Re: [E-devel] suid bit for enlightenment_sys

[Tomas C. <tc...@su...>]

On Mon, Nov 21, 2011 at 08:09:24AM -0200, Lucas De Marchi wrote:
>On Sun, Nov 20, 2011 at 7:50 AM, Tomas Cech <tc...@su...> wrote:
>> Hi,
>>
>> On Sat, Nov 19, 2011 at 10:31:21PM -0200, Gustavo Sverzut Barbieri wrote:
>>>
>>> On Sat, Nov 19, 2011 at 10:15 PM, Tomas Cech <tc...@su...> wrote:
>>>>
>>>> Hi,
>>>>
>>>> as I'm trying to get E17 into openSUSE, I'm trying to tune
>>>> sysactions.conf. I'm trying to get rid of suid bit for
>>>> /usr/lib64/enlightenment/utils/enlightenment_sys
>>>>
>>>> All my actions use DBUS messages so suid bit is useless (ok, I haven't
>>>> done mount/unmount yet). When I remove suid bit from this binary,
>>>> suspend fails and in log I have:
>>>>
>>>> ERROR: UNABLE TO ASSUME ROOT PRIVILEGES
>>>>
>>>> Running
>>>> /usr/lib64/enlightenment/utils/enlightenment_sys suspend
>>>> works fine, so my question is - is really needed check for root
>>>> privileges there?
>>>>
>>>> Thanks.
>>>>
>>>> Best regards,
>>>>
>>>> Tomas Cech
>>>> Sleep_Walker
>>>>
>>>>
>>>> ------------------------------------------------------------------------------
>>>> All the data continuously generated in your IT infrastructure
>>>> contains a definitive record of customers, application performance,
>>>> security threats, fraudulent activity, and more. Splunk takes this
>>>> data and makes sense of it. IT sense. And common sense.
>>>
>>> yes we do. But there is a better way we could do, patches accepted (no
>>> time to do it myself):
>>>  - have hibernate/suspend/... using upower
>>>  - have other actions using proper daemons using dbus + polkit
>>> (udisks, timedated...)
>>>  - whatever else use polkit's features such as pkexec.
>>>
>>
>> That's probably what I want to have there:
>>
>> action:   halt      dbus-send --system --dest=org.freedesktop.ConsoleKit
>> /org/freedesktop/ConsoleKit/Manager org.freedesktop.ConsoleKit.Manager.Stop
>> action:   reboot    dbus-send --system --dest=org.freedesktop.ConsoleKit
>> /org/freedesktop/ConsoleKit/Manager
>> org.freedesktop.ConsoleKit.Manager.Restart
>
>Note that ConsoleKit is deprecated now
>(http://www.freedesktop.org/wiki/Software/ConsoleKit) and I hope it
>will soon be removed from distro (maybe in a faster pace than hal
>was).

Well, I'm not fan of *Kits but also I'm not fan of systemd.
Fortunatelly there is always alternative and having possibility to add
such simple command to sysactions.conf makes it possible.

>
>
>Lucas De Marchi
>
>------------------------------------------------------------------------------
>All the data continuously generated in your IT infrastructure
>contains a definitive record of customers, application performance,
>security threats, fraudulent activity, and more. Splunk takes this
>data and makes sense of it. IT sense. And common sense.
>http://p.sf.net/sfu/splunk-novd2d
>_______________________________________________
>enlightenment-devel mailing list
>enl...@li...
>https://lists.sourceforge.net/lists/listinfo/enlightenment-devel

Best regards,

Tomas Cech
Sleep_Walker