[kde] [Bug 485206] New: Why does KDE come with geoclue and gpsd running by default (which could be used for location tracking)?
bugzilla_noreply at kde.org
bugzilla_noreply at kde.org
Sun Apr 7 23:32:43 BST 2024
https://bugs.kde.org/show_bug.cgi?id=485206
Bug ID: 485206
Summary: Why does KDE come with geoclue and gpsd running by
default (which could be used for location tracking)?
Classification: I don't know
Product: kde
Version: unspecified
Platform: Debian stable
OS: Linux
Status: REPORTED
Severity: normal
Priority: NOR
Component: general
Assignee: unassigned-bugs at kde.org
Reporter: myndstream at protonmail.ch
Target Milestone: ---
SUMMARY
Why are these installed and enabled (autostarting) by default on Debian12?
Maybe it could be useful for a few users if it was installed but not enabled
and not running by default and just an option one could enable in the configs
or which could be enabled by the user through a prompt. If it's running by
default this also means that after upgrades it could be running again. This is
a privacy issue, an undesired bloat service, and a larger attack surface even
if there was a proper and vulnerability-free permissions-management for
GPS-location-access. Why is it enabled and running by default?
If there is a specific package to file this for, please move it there.
STEPS TO REPRODUCE
1. Install Debian with KDE or upgrade it
2. Check if these are installed in the package manager and whether it's running
with other commands
OBSERVED RESULT
It's installed, enabled and autostarting by default
EXPECTED RESULT
If it is installed at all despite that most users don't/can't use it and don't
need it, it shouldn't be enabled and autostarting by default.
SOFTWARE/OS VERSIONS
Linux/KDE Plasma: Debian 12
KDE Plasma Version: 5.27.5
KDE Frameworks Version: 5.103.0
Qt Version: 5.15.8
ADDITIONAL INFORMATION
Disabled/removed it like so but this should be just a toggle button (disabled
by default):
sudo start-stop-daemon -T --name gpsd
sudo rm /etc/xdg/autostart/geoclue-demo-agent.desktop
sudo apt-get remove geoclue-2.0 (if not needed at all)
--
You are receiving this mail because:
You are the assignee for the bug.
More information about the Unassigned-bugs
mailing list