search

flathub / org.kde.krdc

https://flathub.org/apps/details/org.kde.krdc
0 stars 3 forks source link

Please allow krdc to use the session bus to access password managers #79

Open LaurentBonnaud opened 1 month ago

LaurentBonnaud commented 1 month ago

Hi,

I am using krdc on KDE Plasma and would like to use a password manager to store passwords. With the default sandbox defined by org.kde.krdc, a password is asked for each connection. This is because the sandbox prevents org.kde.krdc to access the session bus.

On my system, I allowed org.kde.krdc to access the session bus (see below), and it fixed the problem.

Changing the default sandbox settings would probably be a benefit for most users.

Here are sansdbox settings on my system:

$ flatpak info --show-permissions org.kde.krdc
[Context]
shared=network;ipc;
sockets=x11;wayland;pulseaudio;session-bus;fallback-x11;
devices=dri;
filesystems=xdg-config/kdeglobals:ro;

[Session Bus Policy]
com.canonical.AppMenu.Registrar=talk
org.kde.kconfig.notify=talk
org.kde.KGlobalSettings=talk
org.kde.kwalletd5=talk
travier commented 1 month ago

We probably should not allow full access to the session bus. If you can find which session bus name to allow then we can add it. You can run krdc with flatpak run --log-session-bus org.kde.krdc to find out which services are being called.

LaurentBonnaud commented 1 month ago

Here it is:

