Jedy Wang schrieb: > On Tue, 2009-09-01 at 13:12 +0100, Darren J Moffat wrote:
>>> I just tried run reboot as console user and it failed. It seems reboot >>> does not support RBAC. In this case I have to extend ConsoleKit too and >>> wait for the its integration (after b128). Do you have any other >>> suggestion? >> Personally I think root cause of this problem is that a temporary >> property needs to be created in an SMF service and that requires a >> different (considerably more powerful) authorisation than the one to >> reboot. I think that needs to be fixed, but that can't be done in this >> case so I think this case needs to be placed in "waiting need spec" or >> derailed. The project team for this case needs to work with the team >> that introduced the fast reboot functionality to resolve the SMF issue. >> > If we extend ConsoleKit and add new interfaces which will invoke "reboot > -p" and "reboot -f", then we do not need a temporary property any more. > Because gnome-session can call proper interface of ConsoleKit to do a > fast reboot or cold reboot according to users' input. > Independent of this specific use case, the architecture for changing the reboot mode is defective, if changing it temporarily for the next boot requires much more authorization than changing the persistent default. This is worth fixing independently of this case. Requiring every consumer of such functionality to have an agent that runs with privilege (ConsoleKit in your case) does not seem a good approach. Of course you could also consider existence of such a DBus interface in ConsoleKit to be the fix for that architecture, but the existing interface with the transient property would still be there and remain afflicted. - J?rg -- Joerg Barfurth phone: +49 40 23646662 / x66662 Software Engineer mailto:joerg.barfurth at sun.com Desktop Technology http://reserv.ireland/twiki/bin/view/Argus/ Thin Client Software http://www.sun.com/software/sunray/ Sun Microsystems GmbH http://www.sun.com/software/javadesktopsystem/
