lizalc / gentoo-lizalc Goto Github PK

The latest 1password ebuild using the .deb package has an empty src_unpack which may prevent signature verification from running.

acct-group/onepassword can not set ACCT_GROUP_ID to -1 as stated overlays should do in the acct-group.eclass otherwise browsers will not be able to communicate with 1Password-BrowserSupport.

This should be able to be reproduced on non-Gentoo systems by creating a onepassword group with an ID < 1000 before installing 1Password (via any installation method). Logs will show the following when browsers attempt to connect:

WARN   2022-06-18T23:00:27.819 tokio-runtime-worker(ThreadId(15)) [1P:op-ipc/src/ipc/unix.rs:385] invalid group attempted to connect, rejecting remote
INFO   2022-06-18T23:00:27.819 tokio-runtime-worker(ThreadId(15)) [1P:native-messaging/op-native-core-integration/src/lib.rs:305] Extension connecting.
ERROR  2022-06-18T23:00:27.819 tokio-runtime-worker(ThreadId(15)) [1P:native-messaging/op-native-core-integration/src/lib.rs:477] Failed to accept new connection.: PipeAuthError(NoCreds)

Possibly this could be due to incorrect permissions set on 1Password-BrowserSupport when using a onepassword group ID < 1000. Otherwise this may be an upstream issue.

Also see: https://wiki.gentoo.org/wiki/UID_GID_Assignment_Table
This table reflects the reserved UID/GIDs for users/groups in 'official' Gentoo. No ebuilds in the main Gentoo repository appear to set a UID/GID above 999 so this may become a problem should this ebuild migrate to the official repository.

Add a systemd user service for autostart.