[Pkg-kde-extras] Bug#888030: quassel-client: start quassel-client freezes the desktop

2018-01-22 Thread Heinrich Schuchardt
Package: quassel-client
Version: 1:0.12.4-2
Severity: normal

Dear Maintainer,

when starting the quassel-client via ALT-F2 it runs fine.

If I use a desktop link with the content below the Plasma desktop freezes and
becomes grayed. The only option to quit is log out via CTRL-ALT-DEL.

Best regards

Heinrich

[Desktop Entry]
Type=Application
Version=1.0
Name=Quassel IRC (Client only)
Name[ast]=IRC Quassel (namái veceru)
Name[ca]=Xat IRC Quassel (només el client)
Name[de]=Quassel IRC (nur Client)
Name[en_GB]=Quassel IRC (Client only)
Name[es]=IRC Quassel (sólo cliente)
Name[et]=Quassel IRC (ainult klient)
Name[fi]=Quassel IRC (vain asiakas)
Name[fr]=Quassel IRC (client uniquement)
Name[gl]=Quassel IRC (só cliente)
Name[hu]=Quassel IRC (Csak kliens)
Name[it]=Quassel IRC (solo client)
Name[ko]=Quassel IRC (클라이언트만)
Name[nl]=Quassel IRC (alleen client)
Name[oc]=Quassel IRC (client unicament)
Name[pl]=Quassel IRC (tylko klient)
Name[pt_BR]=Quassel IRC (Apenas cliente)
Name[ru]=Quassel IRC (только клиент)
Name[sq]=Quassel IRC (Vetëm klient)
Name[sv]=Quassel IRC (endast klient)
Name[tr]=Quassel IRC (sadece İstemci)
Name[uk]=Quassel IRC (лише клієнт)
Name[zh_CN]=Quassel IRC (仅仅包含客户端)
GenericName=IRC Client
GenericName[ast]=Veceru IRC
GenericName[ca]=Client d'IRC
GenericName[de]=IRC-Client
GenericName[en_GB]=IRC Client
GenericName[es]=Cliente IRC
GenericName[et]=IRC klient
GenericName[fi]=IRC-asiakas
GenericName[fr]=Client IRC
GenericName[gl]=Cliente de IRC
GenericName[hu]=IRC-kliens
GenericName[it]=Client IRC
GenericName[ko]=IRC 클라이언트
GenericName[nb]=IRC-klient
GenericName[nl]=IRC-client
GenericName[oc]=Client IRC
GenericName[pl]=Klient IRC
GenericName[pt_BR]=Cliente IRC
GenericName[ru]=IRC клиент
GenericName[sq]=IRC Klient
GenericName[sv]=IRC-klient
GenericName[tr]=IRC İstemci
GenericName[uk]=Клієнт IRC
GenericName[zh_CN]=IRC 客户端
Comment=Distributed IRC client with central core component
Comment[ast]=Veceru IRC distribuyíu con un componente central
Comment[ca]=Client d'IRC distribuït amb un component de nucli central
Comment[de]=Dezentralisierter IRC-Client mit einem zentralen Kern
Comment[en_GB]=Distributed IRC client with central core component
Comment[es]=Cliente IRC distribuido con un componente central
Comment[et]=Hajus IRC klient koos keskse tuumkomponendiga
Comment[fi]=Hajautettu IRC-asiakas, jolla keskitetty ydinkomponentti
Comment[fr]=Client IRC distribué avec composant essentiel centralisé
Comment[gl]=Cliente de IRC distribuído cun compoñente principal central
Comment[hu]=Elosztott IRC-kliens központi alapkomponenssel
Comment[it]=Client IRC distribuito con componente centrale
Comment[nl]=IRC-client met centraal kerncomponent
Comment[oc]=Client IRC distribuit amb component essencial centralizat
Comment[pt_BR]=Cliente IRC distribuido com o compotente central core
Comment[ru]=Распределённый клиент IRC с центральным ядром
Comment[sq]=Klient i shpërndarë IRC me përbërës qendror
Comment[sv]=Distribuerad IRC-klient med central kärnkomponent
Comment[uk]=Клієнт IRC з центральним ядром
Comment[zh_CN]=带有中央核心组件的分布式 IRC 客户端
Icon=quassel
TryExec=quasselclient
Exec=quasselclient
Categories=Qt;Network;Chat;IRCClient;
X-DBUS-ServiceName=org.quassel-irc.quasselclient

-- System Information:
Debian Release: 9.3
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: arm64, armhf

Kernel: Linux 4.9.0-5-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_US:en (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages quassel-client depends on:
ii  dbus-x11  1.10.24-0+deb9u1
ii  libc6 2.24-11+deb9u1
ii  libdbusmenu-qt5-2 0.9.3+16.04.20160218-1
ii  libkf5configwidgets5  5.28.0-2
ii  libkf5coreaddons5 5.28.0-2
ii  libkf5notifications5  5.28.0-1
ii  libkf5notifyconfig5   5.28.0-1
ii  libkf5sonnetui5   5.28.0-2
ii  libkf5textwidgets55.28.0-1
ii  libkf5widgetsaddons5  5.28.0-3
ii  libkf5xmlgui5 5.28.0-1
ii  libphonon4qt5-4   4:4.9.0-4
ii  libqt5core5a  5.7.1+dfsg-3+b1
ii  libqt5dbus5   5.7.1+dfsg-3+b1
ii  libqt5gui55.7.1+dfsg-3+b1
ii  libqt5network55.7.1+dfsg-3+b1
ii  libqt5webkit5 5.7.1+dfsg-1
ii  libqt5widgets55.7.1+dfsg-3+b1
ii  libstdc++66.3.0-18
ii  phonon4qt54:4.9.0-4
ii  quassel-data  1:0.12.4-2
ii  zlib1g1:1.2.8.dfsg-5

quassel-client recommends no packages.

quassel-client suggests no packages.

-- no debconf information
___
pkg-kde-extras mailing list
pkg-kde-extras@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-kde-extras

[Pkg-kde-extras] Bug#806500: Bug#806500: Bug#884652: quassel-client: connection password stored in plan Ascii in a chmod 644 file

2017-12-18 Thread Heinrich Schuchardt

On 12/18/2017 11:33 PM, Diederik de Haas wrote:

On maandag 18 december 2017 23:27:54 CET Heinrich Schuchardt wrote:

Storing the password in the KDE wallet manager would mean that the
password could only be retrieved when the wallet is open.


Problem with that is that it creates a dependency on KDE, while quassel only
needs QT



Another option would be to GPG encrypt the password and ask for the GPK 
private key password when the application is opened. Essentially that is 
what Kwallet does internally.


Best regards

Heinrich

___
pkg-kde-extras mailing list
pkg-kde-extras@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-kde-extras


[Pkg-kde-extras] Bug#806500: Bug#884652: quassel-client: connection password stored in plan Ascii in a chmod 644 file

2017-12-18 Thread Heinrich Schuchardt

On 12/18/2017 09:08 PM, Felix Geyer wrote:

On Mon, 18 Dec 2017 18:04:19 +0100 Heinrich Schuchardt <xypron.g...@gmx.de> 
wrote:

Not encoding the password means that any user application can fetch it
and send it to the internet even if ~/.config is chmod 700.

Can anything be worse?


Well, that's the unfortunate state of security on the Linux desktop (and other 
major desktop OSes).
Largely there is no privilege separation between applications.
They all run in the same context so they can't really keep secrets from each 
other.
Technologies like Flatpak and Snappy are trying to solve this by sandboxing 
applications [0].

Felix

[0] https://github.com/flatpak/flatpak/wiki/Sandbox

Storing the password in the KDE wallet manager would mean that the 
password could only be retrieved when the wallet is open.


This is not perfect security but better than having the password 
available at all times.


Best regards

Heinrich

___
pkg-kde-extras mailing list
pkg-kde-extras@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-kde-extras


[Pkg-kde-extras] Bug#884652: Bug#884652: quassel-client: connection password stored in plan Ascii in a chmod 644 file

2017-12-18 Thread Heinrich Schuchardt

On 12/18/2017 05:32 PM, Diederik de Haas wrote:

On maandag 18 december 2017 06:21:44 CET Heinrich Schuchardt wrote:

the configuration of quassel client is stored in
~/.config/quassel-irc.org/quasselclient.conf
This file was created on my system as chmod 644. So it is world readable.


