Bug 1094752 - at_console in dbus policy makes setroubleshoot hard to use on servers
Summary: at_console in dbus policy makes setroubleshoot hard to use on servers
Keywords:
Status: CLOSED NEXTRELEASE
Alias: None
Product: Fedora
Classification: Fedora
Component: setroubleshoot
Version: 20
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Daniel Walsh
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks: 1094121
TreeView+ depends on / blocked
 
Reported: 2014-05-06 12:10 UTC by Stef Walter
Modified: 2015-04-02 20:25 UTC (History)
3 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2015-04-02 20:25:05 UTC
Type: Bug
Embargoed:

Attachments (Terms of Use)

Description Stef Walter 2014-05-06 12:10:29 UTC 
Description of problem:

Use of at_console="true" in the DBus policy file makes setroubleshoot hard to use on servers, where users are logged in via ssh, or via Cockpit, but not at a console.

at_console="true" is a real old relic, that was never really implemented. Modern services should be using polkit.

For example, NetworkManager moved away from it for the same reasons (want to be usable on servers): bug #979416

Version-Release number of selected component (if applicable):

setroubleshoot-server-3.2.17-1.fc20.x86_64

org.fedoraproject.Setroubleshootd.conf:	<policy at_console="true">
Comment 1 Petr Lautrbach 2015-04-02 20:25:05 UTC 
This is already changed in Fedora 21 and newer. I'm not sure if we should change the policy in this late phase of F20 lifetime.
Note You need to log in before you can comment on or make changes to this bug.