--- Begin Message ---
- To: Debian Bug Tracking System <submit@bugs.debian.org>
- Subject: Logged every file name in $HOME to syslog
- From: Anthony DeRobertis <anthony@derobert.net>
- Date: Tue, 17 Nov 2015 13:11:43 -0500
- Message-id: <144778390385.24566.706515154384421690.reportbug@Zia.metrics.net>
Package: kded5
Version: 5.15.0-1
Severity: important
File: /usr/bin/kded5
Apparently kded5 got restarted automatically (after killing it, see bug
805320). And after that, it decided to send its log output to syslog.
Quite a bit of output — almost 300,000 lines. All of it at (according to
journalctl) at priority 4 (warning).
That included, at least, logging lines like the following for every file
in my home directory:
Nov 16 18:22:50 Zia org.kde.kded5[4940]: log_kioremote: RemoteDirNotify::toRemoteURL( QUrl("file:///home/anthony/Audio/Monsters_data/b00013.au") )
Nov 16 18:22:50 Zia org.kde.kded5[4940]: log_kioremote: result => KUrl()
Depending on setup, that's already a privacy violation. Even if not,
receiving a 50MB email from logcheck was *not* welcome.
It then went further, and logged all *activity*. E.g., here is after two
emails were delivered:
Nov 17 06:03:25 Zia org.kde.kded5[4940]: ()
Nov 17 06:03:25 Zia org.kde.kded5[4940]: ("/home/anthony/Maildir/new/1447758191.M94023P12683V000000000000FB03I0000000000085B60_0.Zia,S=2252", "/home/anthony/Maildir/new/1447758191.M922165P12691V000000000000FB03I0000000000085B67_0.Zia,S=5625")
Nov 17 06:03:25 Zia org.kde.kded5[4940]: ()
Nov 17 06:03:25 Zia org.kde.kded5[4940]: log_kioremote: RemoteDirNotify::FilesChanged
Nov 17 06:03:25 Zia org.kde.kded5[4940]: log_kioremote: RemoteDirNotify::toRemoteURL( QUrl("file:///home/anthony/Maildir/new/1447758191.M94023P12683V000000000000FB03I0000000000085B60_0.Zia,S=2252") )
Nov 17 06:03:25 Zia org.kde.kded5[4940]: log_kioremote: result => KUrl()
Nov 17 06:03:25 Zia org.kde.kded5[4940]: log_kioremote: RemoteDirNotify::toRemoteURL( QUrl("file:///home/anthony/Maildir/new/1447758191.M922165P12691V000000000000FB03I0000000000085B67_0.Zia,S=5625") )
Nov 17 06:03:25 Zia org.kde.kded5[4940]: log_kioremote: result => KUrl()
Again, a privacy violation.
It also seems to log every hotkey executed. E.g., I used my xterm
hotkey, and this hit syslog:
Nov 17 13:01:55 Zia org.kde.kded5[4940]: org.kde.kurifilter-shorturi: "xterm"
Nov 17 13:01:55 Zia org.kde.kded5[4940]: org.kde.kurifilter-shorturi: path = "xterm" isLocalFullPath= false exists= false url= QUrl("xterm")
Nov 17 13:01:55 Zia org.kde.kded5[4940]: org.kde.kurifilter-ikws: "xterm" : QUrl("file:xterm") , type = 3
Nov 17 13:01:55 Zia org.kde.kded5[4940]: org.kde.kurifilter-ikws: "xterm"
It appears kded5 is built with a *lot* of debug output turned on—that
really ought not happen without e.g., some --debug option. And remember,
it's currently all at warning priority, not debug.
