Re: [systemd-devel] Starting transient services securely from other service without root

2022-04-28 Thread Mantas Mikulėnas
On Thu, Apr 28, 2022 at 6:56 PM Vašek Šraier wrote: > To update the current list of options: > > - PolicyKit > could technically help, but I've discovered that the documentation > explicitly prohibits our potential use-case: > "In particular, applications, [...] must never include any >

Re: [systemd-devel] Starting transient services securely from other service without root

2022-04-27 Thread Michal Koutný
Hello Vašek. On Mon, Apr 25, 2022 at 10:45:34AM +0200, Vašek Šraier wrote: > TL;DR: I want to start transient system services from another system > service via DBus. All services should have as little privileges as > possible, definitely not root. How can I do that securely? PolicyKit popped to