{"action":"created","issue":{"url":"https://api.github.com/repos/blueman-project/blueman/issues/423","labels_url":"https://api.github.com/repos/blueman-project/blueman/issues/423/labels{/name}","comments_url":"https://api.github.com/repos/blueman-project/blueman/issues/423/comments","events_url":"https://api.github.com/repos/blueman-project/blueman/issues/423/events","html_url":"https://github.com/blueman-project/blueman/issues/423","id":125225544,"number":423,"title":"Blueman inclusion in openSUSE","user":{"login":"posophe","id":1997932,"avatar_url":"https://avatars.githubusercontent.com/u/1997932?v=3","gravatar_id":"","url":"https://api.github.com/users/posophe","html_url":"https://github.com/posophe","followers_url":"https://api.github.com/users/posophe/followers","following_url":"https://api.github.com/users/posophe/following{/other_user}","gists_url":"https://api.github.com/users/posophe/gists{/gist_id}","starred_url":"https://api.github.com/users/posophe/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/posophe/subscriptions","organizations_url":"https://api.github.com/users/posophe/orgs","repos_url":"https://api.github.com/users/posophe/repos","events_url":"https://api.github.com/users/posophe/events{/privacy}","received_events_url":"https://api.github.com/users/posophe/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":4,"created_at":"2016-01-06T17:39:30Z","updated_at":"2016-01-07T10:44:38Z","closed_at":null,"body":"Hi !\r\n\r\nI'm working on openSUSE packaging actually, to provide it as default bluetooth manager in Mate. The Security just gave me a negative answer (I quote) :\r\n\"Still the same issues with blueman. Every DBUS function running as root,\r\nallowed to be called by anyone without any authorization.\r\n\r\nCVE-2015-8612 as an recent example.\r\n\r\nCant be whitelisted.\"\r\n\r\nCan anyone tell me if it is possibly fixable on upstream ?\r\n\r\nRegards.\r\nBenjamin"},"comment":{"url":"https://api.github.com/repos/blueman-project/blueman/issues/comments/169626315","html_url":"https://github.com/blueman-project/blueman/issues/423#issuecomment-169626315","issue_url":"https://api.github.com/repos/blueman-project/blueman/issues/423","id":169626315,"user":{"login":"infirit","id":3465730,"avatar_url":"https://avatars.githubusercontent.com/u/3465730?v=3","gravatar_id":"","url":"https://api.github.com/users/infirit","html_url":"https://github.com/infirit","followers_url":"https://api.github.com/users/infirit/followers","following_url":"https://api.github.com/users/infirit/following{/other_user}","gists_url":"https://api.github.com/users/infirit/gists{/gist_id}","starred_url":"https://api.github.com/users/infirit/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/infirit/subscriptions","organizations_url":"https://api.github.com/users/infirit/orgs","repos_url":"https://api.github.com/users/infirit/repos","events_url":"https://api.github.com/users/infirit/events{/privacy}","received_events_url":"https://api.github.com/users/infirit/received_events","type":"User","site_admin":false},"created_at":"2016-01-07T10:44:38Z","updated_at":"2016-01-07T10:44:38Z","body":"Sorry, I meant why do we not use polkit as the normal user to do the privileged actions. Or put it another way, why do we not run mechanism directly as the user (not as root) and if needed it will prompt for credentials."}}