Bug 1094752

Summary: at_console in dbus policy makes setroubleshoot hard to use on servers
Product: [Fedora] Fedora Reporter: Stef Walter <stefw>
Component: setroubleshootAssignee: Daniel Walsh <dwalsh>
Status: CLOSED NEXTRELEASE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 20CC: dwalsh, mgrepl, plautrba
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2015-04-02 20:25:05 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 1094121    

Description Stef Walter 2014-05-06 12:10:29 UTC
Description of problem:

Use of at_console="true" in the DBus policy file makes setroubleshoot hard to use on servers, where users are logged in via ssh, or via Cockpit, but not at a console.

at_console="true" is a real old relic, that was never really implemented. Modern services should be using polkit.

For example, NetworkManager moved away from it for the same reasons (want to be usable on servers): bug #979416

Version-Release number of selected component (if applicable):

setroubleshoot-server-3.2.17-1.fc20.x86_64

org.fedoraproject.Setroubleshootd.conf:	<policy at_console="true">

Comment 1 Petr Lautrbach 2015-04-02 20:25:05 UTC
This is already changed in Fedora 21 and newer. I'm not sure if we should change the policy in this late phase of F20 lifetime.