gryf/wicd
1
0
Fork 0
mirror of https://github.com/gryf/wicd.git synced 2025-12-24 15:12:31 +01:00
Code Issues Projects Releases Wiki Activity

Remove default allow at_console permissions for wicd client

Browse Source 
I suspect that this will be a user-visible change for lots of people;
    basically, the default before this was to allow any user logged in
    on the local machine to use wicd-client IF ConsoleKit was installed
    and in use on the machine.  Since we don't support use of PolicyKit
    for obtaining authorizations, this wasn't really the proper default
    in my opinion.  This will not affect systems that are not using
    ConsoleKit - they will continue to depend on group membership in 
    whatever is defined for %WICDGROUP% in the dbus configuration file.
This commit is contained in:
Robby Workman
2009-07-07 22:37:30 -05:00
parent 54fcdee726
commit 9c64f5ac7f
1 changed files with 16 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files

26
in/other=wicd.conf.in
View File

@@ -17,16 +17,6 @@
<deny own="org.wicd.daemon"/>
</policy>
<policy at_console="true">
<allow send_destination="org.wicd.daemon"/>
<allow send_interface="org.wicd.daemon"/>
<allow send_destination="org.wicd.daemon.wireless"/>
<allow send_interface="org.wicd.daemon.wireless"/>
<allow send_destination="org.wicd.daemon.wired"/>
<allow send_interface="org.wicd.daemon.wired"/>
<allow send_interface="org.freedesktop.DBus.Introspectable"/>
</policy>
<!-- This Unix group will have permission to use Wicd's gui -->
<policy group="%WICDGROUP%">
<allow send_interface="org.freedesktop.DBus.Introspectable"/>
@@ -34,4 +24,20 @@
<allow send_interface="org.wicd.daemon"/>
</policy>
<!-- Uncomment the block below if you want all users logged in locally
to have permission to use wicd-client. This ignores the group
based permission model defined above for the "%WICDGROUP%" group.
Note that this only applies if you are using ConsoleKit - if you
do not have ConsoleKit installed and in use, then this block makes
no difference either way. -->
<!-- <policy at_console="true">
<allow send_destination="org.wicd.daemon"/>
<allow send_interface="org.wicd.daemon"/>
<allow send_destination="org.wicd.daemon.wireless"/>
<allow send_interface="org.wicd.daemon.wireless"/>
<allow send_destination="org.wicd.daemon.wired"/>
<allow send_interface="org.wicd.daemon.wired"/>
<allow send_interface="org.freedesktop.DBus.Introspectable"/>
</policy> -->
</busconfig>