[Bug 560178] accountsservice - D-Bus interfaces for querying and manipulating user account information

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug.


https://bugzilla.redhat.com/show_bug.cgi?id=560178

--- Comment #1 from Matthias Clasen <mclasen@xxxxxxxxxx> 2010-01-30 16:09:20 EST ---
It is worth pointing out that the package installs an activated dbus system bus
service that runs as root and provides an api to change your own and other
users account information, as well as gdm login screen configuration. These
functions are protected by PolicyKit privileges:

org.freedesktop.accounts.change-own-user-data - for changing your own user
name, photo, email address and similar 'ancillary information'. Core data like
your home directory, account type and uid is protected by the
user-administration privilege below:

org.freedesktop.accounts.user-administration - for changing any users user
data.

org.freedesktop.accounts.set-login-option - for changing gdm login screen
configuration.

The service stores 'ancillary information' (ie everything that doesn't go into
/etc/passwd) in /var/lib/AccountsService.

-- 
Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.
_______________________________________________
package-review mailing list
package-review@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/package-review

[Index of Archives]     [Fedora Legacy]     [Fedora Desktop]     [Fedora SELinux]     [Yosemite News]     [KDE Users]     [Fedora Tools]