$ flatpak run --log-session-bus org.kde.krdc
C1: -> org.freedesktop.DBus call org.freedesktop.DBus.Hello at /org/freedesktop/DBus
C-65536: -> org.freedesktop.DBus fake wildcarded AddMatch for org.freedesktop.portal
C-65535: -> org.freedesktop.DBus fake wildcarded AddMatch for org.mpris.MediaPlayer2.org.kde.krdc
C-65534: -> org.freedesktop.DBus fake wildcarded AddMatch for org.kde.krdc
C-65533: -> org.freedesktop.DBus fake AddMatch for org.kde.kwalletd5
C-65532: -> org.freedesktop.DBus fake GetNameOwner for org.kde.kwalletd5
C-65531: -> org.freedesktop.DBus fake AddMatch for org.kde.KGlobalSettings
C-65530: -> org.freedesktop.DBus fake GetNameOwner for org.kde.KGlobalSettings
C-65529: -> org.freedesktop.DBus fake AddMatch for org.kde.kconfig.notify
C-65528: -> org.freedesktop.DBus fake GetNameOwner for org.kde.kconfig.notify
C-65527: -> org.freedesktop.DBus fake AddMatch for com.canonical.AppMenu.Registrar
C-65526: -> org.freedesktop.DBus fake GetNameOwner for com.canonical.AppMenu.Registrar
C-65525: -> org.freedesktop.DBus fake ListNames
B1: <- org.freedesktop.DBus return from C1
B2: <- org.freedesktop.DBus signal org.freedesktop.DBus.NameAcquired at /org/freedesktop/DBus
B3: <- org.freedesktop.DBus return from C-65536
*SKIPPED*
B4: <- org.freedesktop.DBus return from C-65535
*SKIPPED*
B5: <- org.freedesktop.DBus return from C-65534
*SKIPPED*
B6: <- org.freedesktop.DBus return from C-65533
*SKIPPED*
B7: <- org.freedesktop.DBus return from C-65532
*SKIPPED*
B8: <- org.freedesktop.DBus return from C-65531
*SKIPPED*
B9: <- org.freedesktop.DBus return error org.freedesktop.DBus.Error.NameHasNoOwner from C-65530
*SKIPPED*
B10: <- org.freedesktop.DBus return from C-65529
*SKIPPED*
B11: <- org.freedesktop.DBus return error org.freedesktop.DBus.Error.NameHasNoOwner from C-65528
*SKIPPED*
B12: <- org.freedesktop.DBus return from C-65527
*SKIPPED*
B13: <- org.freedesktop.DBus return error org.freedesktop.DBus.Error.NameHasNoOwner from C-65526
*SKIPPED*
B14: <- org.freedesktop.DBus return from C-65525
C-65524: -> org.freedesktop.DBus fake GetNameOwner for org.freedesktop.DBus
C-65523: -> org.freedesktop.DBus fake GetNameOwner for org.freedesktop.portal.Desktop
C-65522: -> org.freedesktop.DBus fake GetNameOwner for org.freedesktop.portal.Documents
C-65521: -> org.freedesktop.DBus fake GetNameOwner for org.kde.kwalletd5
*SKIPPED*
C2: -> org.freedesktop.portal.Desktop call org.freedesktop.DBus.Properties.Get at /org/freedesktop/portal/desktop
B15: <- org.freedesktop.DBus return from C-65524
*SKIPPED*
B16: <- org.freedesktop.DBus return from C-65523
*SKIPPED*
B17: <- org.freedesktop.DBus return from C-65522
*SKIPPED*
B18: <- org.freedesktop.DBus return from C-65521
*SKIPPED*
B1668: <- :1.24 return from C2
C3: -> org.freedesktop.portal.Desktop call org.freedesktop.portal.Settings.ReadAll at /org/freedesktop/portal/desktop
B1672: <- :1.24 return from C3
C4: -> org.freedesktop.DBus call org.freedesktop.DBus.AddMatch at /org/freedesktop/DBus
C5: -> org.freedesktop.portal.Desktop call org.freedesktop.DBus.Properties.Get at /org/freedesktop/portal/desktop
C6: -> org.freedesktop.portal.Desktop call org.freedesktop.portal.Settings.Read at /org/freedesktop/portal/desktop
B1673: <- :1.24 return from C5
B1675: <- :1.24 return from C6
C7: -> org.freedesktop.DBus call org.freedesktop.DBus.AddMatch at /org/freedesktop/DBus
C8: -> org.freedesktop.DBus call org.freedesktop.DBus.AddMatch at /org/freedesktop/DBus
C9: -> org.freedesktop.DBus call org.freedesktop.DBus.GetNameOwner at /org/freedesktop/DBus
B19: <- org.freedesktop.DBus return from C9
Qt: Session management error: Could not open network socket
C10: -> org.freedesktop.portal.Desktop call org.freedesktop.portal.Settings.Read at /org/freedesktop/portal/desktop
