D10141: Restore Persistence=session for the file ioslave kauth helper

[Elvis Angelaccio]

elvisangelaccio created this revision.
elvisangelaccio added reviewers: lbeltrame, dfaure, davidedmundson, fvogt, chinmoyr.
Restricted Application added a project: Frameworks.
Restricted Application added a subscriber: Frameworks.
elvisangelaccio requested review of this revision.

REVISION SUMMARY
  It was reverted by https://phabricator.kde.org/R241:029da62886e0571dfbe54cc4433af8ae8ac3433d + https://phabricator.kde.org/R241:45fbe9d1cd7e3d92ee5b83ea6d2f5e957b3372c3, but this cannot be
  the solution for the security issues discussed in [1].
  
  Without the persistence attribute the whole feature becomes unusable
  (i.e. one password prompt for every file operation).
  
  For the record, the kauth support has been disabled altogether since
  then (see https://phabricator.kde.org/R241:5a1ea84476e63a97313d2201fc3d1f7033ea56af).
  
  This patch restores the previous state to avoid the half-reverted
  situation we are currently in.
  We still keeps the feature disabled for now until we address the security
  issues mentioned in the mailing list.
  
  [1]: https://mail.kde.org/pipermail/kde-frameworks-devel/2018-January/055307.html

REPOSITORY
  R241 KIO

BRANCH
  master

REVISION DETAIL
  https://phabricator.kde.org/D10141

AFFECTED FILES
  src/ioslaves/file/kauth/file.actions

To: elvisangelaccio, lbeltrame, dfaure, davidedmundson, fvogt, chinmoyr
Cc: #frameworks, michaelh
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.kde.org/pipermail/kde-frameworks-devel/attachments/20180127/f69090a6/attachment.html>