Re: Suggestion to Remove KFloppy and hold back K3b

Removing release from this thread. I'm going to start by saying I'm a little miffed at the lack of progress on this, so I've now taken matters into my own hands. Jonathan very kindly shipped a USB floppy drive and some blank diskettes for me to run tests with, so I've been playing away with a litt

Re: Suggestion to Remove KFloppy and hold back K3b

---Original Message--- On Wednesday, 22 February 2017 at 23:05, Wolfgang Bauer wrote: > My plan (now) is to query Solid for removable devices (not only Floppy > drives), and offer them in the chooser too. > But this needs more thoughts... +1 on that - I have an actual use case for this where reg

Re: Suggestion to Remove KFloppy and hold back K3b

Am 2017-02-23 00:08, schrieb Boudhayan Gupta: Hi Martin, Is there some sort of logic possible with a combination of suid-root and seccomp? I think if we probe devices via solid, that'll need to have a QApplication instantiated and we'd have to drop root privileges before we init that. Se my ot

Re: Suggestion to Remove KFloppy and hold back K3b

Hi Martin, Is there some sort of logic possible with a combination of suid-root and seccomp? I think if we probe devices via solid, that'll need to have a QApplication instantiated and we'd have to drop root privileges before we init that. Thanks, Boudhayan Freundliche Grüße Boudhayan Gupta KDE

Re: Suggestion to Remove KFloppy and hold back K3b

On 22.02.2017 23:17, Emmanuel Pescosta wrote: > 2017-02-22 22:42 GMT+01:00 Martin Steigerwald >: > > I wonder whether it makes sense to make it a more generic format tool > that can > also format USB sticks. Then it may make sense to give it a more generic >

Re: Suggestion to Remove KFloppy and hold back K3b

Am Mittwoch, 22. Februar 2017, 22:01:01 schrieb Martin Gräßlin: > The attack surface is exactly the same as any other X application. It's > X itself which will make this exploitable. Yes, obviously, and that's clear to me too. I won't comment on the rest, because it's not specific to kfloppy as y

Re: Suggestion to Remove KFloppy and hold back K3b

2017-02-22 22:42 GMT+01:00 Martin Steigerwald : > I wonder whether it makes sense to make it a more generic format tool that > can > also format USB sticks. Then it may make sense to give it a more generic > name. > This sounds like a good idea! ... and a great opportunity for Dolphin. Maybe we

Re: Suggestion to Remove KFloppy and hold back K3b

Am Mittwoch, 22. Februar 2017, 22:42:01 schrieb Martin Steigerwald: > Am Mittwoch, 22. Februar 2017, 20:07:09 CET schrieb Wolfgang Bauer: > > Am Mittwoch, 22. Februar 2017, 01:07:42 schrieb Boudhayan Gupta: > > > I really don't see why this has to exist. Anyone who uses floppies in > > > this day a

Re: Suggestion to Remove KFloppy and hold back K3b

El dimecres, 22 de febrer de 2017, a les 1:07:42 CET, Boudhayan Gupta va escriure: > I really don't see why this has to exist. Anyone who uses floppies in > this day and age knows how to use a command line to do a low level > format. Anything else can be done using the usual tools - KParted, > etc

Re: Suggestion to Remove KFloppy and hold back K3b

Am Mittwoch, 22. Februar 2017, 20:07:09 CET schrieb Wolfgang Bauer: > Am Mittwoch, 22. Februar 2017, 01:07:42 schrieb Boudhayan Gupta: > > I really don't see why this has to exist. Anyone who uses floppies in > > this day and age knows how to use a command line to do a low level > > format. > > Ma

Re: Suggestion to Remove KFloppy and hold back K3b

Am 2017-02-22 20:18, schrieb Wolfgang Bauer: Am Dienstag, 21. Februar 2017, 18:55:00 schrieb Nicolás Alvarez: > On Feb 15, 2017, at 17:58, Wolfgang Bauer wrote: > > Am Mittwoch, 15. Februar 2017, 22:21:19 schrieb Martin Gräßlin: >> Please do not consider starting a GUI application as root a pos

Re: Suggestion to Remove KFloppy and hold back K3b

Am Mittwoch, 22. Februar 2017, 20:54:02 schrieb Wolfgang Bauer: > But the difference is probably the '-I' option, adding this would of course > be simple... > For the record, this is what the man page says: > -I It is typical for fixed disk devices to be partitioned so, by > default, yo

