Bug 1094149 - colord polkit policy is desktop centric, prevents server usage
Summary: colord polkit policy is desktop centric, prevents server usage
Keywords:
Status: CLOSED NEXTRELEASE
Alias: None
Product: Fedora
Classification: Fedora
Component: colord
Version: 20
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Richard Hughes
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks: 1094121
TreeView+ depends on / blocked
 
Reported: 2014-05-05 07:40 UTC by Stef Walter
Modified: 2014-05-08 09:33 UTC (History)
1 user (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2014-05-08 09:33:06 UTC

Attachments (Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

Description Stef Walter 2014-05-05 07:40:16 UTC 
Description of problem:

The shipped polkit policy is completely desktop-centric and expects that the admin user is logged in an active local session (ie: a seat in logind parlance, with a monitor and keyboard).

This prevents DBus API use when logged in via ssh (and using pkttyagent as your polkit agent) or via Cockpit (which is a valid use case, eg: printers driven by servers or server software).

The <allow_any> tag in polkit policy applies to non-local sessions. It should be set to something other than 'no' unless the action directly affects hardware of the login seat.

Version-Release number of selected component (if applicable):

colord-1.1.7-1.fc20.x86_64
Comment 1 Stef Walter 2014-05-05 07:40:41 UTC 
https://github.com/hughsie/colord/pull/5
Comment 2 Richard Hughes 2014-05-08 09:33:06 UTC 
Fixed upstream. Thanks.
Note You need to log in before you can comment on or make changes to this bug.