Your message dated Mon, 27 Apr 2015 09:42:03 +0000
with message-id <[email protected]>
and subject line Bug#780004: fixed in udisks2 2.1.5-3
has caused the Debian Bug report #780004,
regarding udisks2: rules for devices on this seat / other seat interact poorly 
with dbus-user-session
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
780004: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=780004
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: udisks2
Version: 2.1.3-5
Severity: normal
Tags: upstream

udisks2's logic for whether I may do something to a device looks like this
pseudocode:

    let requesting_seat = requesting process -> session -> seat
    let device_seat = device -> seat
    if (device_seat && requesting_seat && requesting_seat == device_seat) {
        use a polkit rule like org.freedesktop.udisks2.filesystem-mount
            (by default, requires either an active session or admin
            authentication)
    } else {
        use a polkit rule like
        org.freedesktop.udisks2.filesystem-mount-other-seat
            (by default, requires admin authentication regardless)
    }

This works poorly with the "user session" model used by dbus-user-session,
which the systemd/kdbus developers intend to be the only model supported
with kdbus. In that model, shared per-user services like gvfs and
gnome-terminal exist outside any particular login session, and are not
associated with a seat; the practical result is that while using
dbus-user-session, I always need to enter my password to mount a disk,
because gvfs' udisks backend is a child process of my `systemd --user`
rather than part of my GUI session.

One possibility for fixing this would be to change the pseudocode to this:

    let device_seat = device->seat

    if (device_seat) {
        for session in requesting uid's active sessions {
            if session->seat && session->seat == device_seat {
                use a polkit rule like org.freedesktop.udisks2.filesystem-mount
                return
            }
        }
    }

    use a polkit rule like org.freedesktop.udisks2.filesystem-mount-other-seat

with the justification that different sessions with the same uid do not
really represent a security boundary.

There is a bit of a subtlety here with active vs. inactive sessions:
if you have "fast user switching" on seat0, and this situation:

    seat0
    \- active (tty7): alice
    \- inactive (tty8): bob
    seat1 or ssh session
    \- active: bob

then bob should not be able to manipulate seat0 devices (without admin
authentication) until alice finishes using seat0 and returns to bob's
(locked) session.

Thoughts?

    S

--- End Message ---
--- Begin Message ---
Source: udisks2
Source-Version: 2.1.5-3

