ---
fbterm-1.7-10.fc25 has been submitted as an update to Fedora 25.
https://bodhi.fedoraproject.org/updates/FEDORA-2016-04399cfcdc
--
You are receiving this mail because:
You are on the CC list for the bug.
10:24 p.m.
New subject: [Fedora-i18n-bugs] [Bug 1226680] fbterm-udevrules allows public access to frame buffer devices
https://bugzilla.redhat.com/show_bug.cgi?id=1226680
Fedora Update System <updates(a)fedoraproject.org> changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|ASSIGNED |MODIFIED
--
You are receiving this mail because:
You are on the CC list for the bug.
10:56 a.m.
New subject: [Fedora-i18n-bugs] [Bug 1226680] fbterm-udevrules allows public access to frame buffer devices
https://bugzilla.redhat.com/show_bug.cgi?id=1226680
Fedora Update System <updates(a)fedoraproject.org> changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|MODIFIED |ON_QA
--- Comment #11 from Fedora Update System <updates(a)fedoraproject.org> ---
fbterm-1.7-10.fc25 has been pushed to the Fedora 25 testing repository. If
problems still persist, please make note of it in this bug report.
See https://fedoraproject.org/wiki/QA:Updates_Testing for
instructions on how to install test updates.
You can provide feedback for this update here:
https://bodhi.fedoraproject.org/updates/FEDORA-2016-04399cfcdc
--
You are receiving this mail because:
You are on the CC list for the bug.
3:16 p.m.
New subject: [Fedora-i18n-bugs] [Bug 1226680] fbterm-udevrules allows public access to frame buffer devices
https://bugzilla.redhat.com/show_bug.cgi?id=1226680
Fedora Update System <updates(a)fedoraproject.org> changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|ON_QA |CLOSED
Fixed In Version| |fbterm-1.7-10.fc25
Resolution|--- |ERRATA
Last Closed| |2016-11-19 16:16:15
--- Comment #12 from Fedora Update System <updates(a)fedoraproject.org> ---
fbterm-1.7-10.fc25 has been pushed to the Fedora 25 stable repository. If
problems still persist, please make note of it in this bug report.
--
You are receiving this mail because:
You are on the CC list for the bug.
2714
days inactive
3252
days old
i18n-bugs@lists.fedoraproject.org
15 comments
1 participants
participants (1)
-
Red Hat Bugzilla