-- System Information:
Debian Release: stretch/sid
APT prefers testing
APT policy: (500, 'testing'), (200, 'unstable'), (150, 'stable'), (100, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 4.3.0-trunk-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
Versions of packages kded5 depends on:
ii libc6 2.19-22
ii libkf5configcore5 5.15.0-1
ii libkf5coreaddons5 5.15.0-1
ii libkf5crash5 5.15.0-1
ii libkf5dbusaddons5 5.15.0-1
ii libkf5service-bin 5.15.0+-1
ii libkf5service5 5.15.0+-1
ii libqt5core5a 5.5.1+dfsg-6
ii libqt5dbus5 5.5.1+dfsg-6
ii libqt5gui5 5.5.1+dfsg-6
ii libqt5widgets5 5.5.1+dfsg-6
ii libstdc++6 5.2.1-23
kded5 recommends no packages.
kded5 suggests no packages.
-- no debconf information
--- End Message ---
--- Begin Message ---
- To: 805399-close@bugs.debian.org
- Subject: Bug#805399: fixed in qtbase-opensource-src 5.9.0~beta+dfsg-1
- From: Dmitry Shachnev <mitya57@debian.org>
- Date: Sun, 09 Apr 2017 18:19:24 +0000
- Message-id: <E1cxHQq-0005nk-Hk@fasolo.debian.org>
Source: qtbase-opensource-src
Source-Version: 5.9.0~beta+dfsg-1
We believe that the bug you reported is fixed in the latest version of
qtbase-opensource-src, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 805399@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Dmitry Shachnev <mitya57@debian.org> (supplier of updated qtbase-opensource-src package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Sun, 09 Apr 2017 18:45:39 +0300
Source: qtbase-opensource-src
Binary: libqt5core5a libqt5gui5 qt5-gtk-platformtheme libqt5network5 libqt5opengl5 libqt5sql5 libqt5sql5-mysql libqt5sql5-odbc libqt5sql5-psql libqt5sql5-sqlite libqt5sql5-tds libqt5sql5-ibase libqt5xml5 libqt5dbus5 libqt5test5 libqt5concurrent5 libqt5widgets5 libqt5printsupport5 qtbase5-dev qtbase5-private-dev libqt5opengl5-dev qtbase5-dev-tools qt5-qmake qtbase5-examples qt5-default qtbase5-doc qtbase5-doc-html
Architecture: source
Version: 5.9.0~beta+dfsg-1
Distribution: experimental
Urgency: medium
Maintainer: Debian Qt/KDE Maintainers <debian-qt-kde@lists.debian.org>
Changed-By: Dmitry Shachnev <mitya57@debian.org>
Description:
libqt5concurrent5 - Qt 5 concurrent module
libqt5core5a - Qt 5 core module
libqt5dbus5 - Qt 5 D-Bus module
libqt5gui5 - Qt 5 GUI module
libqt5network5 - Qt 5 network module
libqt5opengl5 - Qt 5 OpenGL module
libqt5opengl5-dev - Qt 5 OpenGL library development files
libqt5printsupport5 - Qt 5 print support module
libqt5sql5 - Qt 5 SQL module
libqt5sql5-ibase - Qt 5 Firebird database driver
libqt5sql5-mysql - Qt 5 MySQL database driver
libqt5sql5-odbc - Qt 5 ODBC database driver
libqt5sql5-psql - Qt 5 PostgreSQL database driver
libqt5sql5-sqlite - Qt 5 SQLite 3 database driver
libqt5sql5-tds - Qt 5 FreeTDS database driver
libqt5test5 - Qt 5 test module
libqt5widgets5 - Qt 5 widgets module
libqt5xml5 - Qt 5 XML module
qt5-default - Qt 5 development defaults package
qt5-gtk-platformtheme - Qt 5 GTK+ 3 platform theme
qt5-qmake - Qt 5 qmake Makefile generator tool
qtbase5-dev - Qt 5 base development files
qtbase5-dev-tools - Qt 5 base development programs
qtbase5-doc - Qt 5 base documentation
qtbase5-doc-html - Qt 5 base HTML documentation
qtbase5-examples - Qt 5 base examples
qtbase5-private-dev - Qt 5 base private development files
Closes: 805399
Changes:
qtbase-opensource-src (5.9.0~beta+dfsg-1) experimental; urgency=medium
.
* Update debian/watch to track experimental releases.
* New upstream beta release.
