On Sun, 05 Dec 2004 22:17:23 -0500 Peter Hyman <[EMAIL PROTECTED]> babbled:
(B
(B> On Mon, 2004-12-06 at 12:08 +0900, Carsten Haitzler wrote:
(B> > On Sun, 05 Dec 2004 19:55:13 -0500 Peter Hyman <[EMAIL PROTECTED]>
(B> > babbled:
(B> >
(B> > > On Sun, 2004-12-05 at 19:50 -0500, Corey Donohoe wrote:
(B> > > Maybe I was not clear.
(B> > >
(B> > > When I run entrance -T from an xterm as user, I get NO test screen. I
(B> > > just get the error message that entrance cannot connect to daemon. This
(B> > > occurs whether or not I run entranced.
(B> > >
(B> > > If I sudo entrance -T, then the test screen comes up. That's the big
(B> > > difference. I get no "cannot connect to daemon" error when sudo.
(B> >
(B> > because it tries to connect to the SYSTEM entranced which only allows other
(B> > root processes to connect for security reasons. entrance is special. it is a
(B> > login manager - it runs as root as has security "concerns". it needs to
(B> > authenticate users. if it restricts you like this.. guess what. it's by
(B> > DESIGN. security is invariably NEVER convenient.
(B>
(B> No argument there,re: security, but TEST? Why can't just a user use the
(B> -T option? Or, if not, at least it should be documented that you must be
(B> root or sudo root in order to test the product.
(B
(Bbecause test mode can STILL log a user in and can authenticate (to test
(Bauthentication etc) it isn't just testing for a theme maker - its testing for
(Bpeople working on the entrance CODE too. :)
(B
(B> And. entranced is NOT needed for TEST. So that part of security should
(B> not be a big concern, should it?
(B>
(B> Test is nothing more than a windowed preview of what entrance could look
(B> like. Here's a scenario. Let's say you are designing a new theme. You'd
(B> like to test it while in development. User would have to sudo each time
(B> he wanted to test his/her theme. And, let's say the designing user does
(B> NOT have sudo perms? Then, how can he/she see the work in progress.
(B
(Bno. have you actually entered a username and password? it literally logs the
(Buser in and attempts to run a session as THAT user. if you "xhost +" and log in
(Bas another user in entrance -T an xterm runing AS that user will appear (it
(Bnormally won't work because the user will not be able to gain authority to the
(BDISPLAY) :) it tests much more than "theme" :)
(B
(B> No, I argue that any user should be able to preview. JMHO.
(B>
(B> >
(B> > > * Peter Hyman ([EMAIL PROTECTED]) wrote:
(B> > > > > Running entrance -T returns the following:
(B> > > > >
(B> > > > > bash-2.05b$ entrance -T
(B> > > > > WARNING: not a utf8 locale!
(B> > > > ^^^ is a message from edje I believe, you'll see that in apps other than
(B> > > > entrance
(B> > > > > Debug: ipc_title = /var/entrance_ipc_0
(B> > > > ^^^ is a message from entrance_ipc.c, it's debateable whether or not
(B> > > > this should be spewing out info, but for now you can simply ignore it.
(B> > > > > entrance_ipc_init: connect to daemon failed.
(B> > > > ^^^ is your user failing to connect to the ipc socket that entranced and
(B> > > > entrance use to communicate, it can safely big ignored.
(B> > > >
(B> > > > Notice:
(B> > > > nemesis% entrance -T
(B> > > > WARNING: not a utf8 locale!
(B> > > > Debug: ipc_title = /var/lib/entrance/entrance_ipc_0
(B> > > > entrance_ipc_init: connect to daemon failed.
(B> > > >
(B> > > > nemesis% sudo entrance -T
(B> > > > WARNING: not a utf8 locale!
(B> > > > Debug: ipc_title = /var/lib/entrance/entrance_ipc_0
(B> > > > entrance_ipc_init: connect to daemon failed.
