PolicyKit + KDE

[Thiago Macieira]

Em Quarta-feira 02 Setembro 2009, às 18:54:53, você escreveu:
> On Wednesday 02 September 2009, John Tapsell wrote:
> > 2009/9/2 Thiago Macieira <thiago at kde.org>:
> > > Em Quarta-feira 2. Setembro 2009, às 02.09.15, Matthew Woehlke escreveu:
> > >> That said, I guess I don't understand how PK works that this is even
> > >> needed. If PK says "user may edit <certain things>", why does it
> > >> matter if the user does that via package from packaged KDE, /bin/vi,
> > >> or some cobbled-together C program they just compiled? Since you are
> > >> talking about installing policy files I must guess that this is not
> > >> how PK works?
> > >
> > > Please note that the problem isn't PolicyKit.
> >
> > But it is about PolicyKit - KSysGuard uses policykit to kill processes
> > etc, and so has to install those files.
> >
> > The trouble is that policy kit, by design, does not let a general
> > program request root privileges.  Instead root has to _first_
> > authorize that program to even request root privileges, by installing
> > certain files into system directories.
> 
> Would there be a principal problem if e.g. dbus could read multiple config
> files and combine the information from them ?

D-Bus does that.

> Then it could be started like
> dbus-daemon --config-file=/etc/dbus-1/system.conf
>  --config-file=/opt/kde4/etc/dbus-1/kde-system.conf

Unfortunately, the D-Bus daemon has already been started by the time startkde 
runs. So it's too late.

> etc. It should be also possible to list the config file in an env. var.
> I don't see a problem there, since there is no way a user can influence the
> way how dbus-daemon is started, neither via command line arguments nor via
>  an env. var.

Correct, but unfortunately neither can KDE.

-- 
Thiago Macieira - thiago (AT) macieira.info - thiago (AT) kde.org
  Senior Product Manager - Nokia, Qt Development Frameworks
      PGP/GPG: 0x6EF45358; fingerprint:
      E067 918B B660 DBD1 105C  966C 33F5 F005 6EF4 5358

Qt Developer Days 2009 | Registration Now Open!
Munich, Germany: Oct 12 - 14     San Francisco, California: Nov 2 - 4
      http://qt.nokia.com/qtdevdays2009
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part.
URL: <http://mail.kde.org/pipermail/kde-core-devel/attachments/20090902/98c4ca99/attachment.sig>