From 9c64f5ac7f0d79b20296cb1a1f10fb6b4b6fdfcb Mon Sep 17 00:00:00 2001
From: Robby Workman <rworkman@slackware.com>
Date: Tue, 7 Jul 2009 22:37:30 -0500
Subject: [PATCH] Remove default allow at_console permissions for wicd client

  I suspect that this will be a user-visible change for lots of people;
    basically, the default before this was to allow any user logged in
    on the local machine to use wicd-client IF ConsoleKit was installed
    and in use on the machine.  Since we don't support use of PolicyKit
    for obtaining authorizations, this wasn't really the proper default
    in my opinion.  This will not affect systems that are not using
    ConsoleKit - they will continue to depend on group membership in
    whatever is defined for %WICDGROUP% in the dbus configuration file.
---
 in/other=wicd.conf.in | 26 ++++++++++++++++----------
 1 file changed, 16 insertions(+), 10 deletions(-)

diff --git a/in/other=wicd.conf.in b/in/other=wicd.conf.in
index d3cc2ac..79c10c5 100644
--- a/in/other=wicd.conf.in
+++ b/in/other=wicd.conf.in
@@ -17,16 +17,6 @@
                 <deny own="org.wicd.daemon"/>
         </policy>
 
-        <policy at_console="true">
-                <allow send_destination="org.wicd.daemon"/>
-                <allow send_interface="org.wicd.daemon"/>
-		<allow send_destination="org.wicd.daemon.wireless"/>
-		<allow send_interface="org.wicd.daemon.wireless"/>
-		<allow send_destination="org.wicd.daemon.wired"/>
-		<allow send_interface="org.wicd.daemon.wired"/>
-		<allow send_interface="org.freedesktop.DBus.Introspectable"/>
-        </policy>
-
 	<!-- This Unix group will have permission to use Wicd's gui -->
         <policy group="%WICDGROUP%">
                 <allow send_interface="org.freedesktop.DBus.Introspectable"/>
@@ -34,4 +24,20 @@
                 <allow send_interface="org.wicd.daemon"/>
         </policy>
 
+       <!-- Uncomment the block below if you want all users logged in locally
+            to have permission to use wicd-client.  This ignores the group
+            based permission model defined above for the "%WICDGROUP%" group.
+            Note that this only applies if you are using ConsoleKit - if you
+            do not have ConsoleKit installed and in use, then this block makes
+            no difference either way.  -->
+        <!-- <policy at_console="true">
+                <allow send_destination="org.wicd.daemon"/>
+                <allow send_interface="org.wicd.daemon"/>
+                <allow send_destination="org.wicd.daemon.wireless"/>
+                <allow send_interface="org.wicd.daemon.wireless"/>
+                <allow send_destination="org.wicd.daemon.wired"/>
+                <allow send_interface="org.wicd.daemon.wired"/>
+                <allow send_interface="org.freedesktop.DBus.Introspectable"/>
+        </policy> -->
+
 </busconfig>