Bug#885548: [pkg-wine-party] Bug#885548: winetricks: Don't recommend gksu

[Austin English]

On Thu, Feb 1, 2018 at 5:18 PM, Jens Reyer  wrote:
> control: forwarded -1 https://github.com/Winetricks/winetricks/issues/912
>
>> I won't be able to fix upstream for a few weeks, but I've filled a bug in
>> the meantime:
>>
>> https://github.com/Winetricks/winetricks/issues/912
>
> There have been a few patches upstream, so I guess we'll have a solution
> soon.
>
> Greets
> jre

Yes, there's a pending PR, just sorting out some final issues with
contributors before merging. If that doesn't happen by 2018/02/05, it
should this week.
-- 
-Austin
GPG: 14FB D7EA A041 937B

Bug#885548: winetricks: Don't recommend gksu

[Jens Reyer]

control: forwarded -1 https://github.com/Winetricks/winetricks/issues/912

> I won't be able to fix upstream for a few weeks, but I've filled a bug in
> the meantime:
> 
> https://github.com/Winetricks/winetricks/issues/912

There have been a few patches upstream, so I guess we'll have a solution
soon.

Greets
jre

Bug#885548: [pkg-wine-party] Bug#885548: Bug#885548: winetricks: Don't recommend gksu

[Stephen Kitt]

Hi Austin,

Apologies for the top post — you can use pkexec from a shell script (see 
gsmartcontrol-root in the gsmartcontrol package).

Regards,

Stephen

On 28 December 2017 19:04:24 GMT+00:00, Austin English 
 wrote:
>On Dec 27, 2017 11:42 PM, "Jeremy Bicha"  wrote:
>
>Package: winetricks
>Severity: important
>Tags: sid buster
>User: pkg-gnome-maintain...@lists.alioth.debian.org
>Usertags: oldlibs gksu
>
>gksu has been deprecated for years. The intent of gksu is to allow
>running apps with elevated privileges but the way to do that is for
>the app developer to use PolicyKit to request elevated privileges for
>the specific actions that need done instead of for the whole app to
>run as root.
>
>For the next major stable release of Debian (codenamed Buster), the
>Debian GNOME team plans to default to GNOME on Wayland where gksu does
>not even work.
>
>Therefore, the Debian GNOME team intends to either remove gksu or
>replace it with a non-functional warning message. gksu is unmaintained
>(last upload 2014) and is a security vulnerability.
>
>winetricks recommends sudo | gksu | kdesudo. Please drop gksu from that
>list.
>
>On behalf of the Debian GNOME team,
>Jeremy Bicha
>
>
>Winetricks maintainer here.
>
>Forgive my ignorance, but afaik there's not a way to use policykit from
>a
>shell script, is there? gksu/kdesu are for users running the script but
>not
>in a console (e.g. with a zenity menu).
>
>Alternatively, is there a Wayland replacement for gksu?

Bug#885548: [pkg-wine-party] Bug#885548: Bug#885548: winetricks: Don't recommend gksu

[Austin English]

Great, thanks.

I won't be able to fix upstream for a few weeks, but I've filled a bug in
the meantime:

https://github.com/Winetricks/winetricks/issues/912

Bug#885548: [pkg-wine-party] Bug#885548: winetricks: Don't recommend gksu

[Austin English]

On Dec 27, 2017 11:42 PM, "Jeremy Bicha"  wrote:

Package: winetricks
Severity: important
Tags: sid buster
User: pkg-gnome-maintain...@lists.alioth.debian.org
Usertags: oldlibs gksu

gksu has been deprecated for years. The intent of gksu is to allow
running apps with elevated privileges but the way to do that is for
the app developer to use PolicyKit to request elevated privileges for
the specific actions that need done instead of for the whole app to
run as root.

For the next major stable release of Debian (codenamed Buster), the
Debian GNOME team plans to default to GNOME on Wayland where gksu does
not even work.

Therefore, the Debian GNOME team intends to either remove gksu or
replace it with a non-functional warning message. gksu is unmaintained
(last upload 2014) and is a security vulnerability.

winetricks recommends sudo | gksu | kdesudo. Please drop gksu from that
list.

On behalf of the Debian GNOME team,
Jeremy Bicha


Winetricks maintainer here.

Forgive my ignorance, but afaik there's not a way to use policykit from a
shell script, is there? gksu/kdesu are for users running the script but not
in a console (e.g. with a zenity menu).

Alternatively, is there a Wayland replacement for gksu?

Bug#885548: winetricks: Don't recommend gksu

[Jeremy Bicha]

Package: winetricks
Severity: important
Tags: sid buster
User: pkg-gnome-maintain...@lists.alioth.debian.org
Usertags: oldlibs gksu

gksu has been deprecated for years. The intent of gksu is to allow
running apps with elevated privileges but the way to do that is for
the app developer to use PolicyKit to request elevated privileges for
the specific actions that need done instead of for the whole app to
run as root.

For the next major stable release of Debian (codenamed Buster), the
Debian GNOME team plans to default to GNOME on Wayland where gksu does
not even work.

Therefore, the Debian GNOME team intends to either remove gksu or
replace it with a non-functional warning message. gksu is unmaintained
(last upload 2014) and is a security vulnerability.

winetricks recommends sudo | gksu | kdesudo. Please drop gksu from that list.

On behalf of the Debian GNOME team,
Jeremy Bicha