On Fri, Feb 7, 2014 at 3:52 PM, walt <w41...@gmail.com> wrote: > On 02/06/2014 05:38 PM, Canek Peláez Valdés wrote: >> On Thu, Feb 6, 2014 at 7:21 PM, walt <w41...@gmail.com> wrote: >>> On 02/05/2014 06:25 PM, Canek Peláez Valdés wrote: >>>> On Feb 5, 2014 6:23 PM, "walt" <w41...@gmail.com >>>> <mailto:w41...@gmail.com>> wrote: [ snip ] >>>>> I am seat0 >>> >>>> I'm more concerned about you being seat0, and you being asked for a >>>> password. In theory that's what logind solves, and in a much more >>>> cleaner, race-free and deterministic way than ConsoleKit. >>>> >>>> Do you have systemd with the policykit USE flag? And polkit with the >>>> systemd USE flag? (I suppose the later must have it). >>> >>> Yes systemd has polkit and polkit has systemd. >>>> >>>> If you do, can you please show us the output (make sure to do this >>>> inside your DE session) from: >>>> >>>> • loginctl seat-status >>>> >>>> For example, mine shows: >>> <snippage> > > $loginctl seat-status seat0 > seat0 > Sessions: 1 > Devices: > ├─/sys/devices/LNXSYSTM:00/LNXPWRBN:00/input/input1 > │ input:input1 "Power Button" > ├─/sys/devices/LNXSYSTM:00/device:00/PNP0C0C:00/input/input0 > │ input:input0 "Power Button" > ├─/sys/devices/pci0000:00/0000:00:01.1/sound/card0 > │ sound:card0 "Generic" > > ├─/sys/devices/pci0000:00/0000:00:11.0/ata3/host2/target2:0:0/2:0:0:0/block/sr0 > │ block:sr0 > > ├─/sys/devices/pci0000:00/0000:00:11.0/ata3/host2/target2:0:0/2:0:0:0/scsi_generic/sg1 > │ scsi_generic:sg1 > ├─/sys/devices/pci0000:00/0000:00:12.0/usb4 > │ usb:usb4 > │ > ├─/sys/devices/pci0000:00/0000:00:12.0/usb4/4-5/4-5:1.0/input/input5 > │ │ input:input5 "Lenovo Black Silk USB Keyboard" > │ > └─/sys/devices/pci0000:00/0000:00:12.0/usb4/4-5/4-5:1.1/input/input6 > │ input:input6 "Lenovo Black Silk USB Keyboard" > ├─/sys/devices/pci0000:00/0000:00:12.2/usb1 > │ usb:usb1 > ├─/sys/devices/pci0000:00/0000:00:13.0/usb5 > │ usb:usb5 > │ > └─/sys/devices/pci0000:00/0000:00:13.0/usb5/5-1/5-1:1.0/input/input4 > │ input:input4 "Logitech USB Trackball" > ├─/sys/devices/pci0000:00/0000:00:13.2/usb2 > │ usb:usb2 > ├─/sys/devices/pci0000:00/0000:00:14.2/sound/card1 > │ sound:card1 "Generic_1" > ├─/sys/devices/pci0000:00/0000:00:14.5/usb6 > │ usb:usb6 > ├─/sys/devices/pci0000:00/0000:00:15.1/0000:04:00.0/usb8 > │ usb:usb8 > ├─/sys/devices/pci0000:00/0000:00:15.1/0000:04:00.0/usb9 > │ usb:usb9 > ├─/sys/devices/pci0000:00/0000:00:16.0/usb7 > │ usb:usb7 > ├─/sys/devices/pci0000:00/0000:00:16.2/usb3 > │ usb:usb3 > └─/sys/devices/virtual/misc/kvm > misc:kvm > > Does systemd pay attention to groups these days? > > $groups > disk lp wheel audio cdrom video games cdrw scanner lpadmin wireshark plugdev > vboxusers wa1ter kvm
It does, but for desktops it's not the most important thing to assign resources permissions. Groups are static, and you want dynamic behavior to properly support multiuser systems. Your seat seems to be the owner of both the power buttons and USB devices, so you should not be asked for a password when powering down the machine (unless another user or root is logged in, for example by ssh), nor when using a USB stick. I repeat my question (if you already answered I apologize), do you have systemd emerged with the policykit USE flag? Regards. -- Canek Peláez Valdés Posgrado en Ciencia e Ingeniería de la Computación Universidad Nacional Autónoma de México
