Re: Don't use at_console in DBus policy files

2014-05-07 Thread Stef Walter
On 06.05.2014 15:36, Richard W.M. Jones wrote: > On Fedora 20, I'm seeing this list: > > /etc/dbus-1/system.d/bluetooth.conf: bluez-0:5.12-1.fc20.x86_64 > /etc/dbus-1/system.d/com.redhat.NewPrinterNotification.conf: > system-config-printer-libs-0:1.4.3-2.fc20.noarch > /etc/dbus-1/system.d/com.red

Re: Don't use at_console in DBus policy files

2014-05-06 Thread Dan Williams
On Tue, 2014-05-06 at 14:36 +0100, Richard W.M. Jones wrote: > On Fedora 20, I'm seeing this list: > > /etc/dbus-1/system.d/nm-ifcfg-rh.conf: > NetworkManager-1:0.9.9.0-38.git20131003.fc20.x86_64 > /etc/dbus-1/system.d/nm-user-settings.conf: sugar-0:0.100.2-1.fc20.noarch > /etc/dbus-1/system.d/or

Re: Don't use at_console in DBus policy files

2014-05-06 Thread Richard W.M. Jones
On Fedora 20, I'm seeing this list: /etc/dbus-1/system.d/bluetooth.conf: bluez-0:5.12-1.fc20.x86_64 /etc/dbus-1/system.d/com.redhat.NewPrinterNotification.conf: system-config-printer-libs-0:1.4.3-2.fc20.noarch /etc/dbus-1/system.d/com.redhat.PrinterDriversInstaller.conf: system-config-printer-li

Re: Don't use at_console in DBus policy files

2014-05-06 Thread Richard W.M. Jones
On Tue, May 06, 2014 at 02:29:38PM +0200, Stef Walter wrote: > Is there a good way to grep across the whole of Fedora to see which > other packages have at_console in their /etc/dbus-1/*/* policy? Here is one way to do this: repoquery --whatprovides '/etc/dbus-1/*/*' The above command will lis

Don't use at_console in DBus policy files

2014-05-06 Thread Stef Walter
at_console="true" (or similar) in a DBus policy file uses pam_console to try to limit sending of messages to a DBus service. This is an old relic from before polkit. Many distros that don't implement it, or implement it completely differently. Last time I heard, kdbus won't support it. NetworkMan