That's also what I thought, but it's not as bad as one would think.
See https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=806500 for details

Not encoding the password means that any user application can fetch it 
and send it to the internet even if ~/.config is chmod 700.


Can anything be worse?

Best regards

Henrich

___
pkg-kde-extras mailing list
pkg-kde-extras@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-kde-extras


[Pkg-kde-extras] Bug#884652: quassel-client: connection password stored in plan Ascii in a chmod 644 file

2017-12-17 Thread Heinrich Schuchardt
Package: quassel-client
Version: 1:0.12.4-2
Severity: normal

Dear Maintainer,

the configuration of quassel client is stored in
~/.config/quassel-irc.org/quasselclient.conf
This file was created on my system as chmod 644. So it is world readable.

The configuration file is plain Ascii:

[CoreAccounts]
1\AccountId=1
1\AccountName=example
1\HostName=chat.example.com
1\Password=pasword
1\User=user

So the password can be picked up by anybody.

The configuration file should be created chmod 600.
The password should be stored in a wallet manager, e.g. KDEwallet.

Best regards

Heinrich Schuchardt

-- System Information:
Debian Release: 9.3
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: arm64, armhf

Kernel: Linux 4.9.0-4-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_US:en (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages quassel-client depends on:
ii  dbus-x11  1.10.24-0+deb9u1
ii  libc6 2.24-11+deb9u1
ii  libdbusmenu-qt5-2 0.9.3+16.04.20160218-1
ii  libkf5configwidgets5  5.28.0-2
ii  libkf5coreaddons5 5.28.0-2
ii  libkf5notifications5  5.28.0-1
ii  libkf5notifyconfig5   5.28.0-1
ii  libkf5sonnetui5   5.28.0-2
ii  libkf5textwidgets55.28.0-1
ii  libkf5widgetsaddons5  5.28.0-3
ii  libkf5xmlgui5 5.28.0-1
ii  libphonon4qt5-4   4:4.9.0-4
ii  libqt5core5a  5.7.1+dfsg-3+b1
ii  libqt5dbus5   5.7.1+dfsg-3+b1
ii  libqt5gui55.7.1+dfsg-3+b1
ii  libqt5network55.7.1+dfsg-3+b1
ii  libqt5webkit5 5.7.1+dfsg-1
ii  libqt5widgets55.7.1+dfsg-3+b1
ii  libstdc++66.3.0-18
ii  phonon4qt54:4.9.0-4
ii  quassel-data  1:0.12.4-2
ii  zlib1g1:1.2.8.dfsg-5

quassel-client recommends no packages.

quassel-client suggests no packages.

-- no debconf information

___
pkg-kde-extras mailing list
pkg-kde-extras@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-kde-extras


[Pkg-kde-extras] Bug#590645: [quassel-core] Please provide support for --listen option to init script

2017-12-13 Thread Heinrich Schuchardt
Dear maintainer,

unfortunately this request is now 7 years old and not yet considered. Please, 
give it some love.

The fix is easy:

Modify /etc/init.d/quasselcore as follows:

 # defaulting LOGLEVEL and PORT, just in case /etc/default/$name gets deleted
 LOGLEVEL="Info"
 PORT="4242"
+LISTEN="::,0.0.0.0"

...

 start_server() {
 start-stop-daemon --start --quiet --pidfile $PIDFILE --make-pidfile \
 --background --chuid $DAEMONUSER --exec $DAEMON \
 -- --logfile=$LOGFILE --loglevel=$LOGLEVEL --configdir=$DATADIR \
-   --port=$PORT \
+  --listen=$LISTEN --port=$PORT \
$DAEMON_OPTS
 }

Add two lines to /etc/default/quasselcore:

# Network address to listen on
LISTEN="::,0.0.0.0"

Best regards

Heinrich Schuchardt

___
pkg-kde-extras mailing list
pkg-kde-extras@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-kde-extras


[Pkg-kde-extras] Bug#850561: amarok: 'errmsg.sys' had only 969 error messages

2017-01-07 Thread Heinrich Schuchardt
Package: amarok-common
Version: 2.8.0-7
Severity: normal

Dear Maintainer,

when trying to start Amarok the following error message is displayed:

The amarok database reported the following errors:
GREPME MySQLe query failed! (2000) Error message file 
'/usr/share/kde4/apps/amarok/mysqle/errmsg.sys' had only 969 error
messages, but it should contain at least 982 error messages.
Check that the above file is the right version for this program!
on init
In most cases you will need to resolve these errors before Amarok will
run properly.

