kcheckpass 3.5.5 (kdebase or split build) does not refresh kerberos 5 credentials. There is a patch on http://bugs.kde.org/show_bug.cgi?id=127012 (last comment). The proper handling also requires kcheckpass NOT to be installed with setuid bit on otherwise new credentials (not used) are created. Is it possible to include this in kdebase and kcheckpass ebuilds?
kde 3.5.6 does not need this patch anymore, however, the suid bit has still to be removed for refreshing.
Can you please confirm if the suid bit still needs to be removed on kde-3.5.7?
Yes, it still has to be removed.
Comments on the upstream bug say that debian doesn't have it setuid. I guess we should follow them.
I've added a comment about this in the upstream bug.
(In reply to comment #5) > I've added a comment about this in the upstream bug. > [17:43:14] <ossi|tt> scarabeus: there is no definite answer to that problem. it's a no-win from an upstream POV so we should fix it ourselves somehow :]
>>> Installing (2 of 2) kde-base/kcheckpass-4.3.2 * >>> SetUID and SetGID: [chmod o-r] /usr/lib64/kde4/libexec/kcheckpass -rwsr-s--x 1 root root 14584 2009-10-25 11:48 /usr/lib64/kde4/libexec/kcheckpass
kde-4.4.2 huettel@pinacolada ~ $ ls -la /usr/lib64/kde4/libexec/kcheckpass -rwsr-s--x 1 root root 18848 1. Apr 01:04 /usr/lib64/kde4/libexec/kcheckpass
I've droppend SUID/GUID from this executable in overlay
and i moved it to the tree, thanks