* Drop all patches which were backported from upstream.
* Refresh other patches.
* Bump dpkg-dev build-dependency to 1.17.14, for build profiles.
* Disable debug logging in /etc/xdg/QtProject/qtlogging.ini (closes:
#805399).
* Update debian/copyright using debian/scripts/update-copyright.
* Update install files for the new release.
* Update symbols files from amd64 and i386 build logs.
* Bump qtbase-abi version to 5-9-0.
Checksums-Sha1:
66596ce88da7973a77cb06e171d5cf0b58b7a177 5068 qtbase-opensource-src_5.9.0~beta+dfsg-1.dsc
a09fb4e220e97689f87226543002fab2887d4df6 44608040 qtbase-opensource-src_5.9.0~beta+dfsg.orig.tar.xz
344ae06ab15aa9ca95471faca02ddd16b354c4be 214380 qtbase-opensource-src_5.9.0~beta+dfsg-1.debian.tar.xz
Checksums-Sha256:
cd12f8e8654c5443c6effa1fa5c341d9d306c1ba1b4260cacd8f1df371917667 5068 qtbase-opensource-src_5.9.0~beta+dfsg-1.dsc
908d6aedddef418f0844f30f2993c1b052ead89a9873bacbfde65884fdd628eb 44608040 qtbase-opensource-src_5.9.0~beta+dfsg.orig.tar.xz
3df2e716916ef3a8f07de4d17ca2fc77b51bb9adc9f2d1d70490ab712bb5497b 214380 qtbase-opensource-src_5.9.0~beta+dfsg-1.debian.tar.xz
Files:
daf5b97573b6cdaa333d4edad3df8eb3 5068 libs optional qtbase-opensource-src_5.9.0~beta+dfsg-1.dsc
2b0db55a8b11e542f6d004620479c7ec 44608040 libs optional qtbase-opensource-src_5.9.0~beta+dfsg.orig.tar.xz
79fdab2ec8ca2e47b64994c997ebecae 214380 libs optional qtbase-opensource-src_5.9.0~beta+dfsg-1.debian.tar.xz
-----BEGIN PGP SIGNATURE-----
iQIzBAEBCAAdFiEEbEPcK+5mZmLK5jNU1v5xA2P4XdMFAljqdnQACgkQ1v5xA2P4
XdPkDg//V/dfthM/x271Iq0Q8CLrl8L6SyAOfWZBavV4UpbXR3WREa2Jlr96JK81
b0VjgsK6JDH0rL5wTeRe8PNPwlzwz8fp8LhG9CXgM0Hg33pOnPtLLZcbfJOhDEBZ
hHj/WG4huDZ2E0mVyxDePTWYxUbV4KAa3G2EYRe/6ckY8PTiawbxYnF5lgsrfMXH
TgljVoyY/tByiqCx/w+wbYyi02PTxEpxwSNT0sRiLoSXA+62+D+pjla8AxICUYzi
cBo4fVOqB0gijqzBNMKNCNCnT7o/MSzCV5aWHIpqVObVRqfSvPSwbcD79aXHlp7q
dCR1y8ro2PWp1Nt7JP1eluX4u+7TTeAM1QA10AZy64q6SGNV+iJaL0m4h259w4bG
PdW3HINeBTrJuQbJK7RuPleJogQaM6sKnp7F8Uz9IMNpsza7Twg0/SHwzYI1uicp
nKlyfP13z9PTNBFXMLRI03fPeAoUimP0TjEEk6n/Zc4DTaxwx4AQobV++cmf7jpa
0afjFVmMETOTvitlyZytC/GSGlMgBoAr5aBdq70vcUb76sG1kEy2a8imkrwRCFlX
l3dkmvi3u258zmkwlX3WPs8kWq+HI1FDoltsZcBvL/P6xbEU/7WtV+OQFM5+d3BB
6W/SIXwqHtmkXkUF9y26b+I5F09/KLBsKuFLHGotXxJFB/jedcU=
=4ig6
-----END PGP SIGNATURE-----
--- End Message ---