Best regards

Heinrich Schuchardt

-- System Information:
Debian Release: stretch/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 4.8.0-2-amd64 (SMP w/4 CPU cores)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) (ignored: LC_ALL 
set to en_US.UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages amarok-common depends on:
pn  perl:any  

Versions of packages amarok-common recommends:
ii  amarok  2.8.0-7

amarok-common suggests no packages.

Versions of packages amarok depends on:
ii  amarok-utils  2.8.0-7
ii  kde-runtime   4:16.08.3-1
ii  libavcodec57  7:3.2.2-1
ii  libavformat57 7:3.2.2-1
ii  libavutil55   7:3.2.2-1
ii  libc6 2.24-8
ii  libcurl3-gnutls   7.51.0-1
ii  libgcrypt20   1.7.5-2
ii  libgdk-pixbuf2.0-02.36.2-1
ii  libgl1-mesa-glx [libgl1]  13.0.2-3
ii  libglib2.0-0  2.50.2-2
ii  libgpod4-nogtk0.8.3-8
ii  libkcmutils4  4:4.14.26-1
ii  libkdecore5   4:4.14.26-1
ii  libkdeui5 4:4.14.26-1
ii  libkdewebkit5 4:4.14.26-1
ii  libkdnssd44:4.14.26-1
ii  libkfile4 4:4.14.26-1
ii  libkio5   4:4.14.26-1
ii  libknewstuff3-4   4:4.14.26-1
ii  liblastfm11.0.9-1
ii  libloudmouth1-0   1.5.3-2
ii  libmariadbclient1810.1.20-3
ii  libmariadbd18 10.1.20-3
ii  libmtp9   1.1.12-1
ii  libmygpo-qt1  1.0.9-2
ii  libofa0   0.9.3-13
ii  libphonon44:4.9.0-4
ii  libplasma34:4.14.26-1
ii  libqjson0 0.8.1-3
ii  libqt4-dbus   4:4.8.7+dfsg-11
ii  libqt4-network4:4.8.7+dfsg-11
ii  libqt4-opengl 4:4.8.7+dfsg-11
ii  libqt4-script 4:4.8.7+dfsg-11
ii  libqt4-sql4:4.8.7+dfsg-11
ii  libqt4-svg4:4.8.7+dfsg-11
ii  libqt4-xml4:4.8.7+dfsg-11
ii  libqtcore44:4.8.7+dfsg-11
ii  libqtgui4 4:4.8.7+dfsg-11
ii  libqtscript4-core 0.2.0-1
ii  libqtscript4-gui  0.2.0-1
ii  libqtscript4-network  0.2.0-1
ii  libqtscript4-sql  0.2.0-1
ii  libqtscript4-uitools  0.2.0-1
ii  libqtscript4-xml  0.2.0-1
ii  libqtwebkit4  2.3.4.dfsg-9.1
ii  libsolid4 4:4.14.26-1
ii  libstdc++66.2.1-5
ii  libthreadweaver4  4:4.14.26-1
ii  libx11-6  2:1.6.4-2
ii  libxml2   2.9.4+dfsg1-2.1
ii  phonon4:4.9.0-4

Versions of packages amarok recommends:
ii  clamz0.5-2+b1
ii  kio-audiocd  4:16.08.3-1

Versions of packages amarok suggests:
pn  amarok-doc 
ii  libqt4-sql-mysql   4:4.8.7+dfsg-11
pn  libqt4-sql-psql
ii  libqt4-sql-sqlite  4:4.8.7+dfsg-11
pn  moodbar

Versions of packages amarok-common is related to:
ii  phonon-backend-vlc [phonon-backend]  0.9.0-2

-- no debconf information

___
pkg-kde-extras mailing list
pkg-kde-extras@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-kde-extras