>> >> I did "apt-get update; apt-get upgrade" and now openmoko-panel-plugin
>> >> doesn't want to start any more.
>> >>
>> >> First I got an access error. Based on some vague googling, I replaced
>> >> user="root" with group="staff" in /etc/dbus-1/system.d/frameworkd.conf,
>> >> and it seemed to help, but not enough. Now I get an error about the
>> >> odeviced name being unknown (see traceback below).
>> >>
>> >> Any idea what I need to do?
>>
>> > try starting frameworkd from the command line, after stopping it
>> > via /etc/init.d/fso-frameworkd stop, and see if it outputs any errors.
>>
>> Hmm.. so it looks like with group="staff" frameworkd fails (presumably
>> because it's running as root which is not in group staff) and with
>> user="root", openmoko-panel-plugin fails because it's not running
>> as root.
>>
>> I really believe that running all apps as root is wrong. So what should
>> I put in /etc/dbus-1/system.d/frameworkd.conf so that both frameworkd
>> can start as root and openmoko-panel-plugin can run as "monnier"?
> There are two quite different things configured there: Who can act as
> the frameworkd daemon, and how can talk to the frameworkd daemon.
> Instead of
> <policy user="root">
> <allow own="org.freesmartphone.opreferencesd"/>
> <allow send_path="/org/freesmartphone/Preferences"/>
> <allow send_destination="org.freesmartphone.Preferences"/>
> <allow receive_sender="org.freesmartphone.Preferences"/>
> </policy>
> you should be able to write
> <policy user="root">
> <allow own="org.freesmartphone.opreferencesd"/>
> <allow send_path="/org/freesmartphone/Preferences"/>
> <allow send_destination="org.freesmartphone.Preferences"/>
> <allow receive_sender="org.freesmartphone.Preferences"/>
> </policy>
> <policy user="monnier">
> <allow send_path="/org/freesmartphone/Preferences"/>
> <allow send_destination="org.freesmartphone.Preferences"/>
> <allow receive_sender="org.freesmartphone.Preferences"/>
> </policy>
> Note that frameworkd talks to itself, so root still needs the send
> rights.
I see. That makes sense. But of course user="monnier" is unlikely to
make it to pkg-fso, so the real solution needs to be a bit more generic
(which is why I had tried group="staff").
So I duplicated all the entries, modified the copies by removing the
"own=" lines and by replacing user="root" by group="staff" and indeed,
it now seems to work.
> Note that
[...]
> + <allow send_requested_reply="true" send_type="method_call"/>
[...]
> basically disables dbus rights management, which might be ok on a
> smartphone, but is not The Right Thing™ to do.
Thanks for the heads up. So indeed, it's not the solution I was
looking for.
Stefan
_______________________________________________
Smartphones-userland mailing list
Smartphones-userland@linuxtogo.org
http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/smartphones-userland
