Index: ChangeLog
===================================================================
--- ChangeLog (revision 22254)
+++ ChangeLog (working copy)
@@ -1,3 +1,13 @@
+2010-11-22 Alan Coopersmith <[email protected]>
+
+ * specs/SUNWgnome-display-mgr.spec:
+ * ext-sources/gdm.auth_attr:
+ * ext-sources/gdm.prof_attr:
+ * ext-sources/ManageDtHeader.html:
+ * ext-sources/ManageDtLogin.html:
+ - Move RBAC files shared by application/graphical-login/* SMF services
+ from the no-longer delivered dtlogin package to the gdm package.
+
2010-11-22 Brian Cameron <[email protected]>
* ext-sources/svc-gdm: No longer return 1 when the process specified in
Index: specs/SUNWgnome-display-mgr.spec
===================================================================
--- specs/SUNWgnome-display-mgr.spec (revision 22254)
+++ specs/SUNWgnome-display-mgr.spec (working copy)
@@ -24,6 +24,10 @@
# Should be removed when SRSS using ck-seat-tool and ck-list-sessions instead.
Source3: gdmdynamic
Source4: xterm.desktop
+Source5: gdm.auth_attr
+Source6: gdm.prof_attr
+Source7: ManageDtHeader.html
+Source8: ManageDtLogin.html
SUNW_Pkg: SUNWgnome-display-mgr
IPS_package_name: system/display-manager/gdm
Meta(info.classification): %{classification_prefix}:Desktop (GNOME)/Sessions
@@ -115,6 +119,15 @@
install -d $RPM_BUILD_ROOT/%{_datadir}/xsessions
install --mode=0644 %SOURCE4 $RPM_BUILD_ROOT/%{_datadir}/xsessions/
+# RBAC files for gdm service
+install -d $RPM_BUILD_ROOT%{_sysconfdir}/security/auth_attr.d
+install --mode=0444 %SOURCE5
$RPM_BUILD_ROOT%{_sysconfdir}/security/auth_attr.d/desktop-login
+install -d $RPM_BUILD_ROOT%{_sysconfdir}/security/prof_attr.d
+install --mode=0444 %SOURCE6
$RPM_BUILD_ROOT%{_sysconfdir}/security/prof_attr.d/desktop-login
+install -d $RPM_BUILD_ROOT%{_libdir}/help/auths/locale/C/
+install --mode=0444 %SOURCE7 $RPM_BUILD_ROOT%{_libdir}/help/auths/locale/C/
+install --mode=0444 %SOURCE8 $RPM_BUILD_ROOT%{_libdir}/help/auths/locale/C/
+
# Create the 'interface' directory so that user's session scripts can be
# run by gdm and which are populated by other applications.
install -d $RPM_BUILD_ROOT/%{_sysconfdir}/X11/xinit/xinitrc.d
@@ -173,6 +186,11 @@
%dir %attr (0755, root, bin) %{_libdir}
%{_libdir}/bonobo
%{_libexecdir}/gdm*
+%dir %{_libdir}/help
+%dir %{_libdir}/help/auths
+%dir %{_libdir}/help/auths/locale
+%dir %{_libdir}/help/auths/locale/C
+%doc %{_libdir}/help/auths/locale/C/*
%dir %attr (0755, root, sys) %{_datadir}
%dir %attr (0755, root, bin) %{_datadir}/gdm
%{_datadir}/gdm/autostart/LoginWindow/*.desktop
@@ -214,6 +232,11 @@
%{_sysconfdir}/gdm/Pre*
%{_sysconfdir}/gdm/X*
%config %class(preserve) %{_sysconfdir}/gdm/custom.conf
+%dir %{_sysconfdir}/security
+%dir %{_sysconfdir}/security/auth_attr.d
+%{_sysconfdir}/security/auth_attr.d/*
+%dir %{_sysconfdir}/security/prof_attr.d
+%{_sysconfdir}/security/prof_attr.d/*
%dir %{_sysconfdir}/X11/xinit
%dir %{_sysconfdir}/X11/xinit/xinitrc.d
# don't use %_localstatedir for the /var/log and /var/svc directory,
@@ -251,6 +274,9 @@
%endif
%changelog
+* Mon Nov 22 2010 - [email protected]
+- Move RBAC files shared by application/graphical-login/* SMF services here
+ from the no-longer delivered dtlogin package.
* Tue Jun 08 2010 - [email protected]
- Updated BuildRequires to fit SourceJuicer.
* Fri Apr 23 2010 - [email protected]
Index: ext-sources/gdm.auth_attr
===================================================================
--- ext-sources/gdm.auth_attr (revision 0)
+++ ext-sources/gdm.auth_attr (revision 0)
@@ -0,0 +1,7 @@
+#
+# Copyright (c) 2006, Oracle and/or its affiliates. All rights reserved.
+#
+# authorization attributes. see auth_attr(4)
+#
+solaris.smf.manage.dt.:::Manage Desktop Service
States::help=ManageDtHeader.html
+solaris.smf.manage.dt.login:::Manage Desktop Login Service
States::help=ManageDtLogin.html
Index: ext-sources/gdm.prof_attr
===================================================================
--- ext-sources/gdm.prof_attr (revision 0)
+++ ext-sources/gdm.prof_attr (revision 0)
@@ -0,0 +1,7 @@
+#
+# Copyright (c) 2006, Oracle and/or its affiliates. All rights reserved.
+#
+# profiles attributes. see prof_attr(4)
+#
+Desktop Configuration::::auths=solaris.smf.manage.dt.login
+Device Security::::auths=solaris.smf.manage.dt.login
Index: ext-sources/ManageDtHeader.html
===================================================================
--- ext-sources/ManageDtHeader.html (revision 0)
+++ ext-sources/ManageDtHeader.html (revision 0)
@@ -0,0 +1,14 @@
+<HTML>
+<HEAD>
+<!--
+ Copyright (c) 2006, 2010, Oracle and/or its affiliates. All rights reserved.
+-->
+<!--
+META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1"
+-->
+</HEAD>
+<BODY>
+The authorizations allow management of Desktop services.
+<BR>
+</BODY>
+</HTML>
Index: ext-sources/ManageDtLogin.html
===================================================================
--- ext-sources/ManageDtLogin.html (revision 0)
+++ ext-sources/ManageDtLogin.html (revision 0)
@@ -0,0 +1,16 @@
+<HTML>
+<HEAD>
+<!--
+ Copyright (c) 2006, 2010, Oracle and/or its affiliates. All rights reserved.
+-->
+<!--
+META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1"
+-->
+</HEAD>
+<BODY>
+When the Manage Desktop Login Authorization is in the Authorizations Included
column, it grants permission to enable, disable or restart the Desktop Login
Service.
+<p>
+If the Manage Desktop CDE Login Authorization is grayed, then you are not
entitled to Add or Remove this authorization.
+<BR>
+</BODY>
+</HTML>
--
-Alan Coopersmith- [email protected]
Oracle Solaris Platform Engineering: X Window System
