netdev - [mail@...iiwolf.com: Re: ethtool: Incorrect component type in AppStream metainfo causes issues and possible breakages]

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <p3e5khlw5gcofvjnx7whj7y64bwmjy2t7ogu3xnbhlzw7scbl4@3rceiook7pwu>
Date: Fri, 11 Apr 2025 15:47:14 +0200
From: Michal Kubecek <mkubecek@...e.cz>
To: Petter Reinholdtsen <pere@...ian.org>
Cc: netdev@...r.kernel.org, AsciiWolf <mail@...iiwolf.com>, 
	Robert Scheck <fedora@...ert-scheck.de>
Subject: [mail@...iiwolf.com: Re: ethtool: Incorrect component type in
 AppStream metainfo causes issues and possible breakages]

Hello,

I got this report (and one more where you are already in Cc) but I'm not
familiar with the AppStream stuff at all. Can you take a look, please?

Michal

> Date: Fri, 11 Apr 2025 15:16:28 +0200
> From: AsciiWolf <mail@...iiwolf.com>
> To: Michal Kubecek <mkubecek@...e.cz>
> Subject: Re: ethtool: Incorrect component type in AppStream metainfo causes
>  issues and possible breakages
> 
> This probably also needs to be fixed:
> 
> https://freedesktop.org/software/appstream/docs/
> sect-Metadata-ConsoleApplication.html#tag-consoleapp-provides
> 
> Regards,
> Daniel
> 
> pá 11. 4. 2025 v 15:06 odesílatel AsciiWolf <mail@...iiwolf.com> napsal:
> 
>     Hello Michal,
> 
>     ethtool is user uninstallable via GUI (such as GNOME Software or KDE
>     Discover) since 6.14. This is not correct since it is a (in many
>     configurations pre-installed) system tool, not user app, and uninstalling
>     it can also uninstall other critical system packages.
> 
>     The main problem is the "desktop" component type in AppStream metadata:
> 
>     $ head org.kernel.software.network.ethtool.metainfo.xml
>     <?xml version="1.0" encoding="UTF-8"?>
>     <component type="desktop">
>       <id>org.kernel.software.network.ethtool</id>
>       <metadata_license>MIT</metadata_license>
>       <name>ethtool</name>
>       <summary>display or change Ethernet device settings</summary>
>       <description>
>         <p>ethtool can be used to query and change settings such as speed,
>         auto- negotiation and checksum offload on many network devices,
>         especially Ethernet devices.</p>
> 
>     The correct component type should be "console-application".[1]
> 
>     Alternative solution would be removing the whole metainfo file.
> 
>     Please see our (Fedora) downstream ticket for more information:
>     https://bugzilla.redhat.com/show_bug.cgi?id=2359069
> 
>     Regards,
>     Daniel Rusek
> 
>     [1] https://freedesktop.org/software/appstream/docs/
>     sect-Metadata-ConsoleApplication.html or https://freedesktop.org/software/
>     appstream/docs/chap-Metadata.html#sect-Metadata-GenericComponent