| 3 Jun 2021 |
 piegames | I tried looking at other extensions, but every one seems to have their own special soup for solving their version of the problem so this is no help. | 21:43:29 |
 Jan Tojnar | piegames: there are two problems | 21:49:34 |
| Jan Tojnar | one will be solved by the inputs | 21:49:46 |
| Jan Tojnar | and the other by the stuff linked in the manual | 21:50:07 |
| Jan Tojnar | * piegames: there are two problems (that I know of) | 21:51:05 |
| piegames | Okay, I'll give it a try. Should I add a manual packaging for the extension or should I create some space to place overrides on the automatic ones? | 21:53:56 |
| Jan Tojnar | hexa: did you try to PM me? the chat does not seem to work | 21:54:12 |
 hexa | yes, I did | 21:54:27 |
| hexa | polkit fun | 21:54:30 |
| piegames | I'm dreaming of a list of "These extensions need X and those need Y" and the builder automatically adapts to that, but for what I've seen so far it won't be easy. | 21:54:44 |
| hexa | Jan Tojnar: https://github.com/NixOS/nixpkgs/pull/125554 | 21:55:10 |
| Jan Tojnar | piegames: I think overrides à la haskell’s configuration common would be most convenient | 21:56:10 |
| hexa | Jan Tojnar: question would be: which target branch | 22:03:32 |
| hexa | 🔥 (staging) 🔥🔥 (staging-next) 🔥🔥🔥 (master) | 22:03:51 |
| Jan Tojnar | it is very gnarly, so I owuld go with master | 22:04:05 |
| hexa | polkit has its own user, but little hardening | 22:04:44 |
| hexa | merge at your own discretion, this should at least cleanly backport to 21.05 | 22:05:07 |
| hexa | applies to 20.09 as well 🙈 | 22:08:21 |
| Jan Tojnar | hexa: I have not read it very closely, can one just run any process as root (e.g. using pkexec API) | 22:08:53 |
| Jan Tojnar | * hexa: I have not read it very closely, does this allow just running any process as root (e.g. using pkexec API)? | 22:09:17 |
| hexa |
The vulnerability can be reliably used by an unprivileged local attacker
to bypass authorization and escalate permissions up to the root user.
| 22:09:20 |
| Jan Tojnar | * hexa: I have not read it very closely, does this allow just running any command as root (e.g. using pkexec API)? | 22:09:34 |
| hexa | https://www.openwall.com/lists/oss-security/2021/06/03/1 | 22:09:41 |
| Jan Tojnar | or only those registered as polkit actions? | 22:09:48 |
| hexa | I'm not too familiar with polkit internals, sorry | 22:11:09 |
| Jan Tojnar | I cannot look into it more at the moment so I would just merge | 22:12:33 |
| hexa | then let's wait for fridh/vcunat | 22:14:56 |
| 4 Jun 2021 |
 mkg20001 | packaging a gtk3 python app
how to fix this (or does anyone know what causes this)?
(.bulky-wrapped:3335859): GLib-GIO-CRITICAL **: 07:49:07.953: g_application_run: assertion 'G_IS_APPLICATION (application)' failed
| 05:49:50 |
 hmenke | ryantm: I have an Intel Core i7-1185G7 with integrated Intel Xe graphics.
0000:00:02.0 VGA compatible controller: Intel Corporation TigerLake-LP GT2 [Iris Xe Graphics] (rev 01)
| 06:28:49 |
| mkg20001 | In reply to @mkg20001:matrix.org
packaging a gtk3 python app
how to fix this (or does anyone know what causes this)?
(.bulky-wrapped:3335859): GLib-GIO-CRITICAL **: 07:49:07.953: g_application_run: assertion 'G_IS_APPLICATION (application)' failed
seems like it had to do with a gsettings issue, now it finds the schema and the app properly opens | 06:50:53 |
