[kde] [Bug 485206] New: Why does KDE come with geoclue and gpsd running by default (which could be used for location tracking)?

bugzilla_noreply at kde.org bugzilla_noreply at kde.org
Sun Apr 7 23:32:43 BST 2024


https://bugs.kde.org/show_bug.cgi?id=485206

            Bug ID: 485206
           Summary: Why does KDE come with geoclue and gpsd running by
                    default (which could be used for location tracking)?
    Classification: I don't know
           Product: kde
           Version: unspecified
          Platform: Debian stable
                OS: Linux
            Status: REPORTED
          Severity: normal
          Priority: NOR
         Component: general
          Assignee: unassigned-bugs at kde.org
          Reporter: myndstream at protonmail.ch
  Target Milestone: ---

SUMMARY
Why are these installed and enabled (autostarting) by default on Debian12?

Maybe it could be useful for a few users if it was installed but not enabled
and not running by default and just an option one could enable in the configs
or which could be enabled by the user through a prompt. If it's running by
default this also means that after upgrades it could be running again. This is
a privacy issue, an undesired bloat service, and a larger attack surface even
if there was a proper and vulnerability-free permissions-management for
GPS-location-access. Why is it enabled and running by default?

If there is a specific package to file this for, please move it there.

STEPS TO REPRODUCE
1. Install Debian with KDE or upgrade it
2. Check if these are installed in the package manager and whether it's running
with other commands

OBSERVED RESULT
It's installed, enabled and autostarting by default

EXPECTED RESULT
If it is installed at all despite that most users don't/can't use it and don't
need it, it shouldn't be enabled and autostarting by default.

SOFTWARE/OS VERSIONS
Linux/KDE Plasma: Debian 12
KDE Plasma Version: 5.27.5
KDE Frameworks Version: 5.103.0
Qt Version: 5.15.8

ADDITIONAL INFORMATION

Disabled/removed it like so but this should be just a toggle button (disabled
by default):

    sudo start-stop-daemon -T --name gpsd
    sudo rm /etc/xdg/autostart/geoclue-demo-agent.desktop
    sudo apt-get remove geoclue-2.0 (if not needed at all)

-- 
You are receiving this mail because:
You are the assignee for the bug.


More information about the Unassigned-bugs mailing list