(B> > > >
(B> > > > nemesis% ps auwwx | grep entranced
(B> > > > root 8333 0.0 0.9 56068 4940 ? S Dec04 0:00
(B> > > > /usr/sbin/entranced
(B> > > >
(B> > > > nemesis% entrance -T -z 8333
(B> > > > WARNING: not a utf8 locale!
(B> > > > entrance: main: z optarg = 8333
(B> > > > Debug: ipc_title = /var/lib/entrance/entrance_ipc_8333
(B> > > > entrance_ipc_init: connect to daemon failed.
(B> > > >
(B> > > > nemesis% sudo entrance -T -z 8333
(B> > > > WARNING: not a utf8 locale!
(B> > > > entrance: main: z optarg = 8333
(B> > > > Debug: ipc_title = /var/lib/entrance/entrance_ipc_8333
(B> > > > entrance_ipc_init: Success
(B> > > >
(B> > > > Worth noting is that unless you identify the pid you're not going to
(B> > > > connect to ipc even w/ sudo or as root.
(B> > > > >
(B> > > > > I must run as root or sudo entrance -T.
(B> > > > >
(B> > > > > Does this make sense?
(B> > > > Yes.
(B> > > > > Any user should be able to run this.
(B> > > > Any user can.
(B> > > > > Are there auth checks going on that are not needed?
(B> > > > Sorta, but they don't hurt the app
(B> > > > >
(B> > > > > I think it should allow any user to run it though, not just root or
(B> > > > > through sudo.
(B> > > > As stated above anyone can run entrance -T, you just can't login for the
(B> > > > same reasons you wouldn't want me calling initgroups, setgid, and setuid
(B> > > > to your user on a shell box. :D
(B> > > >
(B> > > > > --
(B> > > > > Peter
(B> > > > >
(B> > > > __
(B> > > > Corey Donohoe
(B> > > > http://www.atmos.org
(B> > > >
(B> > > >
(B> > > > -------------------------------------------------------
(B> > > > SF email is sponsored by - The IT Product Guide
(B> > > > Read honest & candid reviews on hundreds of IT Products from real users.
(B> > > > Discover which products truly live up to the hype. Start reading now.
(B> > > > http://productguide.itmanagersjournal.com/
(B> > > > _______________________________________________
(B> > > > enlightenment-devel mailing list
(B> > > > [EMAIL PROTECTED]
(B> > > > https://lists.sourceforge.net/lists/listinfo/enlightenment-devel
(B> > > --
(B> > > Peter
(B> > >
(B> > >
(B> > >
(B> > > -------------------------------------------------------
(B> > > SF email is sponsored by - The IT Product Guide
(B> > > Read honest & candid reviews on hundreds of IT Products from real users.
(B> > > Discover which products truly live up to the hype. Start reading now.
(B> > > http://productguide.itmanagersjournal.com/
(B> > > _______________________________________________
(B> > > enlightenment-devel mailing list
(B> > > [EMAIL PROTECTED]
(B> > > https://lists.sourceforge.net/lists/listinfo/enlightenment-devel
(B> > >
(B> >
(B> >
(B> --
(B> Peter
(B>
(B
(B
(B--
(B------------- Codito, ergo sum - "I code, therefore I am" --------------
(BThe Rasterman (Carsten Haitzler) [EMAIL PROTECTED]
$BMg9%B?(B [EMAIL PROTECTED]
(BTokyo, Japan ($BEl5~(B $BF|K\(B)
(B
(B
(B-------------------------------------------------------
(BSF email is sponsored by - The IT Product Guide
(BRead honest & candid reviews on hundreds of IT Products from real users.
(BDiscover which products truly live up to the hype. Start reading now.
(Bhttp://productguide.itmanagersjournal.com/
(B_______________________________________________
(Benlightenment-devel mailing list
([EMAIL PROTECTED]
(Bhttps://lists.sourceforge.net/lists/listinfo/enlightenment-devel
