Jedy Wang wrote:
> Hi Darren,
> 
> I checked some spec files from Desktop consolidation. I found that
> SUNWdbus add an authentication itself when installing package.
> 
> mkdir -p $RPM_BUILD_ROOT/etc/security
> echo 'solaris.smf.manage.dbus:::Manage D-BUS Service 
> States::help=SmfDBUSStates.html' > $RPM_BUILD_ROOT/etc/security/auth_attr
> echo 'D-BUS Management:::Manage 
> D-BUS:auths=solaris.smf.manage.dbus;help=RtDBUSMngmnt.html' > 
> $RPM_BUILD_ROOT/etc/security/prof_attr
> 
> 
> Can I do same thing?

Technically yes.  However it might actually be better if this 
authorisation was checked in bootadm and that would mean putting it in 
the ON gate.

If you do put it in the Desktop gate I'm thinking it should probably be 
named more in line with the fact that it is ConsoleKit that is checking 
it.  Not sure at the moment what a good name would be.

On the other hand we could just not bother with the authorisation at all 
and just like ConsoleKit use bootadm and claim it is an implementation 
detail.

However I really think using bootadm here is not the correct solution 
and I'm dissapointed that the fast-reboot architecture is forcing you to 
do it that way.

-- 
Darren J Moffat

Reply via email to