Bug 913616

Summary:	sys-auth/polkit: USE=gtk pulls in obsolete polkit-gnome
Product:	Gentoo Linux	Reporter:	Johannes Penßel <johannesp>
Component:	Current packages	Assignee:	Freedesktop bugs <freedesktop-bugs>
Status:	UNCONFIRMED ---
Severity:	normal
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---

Description Johannes Penßel 2023-09-04 12:40:31 UTC

sys-auth/polkit USE=gtk has no real effect except pulling in gnome-extra/polkit-gnome. This is a project upstream has abandoned roughly 6 years ago, with the latest non-translation changes committed in late 2011. Due to USE=gtk being the default for gnome profiles, polkit-gnome ist still needlessly present on virtually all gentoo installations running GNOME. AFAICT, the only scenario where polkit-gnome still may have a purpose is in providing policykit support for non-GNOME or non-KDE environments, although better maintained alternatives such as lxqt-base/lxqt-policykit exist. For everyone else, polkit-gnome is just additional attack surface, which I find especially concerning given that it deals with, well, polkit. Please consider dropping USE=gtk for sys-auth/polkit, so that the superfluous, obsolete and potentially dangerous polkit-gnome affects fewer systems. 
Thanks!

Comment 1 Toralf Förster gentoo-dev

2023-09-10 15:41:32 UTC

dup of bug 885453 ?

Comment 2 Mike Gilbert gentoo-dev

2023-09-10 20:19:18 UTC

(In reply to Toralf Förster from comment #1)
> dup of bug 885453 ?

Doesn't look like it to me.