Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!

Bug 913616

Summary: sys-auth/polkit: USE=gtk pulls in obsolete gnome-extra/polkit-gnome
Product: Gentoo Linux Reporter: Johannes Penßel <johannesp>
Component: Current packagesAssignee: Freedesktop bugs <freedesktop-bugs>
Status: UNCONFIRMED ---    
Severity: normal CC: gnome
Priority: Normal    
Version: unspecified   
Hardware: All   
OS: Linux   
Whiteboard:
Package list:
Runtime testing required: ---

Description Johannes Penßel 2023-09-04 12:40:31 UTC
sys-auth/polkit USE=gtk has no real effect except pulling in gnome-extra/polkit-gnome. This is a project upstream has abandoned roughly 6 years ago, with the latest non-translation changes committed in late 2011. Due to USE=gtk being the default for gnome profiles, polkit-gnome ist still needlessly present on virtually all gentoo installations running GNOME. AFAICT, the only scenario where polkit-gnome still may have a purpose is in providing policykit support for non-GNOME or non-KDE environments, although better maintained alternatives such as lxqt-base/lxqt-policykit exist. For everyone else, polkit-gnome is just additional attack surface, which I find especially concerning given that it deals with, well, polkit. Please consider dropping USE=gtk for sys-auth/polkit, so that the superfluous, obsolete and potentially dangerous polkit-gnome affects fewer systems. 
Thanks!
Comment 1 Toralf Förster gentoo-dev 2023-09-10 15:41:32 UTC
dup of bug 885453 ?
Comment 2 Mike Gilbert gentoo-dev 2023-09-10 20:19:18 UTC
(In reply to Toralf Förster from comment #1)
> dup of bug 885453 ?

Doesn't look like it to me.
Comment 3 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2024-07-04 00:01:18 UTC
gnome@: thoughts?