Bug 1094149 - colord polkit policy is desktop centric, prevents server usage
Summary: colord polkit policy is desktop centric, prevents server usage
Alias: None
Product: Fedora
Classification: Fedora
Component: colord
Version: 20
Hardware: Unspecified
OS: Unspecified
Target Milestone: ---
Assignee: Richard Hughes
QA Contact: Fedora Extras Quality Assurance
Depends On:
Blocks: 1094121
TreeView+ depends on / blocked
Reported: 2014-05-05 07:40 UTC by Stef Walter
Modified: 2014-05-08 09:33 UTC (History)
1 user (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Last Closed: 2014-05-08 09:33:06 UTC

Attachments (Terms of Use)

Description Stef Walter 2014-05-05 07:40:16 UTC
Description of problem:

The shipped polkit policy is completely desktop-centric and expects that the admin user is logged in an active local session (ie: a seat in logind parlance, with a monitor and keyboard).

This prevents DBus API use when logged in via ssh (and using pkttyagent as your polkit agent) or via Cockpit (which is a valid use case, eg: printers driven by servers or server software).

The <allow_any> tag in polkit policy applies to non-local sessions. It should be set to something other than 'no' unless the action directly affects hardware of the login seat.

Version-Release number of selected component (if applicable):


Comment 1 Stef Walter 2014-05-05 07:40:41 UTC

Comment 2 Richard Hughes 2014-05-08 09:33:06 UTC
Fixed upstream. Thanks.

Note You need to log in before you can comment on or make changes to this bug.