B1677: <- :1.24 return from C10
C11: -> org.freedesktop.portal.Desktop call org.freedesktop.portal.Settings.Read at /org/freedesktop/portal/desktop
B1679: <- :1.24 return from C11
C12: -> org.freedesktop.portal.Desktop call org.freedesktop.portal.Settings.Read at /org/freedesktop/portal/desktop
B1681: <- :1.24 return from C12
C13: -> org.freedesktop.portal.Desktop call org.freedesktop.portal.Settings.Read at /org/freedesktop/portal/desktop
B1683: <- :1.24 return from C13
C14: -> org.freedesktop.portal.Desktop call org.freedesktop.portal.Settings.Read at /org/freedesktop/portal/desktop
B1685: <- :1.24 return from C14
C15: -> org.freedesktop.DBus call org.freedesktop.DBus.AddMatch at /org/freedesktop/DBus
C16: -> org.freedesktop.DBus call org.freedesktop.DBus.AddMatch at /org/freedesktop/DBus
C17: -> org.freedesktop.DBus call org.freedesktop.DBus.AddMatch at /org/freedesktop/DBus
C18: -> org.freedesktop.DBus call org.freedesktop.DBus.AddMatch at /org/freedesktop/DBus
C19: -> org.freedesktop.DBus call org.freedesktop.DBus.AddMatch at /org/freedesktop/DBus
C20: -> org.freedesktop.DBus call org.freedesktop.DBus.AddMatch at /org/freedesktop/DBus
C21: -> org.freedesktop.DBus call org.freedesktop.DBus.AddMatch at /org/freedesktop/DBus
C22: -> org.freedesktop.DBus call org.freedesktop.DBus.NameHasOwner at /org/freedesktop/DBus
B20: <- org.freedesktop.DBus return from C22
C23: -> org.freedesktop.DBus call org.freedesktop.DBus.AddMatch at /org/freedesktop/DBus
C24: -> org.freedesktop.portal.Desktop call org.freedesktop.portal.Settings.ReadAll at /org/freedesktop/portal/desktop
B1688: <- :1.24 return from C24
C25: -> org.freedesktop.DBus call org.freedesktop.DBus.AddMatch at /org/freedesktop/DBus
C1: -> org.freedesktop.DBus call org.freedesktop.DBus.Hello at /org/freedesktop/DBus
C-65536: -> org.freedesktop.DBus fake wildcarded AddMatch for org.freedesktop.portal
C-65535: -> org.freedesktop.DBus fake wildcarded AddMatch for org.mpris.MediaPlayer2.org.kde.krdc
C-65534: -> org.freedesktop.DBus fake wildcarded AddMatch for org.kde.krdc
C-65533: -> org.freedesktop.DBus fake AddMatch for org.kde.kwalletd5
C-65532: -> org.freedesktop.DBus fake GetNameOwner for org.kde.kwalletd5
C-65531: -> org.freedesktop.DBus fake AddMatch for org.kde.KGlobalSettings
C-65530: -> org.freedesktop.DBus fake GetNameOwner for org.kde.KGlobalSettings
C-65529: -> org.freedesktop.DBus fake AddMatch for org.kde.kconfig.notify
C-65528: -> org.freedesktop.DBus fake GetNameOwner for org.kde.kconfig.notify
C-65527: -> org.freedesktop.DBus fake AddMatch for com.canonical.AppMenu.Registrar
C-65526: -> org.freedesktop.DBus fake GetNameOwner for com.canonical.AppMenu.Registrar
C-65525: -> org.freedesktop.DBus fake ListNames
B1: <- org.freedesktop.DBus return from C1
B2: <- org.freedesktop.DBus signal org.freedesktop.DBus.NameAcquired at /org/freedesktop/DBus
B3: <- org.freedesktop.DBus return from C-65536
*SKIPPED*
B4: <- org.freedesktop.DBus return from C-65535
*SKIPPED*
B5: <- org.freedesktop.DBus return from C-65534
*SKIPPED*
B6: <- org.freedesktop.DBus return from C-65533
*SKIPPED*
B7: <- org.freedesktop.DBus return from C-65532
*SKIPPED*
B8: <- org.freedesktop.DBus return from C-65531
*SKIPPED*
B9: <- org.freedesktop.DBus return error org.freedesktop.DBus.Error.NameHasNoOwner from C-65530
*SKIPPED*
B10: <- org.freedesktop.DBus return from C-65529
*SKIPPED*
B11: <- org.freedesktop.DBus return error org.freedesktop.DBus.Error.NameHasNoOwner from C-65528
*SKIPPED*
B12: <- org.freedesktop.DBus return from C-65527
*SKIPPED*
B13: <- org.freedesktop.DBus return error org.freedesktop.DBus.Error.NameHasNoOwner from C-65526
*SKIPPED*