Re: Suggestion to Remove KFloppy and hold back K3b

Am Freitag, 17. Februar 2017, 17:33:02 schrieb Jonathan Riddell: > I'm in the disk user group. I'm using KDE neon which is Ubuntu 16.04 > as base. The drive is external and attached by USB. > > fdformat doesn't work from the command line > > >fdformat --no-verify /dev/sdc > > fdformat: could n

Re: Suggestion to Remove KFloppy and hold back K3b

Am Freitag, 17. Februar 2017, 17:34:39 schrieb Jonathan Riddell: > If the user doesn't have the privilages best response is to show an error > dialog saying what needs done to give the user the privilages. Right, I agree that the error handling (for this case in particular) should be improved. k

Re: Suggestion to Remove KFloppy and hold back K3b

Am Dienstag, 21. Februar 2017, 18:55:00 schrieb Nicolás Alvarez: > > On Feb 15, 2017, at 17:58, Wolfgang Bauer wrote: > > > > Am Mittwoch, 15. Februar 2017, 22:21:19 schrieb Martin Gräßlin: > >> Please do not consider starting a GUI application as root a possibility. > > > > Ok, but partitionman

Re: Suggestion to Remove KFloppy and hold back K3b

Am Mittwoch, 22. Februar 2017, 01:07:42 schrieb Boudhayan Gupta: > I really don't see why this has to exist. Anyone who uses floppies in > this day and age knows how to use a command line to do a low level > format. Maybe, but using a GUI is more comfortable and you don't have to remember which t

Re: Suggestion to Remove KFloppy and hold back K3b

> On Feb 15, 2017, at 17:58, Wolfgang Bauer wrote: > > Am Mittwoch, 15. Februar 2017, 22:21:19 schrieb Martin Gräßlin: >> Please do not consider starting a GUI application as root a possibility. > > Ok, but partitionmanager does exactly that. It restarts itself as root if run > as user. > So t

Re: Suggestion to Remove KFloppy and hold back K3b

I really don't see why this has to exist. Anyone who uses floppies in this day and age knows how to use a command line to do a low level format. Anything else can be done using the usual tools - KParted, etc. Freundliche Grüße Boudhayan Gupta KDE e.V. - Sysadmin and Community Working Groups +49 15

Re: Suggestion to Remove KFloppy and hold back K3b

Am Donnerstag, 16. Februar 2017, 00:34:38 schrieb Luigi Toscano: > Really, please, let's try to find another solution than running as root. Yes, of course.. I'd like to clarify a bit though: I did (and do) prefer the kauth solution. I only considered offering to restart the application as root (

Re: Suggestion to Remove KFloppy and hold back K3b

On Friday, February 17, 2017 5:33:02 PM EST Jonathan Riddell wrote: > On Wed, Feb 15, 2017 at 07:50:22PM +0100, Wolfgang Bauer wrote: > > On 11 February 2017 at 13:44, Jonathan Riddell wrote: > > > I recommend KFloppy be removed from Applications releases. It > > > couldn't find my floppy drive a

Re: Suggestion to Remove KFloppy and hold back K3b

On Thu, Feb 16, 2017 at 12:05:03AM +0100, Wolfgang Bauer wrote: > Am Mittwoch, 15. Februar 2017, 21:55:12 schrieb Boudhayan Gupta: > > What would you say about using Solid to probe floppy drives? I think > > Solid already has the necessary hooks, but if it doesn't, we can add > > them. > > Sounds

Re: Suggestion to Remove KFloppy and hold back K3b

On Wed, Feb 15, 2017 at 07:50:22PM +0100, Wolfgang Bauer wrote: > On 11 February 2017 at 13:44, Jonathan Riddell wrote: > > I recommend KFloppy be removed from Applications releases. It > > couldn't find my floppy drive and when I hacked the code to tell it > > where to look it depended on an ext

Re: Suggestion to Remove KFloppy and hold back K3b

Am 2017-02-16 16:56, schrieb Reindl Harald: Am 16.02.2017 um 16:51 schrieb Martin Gräßlin: Am 2017-02-16 09:16, schrieb Reindl Harald: Am 16.02.2017 um 06:28 schrieb Martin Gräßlin: Even xlib and xcb hardly protect against a malicious X server. And we just cannot assume any more that X is run