We believe that the bug you reported is fixed in the latest version of
udisks2, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Martin Pitt <[email protected]> (supplier of updated udisks2 package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Mon, 27 Apr 2015 10:03:57 +0200
Source: udisks2
Binary: udisks2 udisks2-doc libudisks2-0 libudisks2-dev gir1.2-udisks-2.0
Architecture: source amd64 all
Version: 2.1.5-3
Distribution: unstable
Urgency: medium
Maintainer: Utopia Maintenance Team 
<[email protected]>
Changed-By: Martin Pitt <[email protected]>
Description:
 gir1.2-udisks-2.0 - GObject based library to access udisks2 - introspection 
data
 libudisks2-0 - GObject based library to access udisks2
 libudisks2-dev - GObject based library to access udisks2 - development files
 udisks2    - D-Bus service to access and manipulate storage devices
 udisks2-doc - udisks2 documentation
Closes: 780004
Changes:
 udisks2 (2.1.5-3) unstable; urgency=medium
 .
   * debian/control: Drop obsolete XS-Testsuite: field, dpkg adds this
     automatically now.
 .
 udisks2 (2.1.5-2) experimental; urgency=medium
 .
   * Team upload.
   * Treat devices as "on the same seat" if the requesting uid owns
     the active login session on the device's seat. This means that shared
     services run by the user's `systemd --user`, such as the dbus-daemon
     run by dbus-user-session and the D-Bus or systemd services that
     it starts, can manipulate the user's devices even though those are
     not associated with any particular login session or seat.
     (Closes: #780004)
 .
 udisks2 (2.1.5-1) experimental; urgency=medium
 .
   [ Martin Pitt ]
   * New upstream release:
     - Drop default [df]mask for VFAT and NTFS (LP: #453605)
   * Drop our patches, included upstream.
   * debian/rules: Configure with --enable-fhs-media, to continue mounting in
     /media instead of /run/media. (Previously done by a Debian patch)
   * debian/tests/upstream-system: Drop ntfs-3g test dependency; due to a bug
     in the BLKRRPART ioctl this causes eternal udev and thus mount hangs.
     (see LP #1398859)
   * udisks2-inhibit: Don't use mount --move, as it doesn't work under shared
     mounts (i. e. under systemd). (LP: #1410851)
 .
   [ Michael Biebl ]
   * Update Vcs-Browser URL to use cgit and https.
 .
 udisks2 (2.1.4-1) experimental; urgency=medium
 .
   * New upstream bug fix release.
     - Avoids waking up disks from standby through SMART updates.
       (LP: #1281588)
     - Drop 00git_test_fixes.patch and libsystemd.patch, included upstream.
   * Bump Standards-Version to 3.9.6 (no changes necessary).
   * Add missing python3-dbus autopkgtest dependency.
   * integration-test: Skip double mount check for NTFS. Patch cherry-picked
     from upstream git.
Checksums-Sha1:
 53a2f204039746c46183e2f30ee498f614fae660 2589 udisks2_2.1.5-3.dsc
 cb4417daad938e10c7d5d5f29504bee026d76895 15548 udisks2_2.1.5-3.debian.tar.xz
 36dfd8c63ebe969be54e2a32b272bb38814f3732 281366 udisks2_2.1.5-3_amd64.deb
 d037fba902427f0bea3bb8a9d5f7b68862af0249 188128 udisks2-doc_2.1.5-3_all.deb
 097b49e3ffbbcf2a199bc885dfeb7becb30717c7 97866 libudisks2-0_2.1.5-3_amd64.deb
 ba4583318c0abc3cf525b821e28961ddb8abc43c 157720 
libudisks2-dev_2.1.5-3_amd64.deb
 4b993cf368a83410240a56d7fb67fb0795a4445f 21650 
gir1.2-udisks-2.0_2.1.5-3_amd64.deb
Checksums-Sha256:
 7b7409c3059ed47938028ce0a4acd364e1e0d0fabd264b0a63711f7c51db7036 2589 
udisks2_2.1.5-3.dsc
 d68819cbf06fd5f09365f8142eaa4c53038ceb140302c9f36cb9a4705dab19bf 15548 
udisks2_2.1.5-3.debian.tar.xz
 8afd6e7776417800e6f08cc96fb5b20adedb806db79a6263f0cc52213062b4fb 281366 
udisks2_2.1.5-3_amd64.deb
 0755170a438e91cd4a51b1cc298ab76bd372005c97d24f62e49267f3d604dc63 188128 
udisks2-doc_2.1.5-3_all.deb
 1dccd0a89aa4d252e6e8d2b396299559c5a86e40cf1b33ec7bde774f95991239 97866 
libudisks2-0_2.1.5-3_amd64.deb
 02869b446c09f00049b14eaef69dcfcd5a011ba019de93b213273e4a7cc72526 157720 
libudisks2-dev_2.1.5-3_amd64.deb
 365294b36788f16a30c8a283b8e22a839069b02ae433b1e7b00ddd425d190e0e 21650 
gir1.2-udisks-2.0_2.1.5-3_amd64.deb
Files:
 284272cd1a35dc7dd60a336e25bfa0fb 2589 admin optional udisks2_2.1.5-3.dsc
 9d2dfcb257a2733c1bc6af4b10cfdb49 15548 admin optional 
udisks2_2.1.5-3.debian.tar.xz
 e4c3debfb08ec6abe814db08311f47e4 281366 admin optional 
udisks2_2.1.5-3_amd64.deb
 f7546e708a75cbd2af0b63c07b3e24ee 188128 doc optional 
udisks2-doc_2.1.5-3_all.deb
 1102a2ee45b03f028662697f65b307ab 97866 libs optional 
libudisks2-0_2.1.5-3_amd64.deb
 762fbe5278a64f82273569e1f285d452 157720 libdevel optional 
libudisks2-dev_2.1.5-3_amd64.deb
 84805d6389fb2a52a5290ed746b58126 21650 introspection optional 
gir1.2-udisks-2.0_2.1.5-3_amd64.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=cUwq
-----END PGP SIGNATURE-----

--- End Message ---
_______________________________________________
Pkg-utopia-maintainers mailing list
[email protected]
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-utopia-maintainers

Reply via email to