B14: <- org.freedesktop.DBus return from C-65525
C-65524: -> org.freedesktop.DBus fake GetNameOwner for org.freedesktop.DBus
C-65523: -> org.freedesktop.DBus fake GetNameOwner for org.freedesktop.portal.Desktop
C-65522: -> org.freedesktop.DBus fake GetNameOwner for org.freedesktop.portal.Documents
C-65521: -> org.freedesktop.DBus fake GetNameOwner for org.kde.kwalletd5
*SKIPPED*
C26: -> org.freedesktop.DBus call org.freedesktop.DBus.AddMatch at /org/freedesktop/DBus
C2: -> all signal org.kde.StatusNotifierItem.NewMenu at /StatusNotifierItem
C27: -> org.freedesktop.DBus call org.freedesktop.DBus.GetNameOwner at /org/freedesktop/DBus
Filtering message due to arg0 org.kde.StatusNotifierWatcher, policy: 0 (required 1)
B15: <- org.freedesktop.DBus return from C-65524
*SKIPPED*
B16: <- org.freedesktop.DBus return from C-65523
*SKIPPED*
B17: <- org.freedesktop.DBus return from C-65522
*SKIPPED*
B18: <- org.freedesktop.DBus return from C-65521
*SKIPPED*
B21: <- (no sender) return from C27
*REWRITTEN*
kf.statusnotifieritem: env says KDE is running but SNI unavailable -- check KDE_FULL_SESSION and XDG_CURRENT_DESKTOP
C3: -> all signal org.kde.StatusNotifierItem.NewIcon at /StatusNotifierItem
C4: -> all signal org.kde.StatusNotifierItem.NewStatus at /StatusNotifierItem
C5: -> all signal org.kde.StatusNotifierItem.NewToolTip at /StatusNotifierItem
C6: -> all signal org.kde.StatusNotifierItem.NewToolTip at /StatusNotifierItem
C28: -> org.freedesktop.DBus call org.freedesktop.DBus.AddMatch at /org/freedesktop/DBus
C29: -> org.freedesktop.DBus call org.freedesktop.DBus.AddMatch at /org/freedesktop/DBus
C7: -> all signal com.canonical.dbusmenu.LayoutUpdated at /MenuBar
C8: -> all signal com.canonical.dbusmenu.ItemsPropertiesUpdated at /MenuBar
C9: -> all signal com.canonical.dbusmenu.ItemsPropertiesUpdated at /MenuBar
QWidget::setMaximumSize: (/VncView) Negative sizes (-2147483648,-2147483648) are not possible
QWidget::setMaximumSize: (/VncView) Negative sizes (-2147483648,-2147483648) are not possible
QWidget::setMaximumSize: (/VncView) Negative sizes (-2147483648,-2147483648) are not possible
QWidget::setMaximumSize: (/VncView) Negative sizes (-2147483648,-2147483648) are not possible
C30: -> org.freedesktop.DBus call org.freedesktop.DBus.NameHasOwner at /org/freedesktop/DBus
Filtering message due to arg0 org.kde.ActivityManager, policy: 0 (required 1)
B22: <- (no sender) return from C30
*REWRITTEN*
C31: -> org.freedesktop.DBus call org.freedesktop.DBus.StartServiceByName at /org/freedesktop/DBus
Filtering message due to arg0 org.kde.ActivityManager, policy: 0 (required 2)
*HIDDEN* (ping)
C32: -> org.freedesktop.DBus call org.freedesktop.DBus.AddMatch at /org/freedesktop/DBus
C33: -> org.freedesktop.DBus call org.freedesktop.DBus.GetNameOwner at /org/freedesktop/DBus
Filtering message due to arg0 org.kde.ActivityManager, policy: 0 (required 1)
B23: <- (no sender) return from C31
*REWRITTEN*
B24: <- (no sender) return from C33
*REWRITTEN*
C34: -> org.freedesktop.DBus call org.freedesktop.DBus.GetNameOwner at /org/freedesktop/DBus
Filtering message due to arg0 org.kde.ActivityManager, policy: 0 (required 1)
B25: <- (no sender) return from C34
*REWRITTEN*
C35: -> org.freedesktop.DBus call org.freedesktop.DBus.GetNameOwner at /org/freedesktop/DBus
Filtering message due to arg0 org.kde.ActivityManager, policy: 0 (required 1)
B26: <- (no sender) return from C35
*REWRITTEN*
C36: -> org.freedesktop.DBus call org.freedesktop.DBus.GetNameOwner at /org/freedesktop/DBus
Filtering message due to arg0 org.kde.ActivityManager, policy: 0 (required 1)
B27: <- (no sender) return from C36
*REWRITTEN*
C37: -> org.freedesktop.DBus call org.freedesktop.DBus.GetNameOwner at /org/freedesktop/DBus
Filtering message due to arg0 org.kde.ActivityManager, policy: 0 (required 1)
B28: <- (no sender) return from C37
*REWRITTEN*
C38: -> org.freedesktop.DBus call org.freedesktop.DBus.NameHasOwner at /org/freedesktop/DBus
Filtering message due to arg0 org.kde.ActivityManager, policy: 0 (required 1)
B29: <- (no sender) return from C38
*REWRITTEN*
C39: -> org.kde.ActivityManager call org.kde.ActivityManager.Resources.RegisterResourceEvent at /ActivityManager/Resources
*HIDDEN* (ping)
B30: <- (no sender) return from C39
*REWRITTEN*
C40: -> org.freedesktop.DBus call org.freedesktop.DBus.AddMatch at /org/freedesktop/DBus
C41: -> org.freedesktop.DBus call org.freedesktop.DBus.GetNameOwner at /org/freedesktop/DBus
Filtering message due to arg0 org.kde.kwalletd6, policy: 0 (required 1)
B31: <- (no sender) return from C41
*REWRITTEN*
C42: -> org.freedesktop.DBus call org.freedesktop.DBus.AddMatch at /org/freedesktop/DBus
C43: -> org.freedesktop.DBus call org.freedesktop.DBus.NameHasOwner at /org/freedesktop/DBus
Filtering message due to arg0 org.kde.kwalletd6, policy: 0 (required 1)
B32: <- (no sender) return from C43
*REWRITTEN*
C44: -> org.freedesktop.DBus call org.freedesktop.DBus.StartServiceByName at /org/freedesktop/DBus
Filtering message due to arg0 org.kde.kwalletd6, policy: 0 (required 2)
*HIDDEN* (ping)
B33: <- (no sender) return from C44
*REWRITTEN*
Couldn't start kwalletd:  QDBusError("org.freedesktop.DBus.Error.ServiceUnknown", "org.freedesktop.DBus.Error.ServiceUnknown")
C45: -> org.freedesktop.DBus call org.freedesktop.DBus.NameHasOwner at /org/freedesktop/DBus
Filtering message due to arg0 org.kde.kwalletd6, policy: 0 (required 1)
B34: <- (no sender) return from C45
*REWRITTEN*
C46: -> org.freedesktop.DBus call org.freedesktop.DBus.AddMatch at /org/freedesktop/DBus
C47: -> org.freedesktop.DBus call org.freedesktop.DBus.AddMatch at /org/freedesktop/DBus
C48: -> org.freedesktop.DBus call org.freedesktop.DBus.GetNameOwner at /org/freedesktop/DBus
Filtering message due to arg0 org.kde.kwalletd6, policy: 0 (required 1)
B35: <- (no sender) return from C48
*REWRITTEN*
C49: -> org.freedesktop.DBus call org.freedesktop.DBus.NameHasOwner at /org/freedesktop/DBus
Filtering message due to arg0 org.kde.kwalletd6, policy: 0 (required 1)
B36: <- (no sender) return from C49
*REWRITTEN*
C50: -> org.freedesktop.DBus call org.freedesktop.DBus.StartServiceByName at /org/freedesktop/DBus
Filtering message due to arg0 org.kde.kwalletd6, policy: 0 (required 2)
*HIDDEN* (ping)
B37: <- (no sender) return from C50
*REWRITTEN*
Couldn't start kwalletd:  QDBusError("org.freedesktop.DBus.Error.ServiceUnknown", "org.freedesktop.DBus.Error.ServiceUnknown")
C51: -> org.freedesktop.DBus call org.freedesktop.DBus.NameHasOwner at /org/freedesktop/DBus
Filtering message due to arg0 org.kde.kwalletd6, policy: 0 (required 1)
B38: <- (no sender) return from C51
*REWRITTEN*
C52: -> org.freedesktop.DBus call org.freedesktop.DBus.AddMatch at /org/freedesktop/DBus
C53: -> org.freedesktop.DBus call org.freedesktop.DBus.NameHasOwner at /org/freedesktop/DBus
Filtering message due to arg0 org.kde.kwalletd6, policy: 0 (required 1)
B39: <- (no sender) return from C53
*REWRITTEN*
C54: -> org.freedesktop.DBus call org.freedesktop.DBus.StartServiceByName at /org/freedesktop/DBus
Filtering message due to arg0 org.kde.kwalletd6, policy: 0 (required 2)
*HIDDEN* (ping)
B40: <- (no sender) return from C54
*REWRITTEN*
Couldn't start kwalletd:  QDBusError("org.freedesktop.DBus.Error.ServiceUnknown", "org.freedesktop.DBus.Error.ServiceUnknown")
C55: -> org.freedesktop.DBus call org.freedesktop.DBus.NameHasOwner at /org/freedesktop/DBus
Filtering message due to arg0 org.kde.kwalletd6, policy: 0 (required 1)
B41: <- (no sender) return from C55
*REWRITTEN*
C56: -> org.freedesktop.DBus call org.freedesktop.DBus.AddMatch at /org/freedesktop/DBus
C57: -> org.freedesktop.DBus call org.freedesktop.DBus.NameHasOwner at /org/freedesktop/DBus
Filtering message due to arg0 org.kde.kwalletd6, policy: 0 (required 1)
B42: <- (no sender) return from C57
*REWRITTEN*
C58: -> org.freedesktop.DBus call org.freedesktop.DBus.StartServiceByName at /org/freedesktop/DBus
Filtering message due to arg0 org.kde.kwalletd6, policy: 0 (required 2)
*HIDDEN* (ping)
B43: <- (no sender) return from C58
*REWRITTEN*
Couldn't start kwalletd:  QDBusError("org.freedesktop.DBus.Error.ServiceUnknown", "org.freedesktop.DBus.Error.ServiceUnknown")
C59: -> org.freedesktop.DBus call org.freedesktop.DBus.NameHasOwner at /org/freedesktop/DBus
Filtering message due to arg0 org.kde.kwalletd6, policy: 0 (required 1)
B44: <- (no sender) return from C59
*REWRITTEN*
C60: -> org.freedesktop.DBus call org.freedesktop.DBus.AddMatch at /org/freedesktop/DBus
C61: -> org.freedesktop.DBus call org.freedesktop.DBus.NameHasOwner at /org/freedesktop/DBus
Filtering message due to arg0 org.kde.kwalletd6, policy: 0 (required 1)
B45: <- (no sender) return from C61
*REWRITTEN*
C62: -> org.freedesktop.DBus call org.freedesktop.DBus.StartServiceByName at /org/freedesktop/DBus
Filtering message due to arg0 org.kde.kwalletd6, policy: 0 (required 2)
*HIDDEN* (ping)
B46: <- (no sender) return from C62
*REWRITTEN*
Couldn't start kwalletd:  QDBusError("org.freedesktop.DBus.Error.ServiceUnknown", "org.freedesktop.DBus.Error.ServiceUnknown")
C63: -> org.freedesktop.DBus call org.freedesktop.DBus.NameHasOwner at /org/freedesktop/DBus
Filtering message due to arg0 org.kde.kwalletd6, policy: 0 (required 1)
B47: <- (no sender) return from C63
*REWRITTEN*
C64: -> org.freedesktop.DBus call org.freedesktop.DBus.AddMatch at /org/freedesktop/DBus
C65: -> org.freedesktop.DBus call org.freedesktop.DBus.NameHasOwner at /org/freedesktop/DBus
Filtering message due to arg0 org.kde.kwalletd6, policy: 0 (required 1)
B48: <- (no sender) return from C65
*REWRITTEN*
C66: -> org.freedesktop.DBus call org.freedesktop.DBus.StartServiceByName at /org/freedesktop/DBus
Filtering message due to arg0 org.kde.kwalletd6, policy: 0 (required 2)
*HIDDEN* (ping)
B49: <- (no sender) return from C66
*REWRITTEN*
Couldn't start kwalletd:  QDBusError("org.freedesktop.DBus.Error.ServiceUnknown", "org.freedesktop.DBus.Error.ServiceUnknown")
C67: -> org.freedesktop.DBus call org.freedesktop.DBus.NameHasOwner at /org/freedesktop/DBus
Filtering message due to arg0 org.kde.kwalletd6, policy: 0 (required 1)
B50: <- (no sender) return from C67
*REWRITTEN*
C68: -> org.kde.kwalletd6 call org.kde.KWallet.open at /modules/kwalletd6
*HIDDEN* (ping)
B51: <- (no sender) return from C68
*REWRITTEN*
C69: -> org.freedesktop.DBus call org.freedesktop.DBus.RemoveMatch at /org/freedesktop/DBus
C70: -> org.freedesktop.DBus call org.freedesktop.DBus.RemoveMatch at /org/freedesktop/DBus
B52: <- org.freedesktop.DBus return error org.freedesktop.DBus.Error.MatchRuleNotFound from C70
*Unexpected reply*
C71: -> org.freedesktop.DBus call org.freedesktop.DBus.RemoveMatch at /org/freedesktop/DBus
C72: -> org.freedesktop.DBus call org.freedesktop.DBus.RemoveMatch at /org/freedesktop/DBus
C73: -> org.freedesktop.DBus call org.freedesktop.DBus.RemoveMatch at /org/freedesktop/DBus
C74: -> org.freedesktop.DBus call org.freedesktop.DBus.RemoveMatch at /org/freedesktop/DBus
C75: -> org.freedesktop.DBus call org.freedesktop.DBus.RemoveMatch at /org/freedesktop/DBus
C76: -> org.freedesktop.DBus call org.freedesktop.DBus.RemoveMatch at /org/freedesktop/DBus