Hello Colin, or anyone else affected, Accepted thermald into bionic-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/thermald/1.7.0-5ubuntu4 in a few hours, and then in the -proposed repository.
Please help us by testing this new package. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation on how to enable and use -proposed. Your feedback will aid us getting this update out to other Ubuntu users. If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested and change the tag from verification-needed-bionic to verification-done-bionic. If it does not fix the bug for you, please add a comment stating that, and change the tag to verification-failed-bionic. In either case, without details of your testing we will not be able to proceed. Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance for helping! N.B. The updated package will be released to -updates after the bug(s) fixed by this package have been verified and the package has been in -proposed for a minimum of 7 days. ** Changed in: thermald (Ubuntu Bionic) Status: New => Fix Committed ** Tags removed: verification-done ** Tags added: verification-needed verification-needed-bionic -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to thermald in Ubuntu. https://bugs.launchpad.net/bugs/1314527 Title: thermald: change the default dbus policy, make it more restrictive Status in thermald package in Ubuntu: Fix Released Status in thermald source package in Trusty: Fix Released Status in thermald source package in Bionic: Fix Committed Bug description: org.freedesktop.thermald.conf default dbus policy should be more restrictive === SRU Justification: [Impact] With the current dbus policy one can terminate thermald using: dbus-send --system --dest=org.freedesktop.thermald /org/freedesktop/thermald org.freedesktop.thermald.Terminate thermald can be send dbus ..fortunately init respawns thermald, but the policy is not restrictive enough, only root should be able to do this. Justification: This fix restricts the default policy so only root can send dbus messages to thermald. [Test Case] How to reproduce: dbus-send --system --dest=org.freedesktop.thermald /org/freedesktop/thermald org.freedesktop.thermald.Terminate thermald can be send dbus then use: dmesg and see that init has respawned thermald (which means it received the dbus message and handled it) With the fix, the dbus-send message won't kill thermald and hence one won't see the re-spawn message in dmesg. [Regression Potential] Cannot think of any, low to none. Thermald is not a default install, it is a new packaging in Trusty and is currently op-in, so this change has minimal impact. Regression potential is that users won't be able to communicate to thermald via dbus-send, which is not the recommended way to shut down thermald anyhow. Tested today on an AMD64 trusty install. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/thermald/+bug/1314527/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : [email protected] Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp

