Your message dated Mon, 27 Apr 2015 09:42:03 +0000 with message-id <[email protected]> and subject line Bug#780004: fixed in udisks2 2.1.5-3 has caused the Debian Bug report #780004, regarding udisks2: rules for devices on this seat / other seat interact poorly with dbus-user-session to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact [email protected] immediately.) -- 780004: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=780004 Debian Bug Tracking System Contact [email protected] with problems
--- Begin Message ---Package: udisks2 Version: 2.1.3-5 Severity: normal Tags: upstream udisks2's logic for whether I may do something to a device looks like this pseudocode: let requesting_seat = requesting process -> session -> seat let device_seat = device -> seat if (device_seat && requesting_seat && requesting_seat == device_seat) { use a polkit rule like org.freedesktop.udisks2.filesystem-mount (by default, requires either an active session or admin authentication) } else { use a polkit rule like org.freedesktop.udisks2.filesystem-mount-other-seat (by default, requires admin authentication regardless) } This works poorly with the "user session" model used by dbus-user-session, which the systemd/kdbus developers intend to be the only model supported with kdbus. In that model, shared per-user services like gvfs and gnome-terminal exist outside any particular login session, and are not associated with a seat; the practical result is that while using dbus-user-session, I always need to enter my password to mount a disk, because gvfs' udisks backend is a child process of my `systemd --user` rather than part of my GUI session. One possibility for fixing this would be to change the pseudocode to this: let device_seat = device->seat if (device_seat) { for session in requesting uid's active sessions { if session->seat && session->seat == device_seat { use a polkit rule like org.freedesktop.udisks2.filesystem-mount return } } } use a polkit rule like org.freedesktop.udisks2.filesystem-mount-other-seat with the justification that different sessions with the same uid do not really represent a security boundary. There is a bit of a subtlety here with active vs. inactive sessions: if you have "fast user switching" on seat0, and this situation: seat0 \- active (tty7): alice \- inactive (tty8): bob seat1 or ssh session \- active: bob then bob should not be able to manipulate seat0 devices (without admin authentication) until alice finishes using seat0 and returns to bob's (locked) session. Thoughts? S
--- End Message ---
--- Begin Message ---Source: udisks2 Source-Version: 2.1.5-3 We believe that the bug you reported is fixed in the latest version of udisks2, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to [email protected], and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Martin Pitt <[email protected]> (supplier of updated udisks2 package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing [email protected]) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Mon, 27 Apr 2015 10:03:57 +0200 Source: udisks2 Binary: udisks2 udisks2-doc libudisks2-0 libudisks2-dev gir1.2-udisks-2.0 Architecture: source amd64 all Version: 2.1.5-3 Distribution: unstable Urgency: medium Maintainer: Utopia Maintenance Team <[email protected]> Changed-By: Martin Pitt <[email protected]> Description: gir1.2-udisks-2.0 - GObject based library to access udisks2 - introspection data libudisks2-0 - GObject based library to access udisks2 libudisks2-dev - GObject based library to access udisks2 - development files udisks2 - D-Bus service to access and manipulate storage devices udisks2-doc - udisks2 documentation Closes: 780004 Changes: udisks2 (2.1.5-3) unstable; urgency=medium . * debian/control: Drop obsolete XS-Testsuite: field, dpkg adds this automatically now. . udisks2 (2.1.5-2) experimental; urgency=medium . * Team upload. * Treat devices as "on the same seat" if the requesting uid owns the active login session on the device's seat. This means that shared services run by the user's `systemd --user`, such as the dbus-daemon run by dbus-user-session and the D-Bus or systemd services that it starts, can manipulate the user's devices even though those are not associated with any particular login session or seat. (Closes: #780004) . udisks2 (2.1.5-1) experimental; urgency=medium . [ Martin Pitt ] * New upstream release: - Drop default [df]mask for VFAT and NTFS (LP: #453605) * Drop our patches, included upstream. * debian/rules: Configure with --enable-fhs-media, to continue mounting in /media instead of /run/media. (Previously done by a Debian patch) * debian/tests/upstream-system: Drop ntfs-3g test dependency; due to a bug in the BLKRRPART ioctl this causes eternal udev and thus mount hangs. (see LP #1398859) * udisks2-inhibit: Don't use mount --move, as it doesn't work under shared mounts (i. e. under systemd). (LP: #1410851) . [ Michael Biebl ] * Update Vcs-Browser URL to use cgit and https. . udisks2 (2.1.4-1) experimental; urgency=medium . * New upstream bug fix release. - Avoids waking up disks from standby through SMART updates. (LP: #1281588) - Drop 00git_test_fixes.patch and libsystemd.patch, included upstream. * Bump Standards-Version to 3.9.6 (no changes necessary). * Add missing python3-dbus autopkgtest dependency. * integration-test: Skip double mount check for NTFS. Patch cherry-picked from upstream git. Checksums-Sha1: 53a2f204039746c46183e2f30ee498f614fae660 2589 udisks2_2.1.5-3.dsc cb4417daad938e10c7d5d5f29504bee026d76895 15548 udisks2_2.1.5-3.debian.tar.xz 36dfd8c63ebe969be54e2a32b272bb38814f3732 281366 udisks2_2.1.5-3_amd64.deb d037fba902427f0bea3bb8a9d5f7b68862af0249 188128 udisks2-doc_2.1.5-3_all.deb 097b49e3ffbbcf2a199bc885dfeb7becb30717c7 97866 libudisks2-0_2.1.5-3_amd64.deb ba4583318c0abc3cf525b821e28961ddb8abc43c 157720 libudisks2-dev_2.1.5-3_amd64.deb 4b993cf368a83410240a56d7fb67fb0795a4445f 21650 gir1.2-udisks-2.0_2.1.5-3_amd64.deb Checksums-Sha256: 7b7409c3059ed47938028ce0a4acd364e1e0d0fabd264b0a63711f7c51db7036 2589 udisks2_2.1.5-3.dsc d68819cbf06fd5f09365f8142eaa4c53038ceb140302c9f36cb9a4705dab19bf 15548 udisks2_2.1.5-3.debian.tar.xz 8afd6e7776417800e6f08cc96fb5b20adedb806db79a6263f0cc52213062b4fb 281366 udisks2_2.1.5-3_amd64.deb 0755170a438e91cd4a51b1cc298ab76bd372005c97d24f62e49267f3d604dc63 188128 udisks2-doc_2.1.5-3_all.deb 1dccd0a89aa4d252e6e8d2b396299559c5a86e40cf1b33ec7bde774f95991239 97866 libudisks2-0_2.1.5-3_amd64.deb 02869b446c09f00049b14eaef69dcfcd5a011ba019de93b213273e4a7cc72526 157720 libudisks2-dev_2.1.5-3_amd64.deb 365294b36788f16a30c8a283b8e22a839069b02ae433b1e7b00ddd425d190e0e 21650 gir1.2-udisks-2.0_2.1.5-3_amd64.deb Files: 284272cd1a35dc7dd60a336e25bfa0fb 2589 admin optional udisks2_2.1.5-3.dsc 9d2dfcb257a2733c1bc6af4b10cfdb49 15548 admin optional udisks2_2.1.5-3.debian.tar.xz e4c3debfb08ec6abe814db08311f47e4 281366 admin optional udisks2_2.1.5-3_amd64.deb f7546e708a75cbd2af0b63c07b3e24ee 188128 doc optional udisks2-doc_2.1.5-3_all.deb 1102a2ee45b03f028662697f65b307ab 97866 libs optional libudisks2-0_2.1.5-3_amd64.deb 762fbe5278a64f82273569e1f285d452 157720 libdevel optional libudisks2-dev_2.1.5-3_amd64.deb 84805d6389fb2a52a5290ed746b58126 21650 introspection optional gir1.2-udisks-2.0_2.1.5-3_amd64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCAAGBQJVPe4nAAoJENFO8V2v4RNHgjIP/1CyeWDuwHuFg3kd6npwH77l 8oXjK0uw0eU4PkQXT8UbFouK/bgeEGPNdqWDdH0Z/h1IaA7NUgBkd9t2WsQ8BMhk p/bkh6s8g6rfzdoNARIen5dpcVVY7SHsG7AQrTVoWlIbkq/4/pn7HKwHWQwmbk+I R8RHa7oGG8xPu2Fr7jhCDYWF0Hx/PGAOnhC2OESLTbzfe3InkN67AkYsASAvPdds ZA/Pyw0GqjuKk2UGrzTy/iiqq3RxwxZL6TNknl65ZLWEZtewTYqHAnqRY2+PL2WR bW9sFDl2slpRBaXMmqjvVY5i+KFbYJfY9t8KtI5SXDKOxL++vNmXE+tqLJuSW6PG HZSiHI1QLT80SKeHrrCq4g0pDp6/0b3nVFL3AMKWCmUC+csqls3Qejegm0S+Hhfg wF/yQuaEfSHVOobkYPfsTeWTuqDMGXhXzBO3t2wB3INv7e0IEuXqcXCUEzNQd7Ta M6wy7dRvDtuxjp5ZGHJdCWDZQFABD8M8O7XbkNi7kSTMzdwZ2aBLqEpQKVbZnrmh Kluv8nBuyUKPLT8IpOlJOYihQl6C2hlhgZTy9yuHAmpDy8uVYBJv6/vgN6DixAbS Jsme6DBZGOj/1z7yatOm2IUyvob7n/Fs/Qy4iismp6e5QRWgARr89VuQOGH5xlhX gosn3QCehALqJ3jgV7HY =cUwq -----END PGP SIGNATURE-----
--- End Message ---
_______________________________________________ Pkg-utopia-maintainers mailing list [email protected] http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-utopia-maintainers
