[Desktop-packages] [Bug 1500307] Re: xubuntu does not disable gtk overlay scrollbars (i.e. use solid scrollbars)
Closing as won't fix. This won't be addressed by Xubuntu. ** Changed in: xubuntu-default-settings (Ubuntu) Status: Opinion => Won't Fix -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to policykit-1 in Ubuntu. https://bugs.launchpad.net/bugs/1500307 Title: xubuntu does not disable gtk overlay scrollbars (i.e. use solid scrollbars) Status in One Hundred Papercuts: Confirmed Status in PolicyKit: Won't Fix Status in policykit-1 package in Ubuntu: New Status in xubuntu-default-settings package in Ubuntu: Won't Fix Bug description: xubuntu does not disable gtk overlay scrollbars (i.e. use solid scrollbars) On this page http://tracker.xubuntu.org/ in the source code, Sean Davis is assigned to disable gtk3.16 overlay scrollbars in xubuntu- default-settings (i.e. use solid scrollbars) and https://blueprints.launchpad.net/ubuntu/+spec/xubuntu-w-development shows also that the work is done. I am running xubuntu 15.10 beta 2 and this is not the case. Opening up ubuntu-modified programmes shows solid scrollbars (like the non-csd-ized, non-header-bar-ized evince), but synaptic shows overlay scrollbars. I find it very annoying. There is no visual clue of a scrollbar until I move my mouse over the window, and unlike Android or iOS scrollbars, the width changes and the transparency changes depending on how close my mouse is. Very hard to use. Please fix. ProblemType: Bug DistroRelease: Ubuntu 15.10 Package: xubuntu-default-settings 15.10.3 ProcVersionSignature: Ubuntu 4.2.0-11.13-generic 4.2.1 Uname: Linux 4.2.0-11-generic x86_64 ApportVersion: 2.18.1-0ubuntu1 Architecture: amd64 CasperVersion: 1.365 CurrentDesktop: XFCE Date: Mon Sep 28 04:43:49 2015 LiveMediaBuild: Xubuntu 15.10 "Wily Werewolf" - Alpha amd64 (20150924) PackageArchitecture: all ProcEnviron: TERM=xterm PATH=(custom, no user) XDG_RUNTIME_DIR= LANG=en_US.UTF-8 SHELL=/bin/bash SourcePackage: xubuntu-default-settings UpgradeStatus: No upgrade log present (probably fresh install) To manage notifications about this bug go to: https://bugs.launchpad.net/hundredpapercuts/+bug/1500307/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp
[Desktop-packages] [Bug 1500307] Re: xubuntu does not disable gtk overlay scrollbars (i.e. use solid scrollbars)
Launchpad has imported 9 comments from the remote bug at
https://bugs.freedesktop.org/show_bug.cgi?id=96713.
If you reply to an imported comment from within Launchpad, your comment
will be sent to the remote bug automatically. Read more about
Launchpad's inter-bugtracker facilities at
https://help.launchpad.net/InterBugTracking.
On 2016-06-28T21:48:41+00:00 Philip Müller wrote:
Created attachment 124768
Patch which adds those listed variables
Even though when pkexec is not designed to run X11 apps it shouldn't
remove environment variables for GUI apps. They are needed for proper
look&feel integration.
GUI applications need the following environment variables forwarded:
KDE_FULL_SESSION
KDE_SESSION_VERSION
DESKTOP_SESSION
GNOME_DESKTOP_SESSION_ID
XDG_CURRENT_DESKTOP
QT_STYLE_OVERRIDE
QT_XCB_FORCE_SOFTWARE_OPENGL
QT_QPA_PLATFORMTHEME
There are some more that may make sense to forward, such as
KDE_IS_PRELINKED, QT_PLUGIN_PATH, XDG_DATA_DIRS etc., but some of those
may be considered security issues. The ones in my list above are
perfectly safe though.
Reply at: https://bugs.launchpad.net/ubuntu/+source/xubuntu-default-
settings/+bug/1500307/comments/5
On 2016-06-28T22:37:21+00:00 Philip Müller wrote:
remove 'DESKTOP_ENVIRONMENT' as it may contain '/' which forces pkexec
to bail out
[manjaro@manjaro ~]$ pkexec calamares
The value for environment variable DESKTOP_SESSION contains suscipious content
This incident has been reported.
[manjaro@manjaro ~]$ echo $DESKTOP_SESSION
/usr/share/xsessions/plasma
Reply at: https://bugs.launchpad.net/ubuntu/+source/xubuntu-default-
settings/+bug/1500307/comments/6
On 2016-06-28T22:38:40+00:00 Philip Müller wrote:
Created attachment 124770
Patch which adds those listed variables (v2)
Reply at: https://bugs.launchpad.net/ubuntu/+source/xubuntu-default-
settings/+bug/1500307/comments/7
On 2016-06-29T15:45:10+00:00 Miloslav Trmac wrote:
>From an one-minute look:
* KDE_SESSION_VERSION:
https://userbase.kde.org/KDE_System_Administration/Environment_Variables:
> This allows one to know which kde?-config to run:
> kde${KDE_SESSION_VERSION}-onfig.
explicitly recommending to use the variable in an unsafe way. (and
/usr/bin/xdg-* programs really do that!)
