On 13.11.2012 10:42, Jon Dowland wrote:
> On Mon, Nov 12, 2012 at 10:27:19PM +0100, Tollef Fog Heen wrote:
>>> Another idea could be to change
>>> /lib/udev/rules.d/70-udev-acl.rules from consolekit.
>>> It currently has
>>>
>>> # systemd replaces udev-acl entirely, skip if active
>>> TEST=="/sys/fs/cgroup/systemd", TAG=="uaccess", GOTO="acl_end"
>>>
>>> Maybe we should add a check there for the libpam-systemd pam module?
>>> This way consolekit should still be in charge of managing the device
>>> ACLs, even when systemd is used.
>>
>> This would wfm, assuming that actually works.
> 
> I'd be happy to test this.

Change the rule in /lib/udev/rules.d/70-udev-acl.rules to
TEST=="/sys/fs/cgroup/systemd", TEST=="/usr/share/pam-configs/systemd",
TAG=="uaccess", GOTO="acl_end"

While testing for /usr/share/pam-configs/systemd does not guarantee that
the pam module is actually enabled, it is the simplest check I can think
of atm. (Don't forget to de-install libpam-systemd again, and possibly
reboot).

Btw, I was wrong: /lib/udev/rules.d/70-udev-acl.rules is currently
shipped by udev, not consolekit, at least not in the version we ship in
wheezy/sid.

The udev rule was moved to consolekit in later releases, which are not
yet packaged for Debian.

Michael


-- 
Why is it that all of the instruments seeking intelligent life in the
universe are pointed away from Earth?

Attachment: signature.asc
Description: OpenPGP digital signature

Reply via email to