Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 40951 - Running k3b from SUDO changes ~/.ICEAuthority permissions to root:root (dcop/ICE)
Summary: Running k3b from SUDO changes ~/.ICEAuthority permissions to root:root (dcop/...
Status: RESOLVED WONTFIX
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: High critical (vote)
Assignee: Gentoo KDE team
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2004-02-09 02:33 UTC by James W. Dumay
Modified: 2004-09-02 14:40 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description James W. Dumay 2004-02-09 02:33:43 UTC
DCOP server changes ~/.ICEAuthority permissions to root:root instead for security reasons.

Reproducible: Always
Steps to Reproduce:
1. emerge k3b
2. login to user account
3. sudo k3b
3. close k3b
4. logout of gnome
5. login

Actual Results:  
When user logs back in, the session stops and the following error is logged

"** WARNING **: Unable to lock ICE authority file: /home/shane/.ICEauthority"

at closer inspection, as detailed in http://dbforums.com/arch/126/2003/5/790706
, it seems that the permissions of the file had changed to root:root.

This forum posting suggests dcop accessing ICE is to blame.

Expected Results:  
logged into the gnome session without a hitch

Numerous discussions have raised this issue.

http://mail.gnome.org/archives/gnome-list/2000-February/msg00554.html
Comment 1 Caleb Tennis (RETIRED) gentoo-dev 2004-02-09 12:39:18 UTC
Ok, and wouldn't:

ICEAUTHORITY="~root/.ICEauthority" sudo k3b

fix the problem?
Comment 2 James W. Dumay 2004-02-09 13:50:23 UTC
yeah, should/could that be added to the ~root/.bash_profile via an ebuild?
Comment 3 Caleb Tennis (RETIRED) gentoo-dev 2004-02-09 13:56:55 UTC
It could be added, but I'm not sure how many people run k3b with sudo.  seems to me like adding a message to the ebuild about it would be a good compromise.
Comment 4 James W. Dumay 2004-02-09 14:14:08 UTC
I think this may happen with running any KDE program that uses DCOP/ICE.
Comment 5 James W. Dumay 2004-02-09 22:17:01 UTC
could we hack this into a kde eclass, so the message is displayed whenever a KDE application is merged?
Comment 6 Caleb Tennis (RETIRED) gentoo-dev 2004-02-10 05:46:32 UTC
I think that's a bit overkill.  It should be pretty obvious that running programs under sudo is always a bit more volatile than directly running them.
Comment 7 James W. Dumay 2004-02-11 03:00:35 UTC
Can we get a deciding decision on this problem?
Comment 8 Caleb Tennis (RETIRED) gentoo-dev 2004-02-11 04:55:43 UTC
I guess I'm not all that inclined to do much about it.  I think it's something that's good to know, but I don't see it as a problem that will affect a lot of people.

Have you tried out kdesu?  It's a bit like sudo, and I think it may handle the permission stuff better.
Comment 9 Caleb Tennis (RETIRED) gentoo-dev 2004-09-02 14:40:27 UTC
closing per above comment.