policykit doesn't give you much more over the bus policy as described here for a single user system, since the policykit configuration would also simply allow access to SetInterfaceFirmware without password. It can give you more protection for remote shells (ssh or exploit in installed software-- note, webbrowser-app (but not store webapps of course) currently runs unconfined). Policykit may prove more flexible down the line with multiuser as well.
Like I said, this dbus bus policy is ok for now, but I have a strong suspicion it will need to be revisited for multiuser. -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to wpasupplicant in Ubuntu. https://bugs.launchpad.net/bugs/1426923 Title: Allow ubuntu-system-settings to set a device's firmware Status in wpasupplicant package in Ubuntu: In Progress Bug description: Background: To do Wi-Fi hotspots on krillin, we need to poke wifi by doing a call to wpa_supplicant's (undocumented/local) SetInterfaceFirmware method. See [1] for details. Rationale: Ubuntu System Settings needs to do the same things as aforementioned script, but via dbus [2], as phablet/current non-privileged user and unconfined. What happens: If phablet runs [2], this error message [3] is produced, which I interpret to be equivalent with "you're not welcome here". What should happen instead: Ubuntu System Settings should be able to make the call to wpa. [1] http://bazaar.launchpad.net/~mathieu-tl/+junk/touch-hotspot/view/head:/hotspot.py [2] gdbus call --system -d fi.w1.wpa_supplicant1 -o /fi/w1/wpa_supplicant1 -m fi.w1.wpa_supplicant1.SetInterfaceFirmware / ap [3] http://pastebin.ubuntu.com/10489519/ To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/wpasupplicant/+bug/1426923/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp
