Project

General

Profile

Bug #919

Geoclue/Geoclue2 and their dependancies

g4jc - over 5 years ago - . Updated about 2 months ago.

Status:
fixed
Priority:
privacy issue
Assignee:
-
% Done:

100%


Description

Emulatorman received an e-mail explaining that we should remove geoclue and geoclue2. These packages allow geoip location and therefore violate your-privacy.

Unfortunately, many packages depend on these two files and we will need to make non-prism packages for all of these dependencies.

To assist one can download sources and run:
grep -r "geoclue" .

Using this command I was able to find and remove geoclue2 from webkit2gtk to create webkit2gtk-nonprism. Many other packages will need the same done.
If anyone wishes to help take a package and work on it, please post here so that we do note overlap our work.

Once webkit2gtk has finished compiling I will attempt webkitgtk.


Related issues

Related to Packages - Privacy Issue #994: updated privacy blacklist: cascade effect on 'gnome-settings-daemon'fixed2016-04-25

Actions

History

#1

Updated by g4jc over 5 years ago

Unfortunately webkit2gtk fails to compile, not because of the missing geoclue2, but because of various coding errors. I'm curious how Arch is compiling this since I used their PKGBUILD.

See this dpaste for details on all the C++ errors:
https://dpaste.de/KL3C/raw

Maybe I will be able to patch it if I have the time, but this seems more like an upstream issue.

#2

Updated by Anonymous over 5 years ago

Wouldn't it be easier to modify the source code of geoclue and geoclue2 to make it (pick your favourite):

  • fail and return error
  • return random location
  • return some predefined location

to accomplish the same goal?

Also, please keep in mind that some desktop environments like GNOME let users disable geolocation service.

#3

Updated by g4jc over 5 years ago

niitotantei wrote:

Wouldn't it be easier to modify the source code of geoclue and geoclue2 to make it (pick your favourite):

  • fail and return error
  • return random location
  • return some predefined location

to accomplish the same goal?

Also, please keep in mind that some desktop environments like GNOME let users disable geolocation service.

I like these ideas, unfortunately I have no idea how to program something like this. It would be fun to have it return valid API data with a random or predefined location.

#4

Updated by Amarildo over 5 years ago

Hi,

I'm the guy who did the original report.

I'm currently compiling webkit2gtk without geoclue2. Here's my PKGBUILD: http://paste.opensuse.org/view/raw/73080477
If you want to compile webkitgtk2 without geoclue, add this to the build section (and don't forget to unmark geoclue as a dependency):

--disable-geolocation \

The same principle can be used for webkitgtk.

Would it be possible for you guys, Parabola developers, to compile webkitgtk, webkit2gtk, and webkitgtk2, without putting the "-noprism" in the pkg name? This way many Arch users (such as me) would benefit. Right now these packages take forever to compile :P

Cheers.

#5

Updated by Anonymous over 5 years ago

Amarildo wrote:

Would it be possible for you guys, Parabola developers, to compile webkitgtk, webkit2gtk, and webkitgtk2, without putting the "-noprism" in the pkg name? This way many Arch users (such as me) would benefit. Right now these packages take forever to compile :P

You can use our patch [0] to give that support in your pacman, or use our version [1] instead.

#6

Updated by g4jc over 5 years ago

Disabling geolocation at build time fixes part of the issues, but the build continues to fail for 32bit.

Current PKGBUILD:
https://projects.parabola.nu/abslibre.git/plain/nonprism/webkit2gtk/PKGBUILD?id=9b580b68eca8b2deedf9d3b5d8ee31b6bb5c6220

Current Error:
https://dpaste.de/3M5A/raw

#7

Updated by Anonymous about 5 years ago

  • % Done changed from 0 to 70
  • Assignee changed from g4jc to Anonymous
  • Status changed from open to in progress

g4jc wrote:

Disabling geolocation at build time fixes part of the issues, but the build continues to fail for 32bit.

Current PKGBUILD:
https://projects.parabola.nu/abslibre.git/plain/nonprism/webkit2gtk/PKGBUILD?id=9b580b68eca8b2deedf9d3b5d8ee31b6bb5c6220

Current Error:
https://dpaste.de/3M5A/raw

ok, i'll try fix it then.

#8

Updated by Anonymous about 5 years ago

  • % Done changed from 70 to 100
  • Status changed from in progress to fixed
#9

Updated by Anonymous about 5 years ago

  • Related to Privacy Issue #994: updated privacy blacklist: cascade effect on 'gnome-settings-daemon' added
#10

Updated by oaken-source about 2 months ago

as per https://bugs.archlinux.org/task/61870 it is no longer necessary to remove goeclue references from webkit2gtk:

quote:

It does not link against it and instead queries dbus (and gracefully fails if unavailable).

Since geoclue is blacklisted by your-privacy, the privacy should be satisfied here.

Also available in: Atom PDF