Re: Roles and Policy

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]



On Thu, 13.08.09 14:28, David Zeuthen (davidz@xxxxxxxxxx) wrote:

>  2. Second, if you are member of the desktop_admin_r group, then you
>     should be allowed to do a lot of things without being interrupted
>     by authentication dialogs. This part isn't complete, for now, it
>     includes
> 
>       org.gnome.clockapplet.mechanism.* - set timezone and system time
>       org.freedesktop.devicekit.disks.* - all storage related things
>       org.freedesktop.RealtimeKit1.*    - run real-time processes 

rtkit should be accessible for normal desktop users already. Please
move this to desktop_user_r!

I am assuming that this makes only sense if the upstream policy files
in the various packages are more strict by default than what is
shopped in polkit-desktop-policy. Right?

So, for a package that has used console-based auth by default before
(like rtkit), how should their upstream policy files be changed? How
does console-based auth and this new role-based out fit together?

Lennart

-- 
Lennart Poettering                        Red Hat, Inc.
lennart [at] poettering [dot] net
http://0pointer.net/lennart/           GnuPG 0x1A015CC4

-- 
Fedora-desktop-list mailing list
Fedora-desktop-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-desktop-list

[Index of Archives]     [Fedora Users]     [Fedora KDE]     [Fedora Announce]     [Fedora Docs]     [Fedora Config]     [PAM]     [Red Hat Development]     [Red Hat 9]     [Gimp]     [Yosemite News]

  Powered by Linux