Package: geoclue-2.0
Version: 2.4.10-1
Severity: critical
File: geoclue
Tags: upstream

Dear Maintainer,

The update to 2.4.10-1 causes redshift to immediately crash, with the error:

Failed to connect to GeoClue2 service: 
GDBus.Error:org.freedesktop.DBus.Error.AccessDenied: 'redshift' disallowed, no 
agent for UID 1000

Starting the agent in the demo package manually appears to make no difference.
Additionally, I tried to use the where-am-i demo, which produced the same error
(again with the agent started).

I think the cause is this change referred to in the upstream changelog:
"Refuse location access if no app-auth agent is registered. This fixes a
security hole where an app requests location access before the agent gets to
register itself and we end up giving out locaiton access even though user has
disabled it."

Can the change be reverted until the agent works?

FYI, I make the report critical so that the change doesn't migrate to testing,
feel free to drop the severity if you think that's appropriate.


-- System Information:
Debian Release: buster/sid
  APT prefers unstable-debug
  APT policy: (500, 'unstable-debug'), (500, 'testing-debug'), (500, 
'unstable'), (500, 'testing'), (1, 'experimental-debug'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.16.0-2-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_AU.UTF-8, LC_CTYPE=en_AU.UTF-8 (charmap=UTF-8) (ignored: LC_ALL 
set to en_AU.UTF-8), LANGUAGE=en_AU:en (charmap=UTF-8) (ignored: LC_ALL set to 
en_AU.UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages geoclue-2.0 depends on:
ii  adduser             3.117
ii  libavahi-client3    0.7-4
ii  libavahi-common3    0.7-4
ii  libavahi-glib1      0.7-4
ii  libc6               2.27-3
ii  libglib2.0-0        2.56.1-2
ii  libjson-glib-1.0-0  1.4.2-4
ii  libmm-glib0         1.7.990-1
ii  libsoup2.4-1        2.62.2-1

Versions of packages geoclue-2.0 recommends:
ii  avahi-daemon      0.7-4
ii  iio-sensor-proxy  2.4-2
ii  modemmanager      1.7.990-1
ii  wpasupplicant     2:2.6-16

geoclue-2.0 suggests no packages.

-- no debconf information

Reply via email to