From 9c807b4f4d808201118f15182e12a9e68e12dc36 Mon Sep 17 00:00:00 2001 From: Jakub Filak Date: Thu, 2 Jul 2015 12:19:30 +0200 Subject: [PATCH] dbus: keep the polkit authorization for all clients I played with the defaults and I've found out that: - allow_any == clients like ssh - allow_active == for local console (X, terminal) - allow_inactive had no effect Anyway, I do not find any reason to prevent any client from getting access to all ABRT problems and I also think we should use 'auth_admin_keep' until we implement the new abrt dbus service. auth_admin_keep - requires authorization for the first request and the authorization is kept for a brief period (polkit(8)). commit e98c8766655216db3d9a08b1fa52ba7decf57c46 Author: Stef Walter Date: Mon May 5 08:41:00 2014 +0200 dbus: Fix desktop centric polkit policy file In order to allow use of ABRT's DBus API on servers, the polkit policy should allow admin usage even when not logged in an active seat (ie: monitor and keyboard). Otherwise use from ssh logins and Cockpit is prevented. Related: #1224984 Signed-off-by: Jakub Filak Conflicts: src/dbus/abrt_polkit.policy --- src/dbus/abrt_polkit.policy | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/src/dbus/abrt_polkit.policy b/src/dbus/abrt_polkit.policy index 06008b4..beb615f 100644 --- a/src/dbus/abrt_polkit.policy +++ b/src/dbus/abrt_polkit.policy @@ -19,9 +19,9 @@ Copyright (c) 2012 ABRT Team Get problems from all users Reading others problems requires authentication - no + auth_admin_keep auth_admin_keep - no + auth_admin_keep @@ -30,9 +30,9 @@ Copyright (c) 2012 ABRT Team Set value of configuration properties Update configuration values reuquires authentication - no + auth_admin_keep auth_admin_keep - no + auth_admin_keep -- 2.4.3