at_console="true" (or similar) in a DBus policy file uses pam_console to
try to limit sending of messages to a DBus service.

This is an old relic from before polkit. Many distros that don't
implement it, or implement it completely differently. Last time I heard,
kdbus won't support it.

NetworkManager has removed at_console from their policy [0] and I've
filed some bugs against firewalld [1], setroubleshoot [2], abrt [3] to
remove it from the relevant DBus policy files.

Is there a good way to grep across the whole of Fedora to see which
other packages have at_console in their /etc/dbus-1/*/* policy?

Cheers,

Stef

[0] https://bugzilla.redhat.com/show_bug.cgi?id=979416

[1] https://bugzilla.redhat.com/show_bug.cgi?id=1094745

[2] https://bugzilla.redhat.com/show_bug.cgi?id=1094752

[3] https://github.com/abrt/abrt/pull/816
-- 
devel mailing list
devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct

Reply via email to