Re: Suggestion to Remove KFloppy and hold back K3b

Am 16.02.2017 um 16:51 schrieb Martin Gräßlin: Am 2017-02-16 09:16, schrieb Reindl Harald: Am 16.02.2017 um 06:28 schrieb Martin Gräßlin: Even xlib and xcb hardly protect against a malicious X server. And we just cannot assume any more that X is running as root really? i fear before we see

Re: Suggestion to Remove KFloppy and hold back K3b

Am 2017-02-16 09:16, schrieb Reindl Harald: Am 16.02.2017 um 06:28 schrieb Martin Gräßlin: Even xlib and xcb hardly protect against a malicious X server. And we just cannot assume any more that X is running as root really? i fear before we see X11 running without root in the wild it's replaced

Re: Suggestion to Remove KFloppy and hold back K3b

at least not on non-GNOME machines https://github.com/sddm/sddm/issues/246 Tids commented on 23 Dec 2016 I'm also still waiting for rootless X with sddm. Am 16.02.2017 um 09:16 schrieb Reindl Harald: Am 16.02.2017 um 06:28 schrieb Martin Gräßlin: Even xlib and xcb hardly protect against a mali

Re: Suggestion to Remove KFloppy and hold back K3b

Am 16.02.2017 um 06:28 schrieb Martin Gräßlin: Even xlib and xcb hardly protect against a malicious X server. And we just cannot assume any more that X is running as root really? i fear before we see X11 running without root in the wild it's replaced by wayland http://hansdegoede.livej

Re: Suggestion to Remove KFloppy and hold back K3b

Am 15. Februar 2017 23:58:50 MEZ schrieb Wolfgang Bauer : >Am Mittwoch, 15. Februar 2017, 22:21:19 schrieb Martin Gräßlin: >> Please do not consider starting a GUI application as root a >possibility. > >Ok, but partitionmanager does exactly that. It restarts itself as root >if run >as user. >So

Re: Suggestion to Remove KFloppy and hold back K3b

Wolfgang Bauer ha scritto: > Am Mittwoch, 15. Februar 2017, 22:21:19 schrieb Martin Gräßlin: >> Please do not consider starting a GUI application as root a possibility. > > Ok, but partitionmanager does exactly that. It restarts itself as root if run > as user. > So that instantly would rule out

Re: Suggestion to Remove KFloppy and hold back K3b

Am Mittwoch, 15. Februar 2017, 21:55:12 schrieb Boudhayan Gupta: > What would you say about using Solid to probe floppy drives? I think > Solid already has the necessary hooks, but if it doesn't, we can add > them. Sounds interesting. Thanks for the suggestion. I will have a look at that too. The

Re: Suggestion to Remove KFloppy and hold back K3b

Am Mittwoch, 15. Februar 2017, 22:21:19 schrieb Martin Gräßlin: > Please do not consider starting a GUI application as root a possibility. Ok, but partitionmanager does exactly that. It restarts itself as root if run as user. So that instantly would rule out partionmanager as a proposed replaceme

Re: Suggestion to Remove KFloppy and hold back K3b

Am 2017-02-15 19:50, schrieb Wolfgang Bauer: On 11 February 2017 at 13:44, Jonathan Riddell wrote: I recommend KFloppy be removed from Applications releases. It couldn't find my floppy drive and when I hacked the code to tell it where to look it depended on an external tool fdformat which didn

Re: Suggestion to Remove KFloppy and hold back K3b

Hi Wolfgang, What would you say about using Solid to probe floppy drives? I think Solid already has the necessary hooks, but if it doesn't, we can add them. Thanks, Boudhayan Freundliche Grüße Boudhayan Gupta KDE e.V. - Sysadmin and Community Working Groups +49 151 71032970 On 15 February 2017

Re: Suggestion to Remove KFloppy and hold back K3b

On 11 February 2017 at 13:44, Jonathan Riddell wrote: > I recommend KFloppy be removed from Applications releases. It > couldn't find my floppy drive and when I hacked the code to tell it > where to look it depended on an external tool fdformat which didn't > work anyway. KFloppy and fdformat w

Re: Suggestion to Remove KFloppy and hold back K3b

Kai Uwe fixed k3b so that should be good to ship in Applications now from my casual testing https://phabricator.kde.org/D4571 Jonathan On 11 February 2017 at 13:44, Jonathan Riddell wrote: > We tested some legacy media at the Plasma sprint > > http://jriddell.org/2017/02/11/plasma-sprint-legac