So the seat assignment works fine – gdm is added to the ACL. The problem is that the devnode is *world-readable*.
-- Mantas Mikulėnas <graw...@gmail.com> On May 28, 2014 8:57 PM, "Floris" <jkflo...@dds.nl> wrote: > Op Wed, 28 May 2014 19:06:22 +0200 schreef Zbigniew Jędrzejewski-Szmek < > zbys...@in.waw.pl>: > > On Wed, May 28, 2014 at 05:45:01PM +0200, Floris wrote: >> >>> >Are you logged in as the same user on both seats? >>> > >>> >>> Nobody is logged in on seat1 >>> >>> >I think the difference is that with `jstest`, the device doesn't >>> >interact with your seat, but *you* are interacting directly with its >>> >device node, so the only thing that's checked is devnode >>> >permissions... >>> > >>> >>> When I start a game on seat0 I can use the joystick attached to seat1 >>> >> What does 'getfacl /dev/input/js0' say? And 'loginctl seat-status seat1'? >> >> Zbyszek >> >> $ getfacl /dev/input/js0 > getfacl: Removing leading '/' from absolute path names > # file: dev/input/js0 > # owner: root > # group: root > user::rw- > user:Debian-gdm:rw- > group::r-- > mask::rw- > other::r-- > > $ loginctl seat-status seat1 > seat1 > Sessions: *c1 > Devices: > ├─/sys/devices/pci0000:00/0000:00:05.0/0000:02:00.0 > │ [MASTER] pci:0000:02:00.0 > ├─/sys/devices/pci0000:00/0000:00:05.0/0000:02:00.1/ > sound/card1 > │ sound:card1 "NVidia" > │ ├─/sys/devices/pci0000:00/0000:00:05.0/0000:02:00.1/ > sound/card1/input14 > │ │ input:input14 "HDA NVidia HDMI/DP,pcm=7" > │ └─/sys/devices/pci0000:00/0000:00:05.0/0000:02:00.1/ > sound/card1/input5 > │ input:input5 "HDA NVidia HDMI/DP,pcm=3" > ├─/sys/devices/pci0000:00/0000:00:1a.0/usb1/1-1/1-1.4 > │ usb:1-1.4 > │ ├─/sys/devices/pci0000...000: > 00:1a.0/usb1/1-1/1-1.4/1-1.4.1/1-1.4.1:1.0/0003:05FE:0011. > 0005/input/input19 > │ │ input:input19 "Cypress Sem PS2/USB Browser Combo > Mouse" > │ ├─/sys/devices/pci0000...000: > 00:1a.0/usb1/1-1/1-1.4/1-1.4.2/1-1.4.2:1.0/0003:046D:C312. > 0006/input/input20 > │ │ input:input20 "BTC USB Multimedia Keyboard" > │ ├─/sys/devices/pci0000...000: > 00:1a.0/usb1/1-1/1-1.4/1-1.4.2/1-1.4.2:1.1/0003:046D:C312. > 0007/input/input21 > │ │ input:input21 "BTC USB Multimedia Keyboard" > │ ├─/sys/devices/pci0000...000: > 00:1a.0/usb1/1-1/1-1.4/1-1.4.3/1-1.4.3:1.0/0003:0079:0006. > 0008/input/input22 > │ │ input:input22 "DragonRise Inc. Generic USB > Joystick " > │ │ ├─/sys/devices/pci0000...0/ > usb1/1-1/1-1.4/1-1.4.3/1-1.4.3:1.0/0003:0079:0006.0008/ > input/input22/event19 > │ │ │ input:event19 > │ │ └─/sys/devices/pci0000...:1a. > 0/usb1/1-1/1-1.4/1-1.4.3/1-1.4.3:1.0/0003:0079:0006.0008/input/input22/js0 > │ │ input:js0 > │ └─/sys/devices/pci0000...000: > 00:1a.0/usb1/1-1/1-1.4/1-1.4.4/1-1.4.4:1.0/0003:0079:0006. > 0009/input/input23 > │ input:input23 "DragonRise Inc. Generic USB > Joystick " > │ ├─/sys/devices/pci0000...0/ > usb1/1-1/1-1.4/1-1.4.4/1-1.4.4:1.0/0003:0079:0006.0009/ > input/input23/event20 > │ │ input:event20 > │ └─/sys/devices/pci0000...:1a. > 0/usb1/1-1/1-1.4/1-1.4.4/1-1.4.4:1.0/0003:0079:0006.0009/input/input23/js1 > │ input:js1 > └─/sys/devices/pci0000:00/0000:00:1e.0/0000:08:02.0/ > sound/card2 > sound:card2 "Live" > _______________________________________________ > systemd-devel mailing list > systemd-devel@lists.freedesktop.org > http://lists.freedesktop.org/mailman/listinfo/systemd-devel >
_______________________________________________ systemd-devel mailing list systemd-devel@lists.freedesktop.org http://lists.freedesktop.org/mailman/listinfo/systemd-devel