* GNOME_DESKTOP_SESSION_ID: Reportedly deprecated since 2009 (
https://bugzilla.redhat.com/show_bug.cgi?id=529287 )
* QT_STYLE_OVERRIDE: Apparently this can dynamically load plugins? Why
is it safe? It might be, but the path lookup stack is too deep for a
quick inspection or to be confident that it doesn’t pull from the
current directory or so.
* QT_QPA_PLATFORMTHEME: Similar, and there is even an explicit
-platformpluginpath
I’m sorry but this does not look all that obviously safe and I probably won’t
have time to do a week-long research on this. Colin, if you know more, feel
free to merge.
Reply at: https://bugs.launchpad.net/ubuntu/+source/xubuntu-default-
settings/+bug/1500307/comments/8
On 2016-06-29T16:31:33+00:00 Rex Dieter wrote:
fwiw, I opened bug #96730 against xdg-utils to track this insecure use
of KDE_SESSION_VERSION environment variable.
Reply at: https://bugs.launchpad.net/ubuntu/+source/xubuntu-default-
settings/+bug/1500307/comments/9
On 2016-06-29T16:33:56+00:00 Miloslav Trmac wrote:
(In reply to Rex Dieter from comment #4)
> fwiw, I opened bug #96730 against xdg-utils to track this insecure use of
> KDE_SESSION_VERSION environment variable.
Well, the code is using the variable _exactly as documented_; it is
perfectly secure to use it within a session. It is just not secure to
transfer the value across trust domains (like pkexec would).
Reply at: https://bugs.launchpad.net/ubuntu/+source/xubuntu-default-
settings/+bug/1500307/comments/10
On 2016-06-29T16:35:06+00:00 Miloslav Trmac wrote:
(In reply to Miloslav Trmac from comment #3)
> From an one-minute look:
(to be fair, turned out to be 50 minutes actually :) )
Reply at: https://bugs.launchpad.net/ubuntu/+source/xubuntu-default-
settings/+bug/1500307/comments/11
On 2016-06-29T19:59:49+00:00 Miloslav Trmac wrote:
I guess, how to move this forward: Basically there should be, for every
instance, a reasoned argument why passing that variable is safe, ideally
verifiable by third parties (you can assume that I know about nothing
about KDE, and we can’t assume anything about future maintainers).
That reasoned argument may have various forms, the only requir
[Desktop-packages] [Bug 1500307] Re: xubuntu does not disable gtk overlay scrollbars (i.e. use solid scrollbars)
** Also affects: policykit-1 (Ubuntu) Importance: Undecided Status: New ** Bug watch added: freedesktop.org Bugzilla #96713 https://bugs.freedesktop.org/show_bug.cgi?id=96713 ** Also affects: policykit-1 via https://bugs.freedesktop.org/show_bug.cgi?id=96713 Importance: Unknown Status: Unknown ** Changed in: xubuntu-default-settings (Ubuntu) Status: Confirmed => Opinion -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to policykit-1 in Ubuntu. https://bugs.launchpad.net/bugs/1500307 Title: xubuntu does not disable gtk overlay scrollbars (i.e. use solid scrollbars) Status in One Hundred Papercuts: Confirmed Status in PolicyKit: Unknown Status in policykit-1 package in Ubuntu: New Status in xubuntu-default-settings package in Ubuntu: Opinion Bug description: xubuntu does not disable gtk overlay scrollbars (i.e. use solid scrollbars) On this page http://tracker.xubuntu.org/ in the source code, Sean Davis is assigned to disable gtk3.16 overlay scrollbars in xubuntu- default-settings (i.e. use solid scrollbars) and https://blueprints.launchpad.net/ubuntu/+spec/xubuntu-w-development shows also that the work is done. I am running xubuntu 15.10 beta 2 and this is not the case. Opening up ubuntu-modified programmes shows solid scrollbars (like the non-csd-ized, non-header-bar-ized evince), but synaptic shows overlay scrollbars. I find it very annoying. There is no visual clue of a scrollbar until I move my mouse over the window, and unlike Android or iOS scrollbars, the width changes and the transparency changes depending on how close my mouse is. Very hard to use. Please fix. ProblemType: Bug DistroRelease: Ubuntu 15.10 Package: xubuntu-default-settings 15.10.3 ProcVersionSignature: Ubuntu 4.2.0-11.13-generic 4.2.1 Uname: Linux 4.2.0-11-generic x86_64 ApportVersion: 2.18.1-0ubuntu1 Architecture: amd64 CasperVersion: 1.365 CurrentDesktop: XFCE Date: Mon Sep 28 04:43:49 2015 LiveMediaBuild: Xubuntu 15.10 "Wily Werewolf" - Alpha amd64 (20150924) PackageArchitecture: all ProcEnviron: TERM=xterm PATH=(custom, no user) XDG_RUNTIME_DIR= LANG=en_US.UTF-8 SHELL=/bin/bash SourcePackage: xubuntu-default-settings UpgradeStatus: No upgrade log present (probably fresh install) To manage notifications about this bug go to: https://bugs.launchpad.net/hundredpapercuts/+bug/1500307/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp
