On IRC: <mterry> Wellark, so with this patch, if a new NM capability comes out, we'll end up using the default permissions for it, instead of denying? seems bad <Wellark> mterry: the actions do have default permissions <Wellark> so if a new action is introduced it's probably prevented by default permission if it's dangerous <Wellark> but yes, if the default policy does not prevent the new action then it's available in the greeter also and preventing that needs a modification to the .pkla <Wellark> but there has not been new actions to NM in very long time and they are something that are added only with great care. Unless NM gets something totally new kind of functionality there will be no new actions policykit upstream is planning to move to a whole new configuration system in the future so, we need to update the permissions files on all the packages we use it anyway at some point in the future I would not be too concerned about the (unlikely) situation that NM gets a new action added before that
-- You received this bug notification because you are a member of Desktop Packages, which is subscribed to unity-greeter in Ubuntu. https://bugs.launchpad.net/bugs/1048522 Title: unity-greeter .pkla file does not work consistenly on all the systems Status in Unity Greeter: Confirmed Status in “unity-greeter” package in Ubuntu: Triaged Bug description: The current .pkla file does not work properly on all system. It seems that policykit handles localauthority files with action wildcards somewhat nondeterministically. AFAICT the file is specified according to policykit documentation, but still the file does not work as expected on all of the systems. In fact on systems where the file does not work switching the rules around has desired effect, but this breaks the systems where the original file already works. To get the file to work reliably on all the systems the wild card needs to be removed and all permissions for each action has to be specified explicitly. To manage notifications about this bug go to: https://bugs.launchpad.net/unity-greeter/+bug/1048522/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp
