Bug 365261 - No way to change touchpad behaviour in a security-sane way
Summary: No way to change touchpad behaviour in a security-sane way
Keywords:
Status: CLOSED UPSTREAM
Alias: None
Product: Fedora
Classification: Fedora
Component: synaptics
Version: rawhide
Hardware: All
OS: Linux
low
low
Target Milestone: ---
Assignee: Kristian Høgsberg
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2007-11-03 15:03 UTC by Roland Wolters
Modified: 2018-04-11 09:21 UTC (History)
2 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2007-11-06 14:04:18 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)

Description Roland Wolters 2007-11-03 15:03:51 UTC
Description of problem:
There is currently no way to change the behaviour of synaptics touchpads 
(enable/disable) in a security-sane way.
The only way is to activate the option "SHMConfig" in the touchpad driver 
section of xorg.conf. If that is done however any user can switch on and off 
the touchpad which is a security risk.

How reproducible:
Use a laptop with touchpad, try to turn it on or off.
  
Actual results:
It is not possible until you activate the above mentioned option - then 
however every user can switch the behaviour without any authentication.

Expected results:
It should be possible for the user - and only that one - to change the 
touchpad behaviour.

Additional info:
Since Fedora 8 comes along with new authentication methods (PolicyKit) I 
wonder if this problem can be solved with that as well.

Comment 1 Matthias Clasen 2007-11-05 03:04:04 UTC
See the discussion in 

http://mail.gnome.org/archives/desktop-devel-list/2007-November/msg00004.html

and followups. People are working on exposing touchpad configuration properly
via XInput instead of SHMConfig.

Comment 2 Roland Wolters 2007-11-05 12:54:48 UTC
Thanks for the information, I hope that a solution will be available and can 
be included with Fedora soon.

Comment 5 Matthias Clasen 2007-11-06 13:24:01 UTC
I don't care much. Either close it upstream, or move it to F9Target as a
reminder to look after this.

Comment 6 Roland Wolters 2007-11-06 14:04:18 UTC
Closed as an upstream problem.


Note You need to log in before you can comment on or make changes to this bug.