On Sun, Nov 20, 2011 at 09:05:37PM -0200, Gustavo Sverzut Barbieri wrote:
On Sun, Nov 20, 2011 at 7:50 AM, Tomas Cech <[email protected]> wrote:Hi,On Sat, Nov 19, 2011 at 10:31:21PM -0200, Gustavo Sverzut Barbieri wrote:On Sat, Nov 19, 2011 at 10:15 PM, Tomas Cech <[email protected]> wrote:Hi, as I'm trying to get E17 into openSUSE, I'm trying to tune sysactions.conf. I'm trying to get rid of suid bit for /usr/lib64/enlightenment/utils/enlightenment_sys All my actions use DBUS messages so suid bit is useless (ok, I haven't done mount/unmount yet). When I remove suid bit from this binary, suspend fails and in log I have: ERROR: UNABLE TO ASSUME ROOT PRIVILEGES Running /usr/lib64/enlightenment/utils/enlightenment_sys suspend works fine, so my question is - is really needed check for root privileges there? Thanks. Best regards, Tomas Cech Sleep_Walker ------------------------------------------------------------------------------ All the data continuously generated in your IT infrastructure contains a definitive record of customers, application performance, security threats, fraudulent activity, and more. Splunk takes this data and makes sense of it. IT sense. And common sense.yes we do. But there is a better way we could do, patches accepted (no time to do it myself): - have hibernate/suspend/... using upower - have other actions using proper daemons using dbus + polkit (udisks, timedated...) - whatever else use polkit's features such as pkexec.That's probably what I want to have there: action: halt dbus-send --system --dest=org.freedesktop.ConsoleKit /org/freedesktop/ConsoleKit/Manager org.freedesktop.ConsoleKit.Manager.Stop action: reboot dbus-send --system --dest=org.freedesktop.ConsoleKit /org/freedesktop/ConsoleKit/Manager org.freedesktop.ConsoleKit.Manager.Restart action: suspend dbus-send --system --dest=org.freedesktop.UPower /org/freedesktop/UPower org.freedesktop.UPower.Suspend action: hibernate dbus-send --system --dest=org.freedesktop.UPower /org/freedesktop/UPower org.freedesktop.UPower.HibernateI was meaning to change E17 to not even call enlightenment_sys for such cases.
Something like: Create another configuration window with selecting how to handle these requests, have possibility to select between command and DBUS message and specify DBUS address, object and method? (With default value based on detected system - HAL, ConsoleKit, whatever) Sounds like good idea. If I get to learn coding using EFL, I'll try to do it.
But you have probably in mind something smarter, right? Well this is the reason I don't need root privileges, but it won't work without passing that check. It could make sense to at least have configuration option in sysactions.conf not to require root privileges. Something like: option: need_root falseWould you be able to help us with that?I'm occupied by family (4 month old baby takes a lot of power and time) and work (learning at new position). My time is very limited and I'm afraid that even night builds take too much time already. I know nothing about that and I have never done anything similar so it would take a while. It doesn't make sense to start with this when workaround is simple and makes sense - it's more like fix from my POV. I should rather add more packages to nightly builds.need_root seems fine, but maybe it should be per-action? What if you need_root for shutdown but not for suspend? no idea if that may happen... just wondering
Good point. So, what about having
'action:' and 'power-action:' ('root-action:', 'super-action:', ...).
Modifying parser should be easy and UID/GID test would be only for
this type.
-- Gustavo Sverzut Barbieri http://profusion.mobi embedded systems -------------------------------------- MSN: [email protected] Skype: gsbarbieri Mobile: +55 (19) 9225-2202 ------------------------------------------------------------------------------ All the data continuously generated in your IT infrastructure contains a definitive record of customers, application performance, security threats, fraudulent activity, and more. Splunk takes this data and makes sense of it. IT sense. And common sense. http://p.sf.net/sfu/splunk-novd2d _______________________________________________ enlightenment-devel mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/enlightenment-devel
Best regards, Tomas Cech L3
pgpqsEg5rLArQ.pgp
Description: PGP signature
------------------------------------------------------------------------------ All the data continuously generated in your IT infrastructure contains a definitive record of customers, application performance, security threats, fraudulent activity, and more. Splunk takes this data and makes sense of it. IT sense. And common sense. http://p.sf.net/sfu/splunk-novd2d
_______________________________________________ enlightenment-devel mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/enlightenment-devel
