Re: Cmake and dbus daemon on the system bus

2019-09-16 Thread Thiago Macieira
On Monday, 16 September 2019 12:56:32 PDT David Edmundson wrote:
> You want to look for dbus-activation and set User=root in the
> activation desktop file that you put in
> /usr/share/dbus-1/system-services

Make sure you REALLY need to run as root. If you can run as some other, non-
privileged user, that's better. That can be as a result of dropping privileges 
with setuid() or capset() after acquiring the resource you need.

If you do that, connect to the bus AFTER you've dropped privileges.

-- 
Thiago Macieira - thiago (AT) macieira.info - thiago (AT) kde.org
   Software Architect - Intel System Software Products





Re: Cmake and dbus daemon on the system bus

2019-09-16 Thread David Edmundson
Kauth is a wrapper round using dbus activation on the system bus...

>I read the tutorials related to dbus in the techbase pages, but those seem 
>more oriented to the sessionBus.

It's 99.9% the same.

>and a way to automatically start with root privileges the daemon

You want to look for dbus-activation and set User=root in the
activation desktop file that you put in
/usr/share/dbus-1/system-services

David


[IMPORTANT] Binary Factory & CI System Maintenance

2019-09-16 Thread Ben Cooksley
Hi all,

As part of changes to help improve the capacity, capability and
security of the Binary Factory and CI system, i'm going to be
performing a rebuild of several of the physical hosts responsible for
performing builds on the CI system.

Following these changes, signing operations for Flatpak and Android
builds will have been shifted away from the machines responsible for
handling the actual builds, and the system will have an additional
machine added to handle builds.

This will also pave the way for the build process for Snaps being
brought to the Binary Factory (although there are other issues which
may hold up the delivery of that due to excessive requirements imposed
by the Snap tooling)

During this time however, the overall capacity of the system may be
reduced and the capability to perform some builds may be unavailable.

Should anyone have any upcoming releases that require the services of
the Binary Factory & CI system it would be appreciated if you could
please let me know so I can take that into account for scheduling the
various changes.

Thanks,
Ben Cooksley
KDE Sysadmin


Cmake and dbus daemon on the system bus

2019-09-16 Thread Luca Carlon
Hello,
not sure if this is the right place to ask. I'm working on this new
feature: https://bugs.kde.org/show_bug.cgi?id=410902. In the current
implementation I used KAuth, but it seems to me a dbus daemon would be a
better fit for this case. The daemon must be run as root, and should
therefore probably use the systemBus. I read the tutorials related to dbus
in the techbase pages, but those seem more oriented to the sessionBus.

I already implemented the communication, which seems to work properly. I'm
missing a way to automatically install the policy file with cmake (which
should be in /etc/dbus-1/system.d) and a way to automatically start with
root privileges the daemon (can that be done with a .desktop file?). Anyone
who can provide some info? Is there maybe a place where to find guidelines
about these two points? Or even examples doing the same?

Thank you very much for any help!
Regards.

-- 
Dr. Luca Carlon
Software Engineer


Re: Retirement of notes.kde.org

2019-09-16 Thread Simon Redman



On September 15, 2019 11:03:31 PM PDT, Ben Cooksley  wrote:
>On Mon, Sep 16, 2019 at 5:14 AM Valorie Zimmerman
> wrote:
>>
>> Hey Ben,
>
>Hi Valorie,
>
>>
>> On Sun, Sep 15, 2019 at 11:58 AM Ben Cooksley 
>wrote:
>>>
>>> Good evening all,
>>>
>>> Currently we're in the situation where the software we use to run
>>> notes.kde.org is both difficult to maintain, as well as support (for
>>> things like document confidentiality for various groups within KDE).
>>>
>>> We'd therefore like to retire the service, replacing it with the
>>> Realtime Text Editor within Nextcloud (share.kde.org). Internally
>this
>>> editor uses Markdown.
>>>
>>> You can find a demo of this at
>https://share.kde.org/s/gtFcRmwetRKqTZJ
>>> (no login required)
>>>
>>> It would be appreciated if everyone could please test the realtime
>>> text editor and let us know if they encounter any issues.
>>>
>>> In terms of feature differences, we are aware that
>>> highlighting/authorship information won't be retained by the new
>>> editor, and there can occasionally be problems when editing the same
>>> line with someone else simultaneously.
>>>
>>> If everyone is okay with this we'd like to go ahead with shutting
>down
>>> notes.kde.org as soon as possible.
>>>
>>> Thanks,
>>> Ben Cooksley
>>> KDE Sysadmin
>>
>>
>> I noticed that most every BoF at Akademy this year used notes to link
>the BoF notes. Will all these notes be just disappeared? If so, that is
>really unfortunate. There is a reason many of us continue to use notes.
>One can see who typed what, one can see the history of the doc - and
>other points mentioned on https://share.kde.org/s/gtFcRmwetRKqTZJ.
>>
>> ::sigh::
>
>The content of notes.kde.org will be exported - likely in ODT format -
>prior to us shutting it down.
>The resulting files will be made available on share.kde.org.
>
>If there are things which need to be resolved prior to the shutdown of
>notes.kde.org we can look into those.
>
>While it is unfortunate that the links will be broken, we should be
>able to make them relatively close (ie. send the user to a public view
>of the folder on share.kde.org which contains all of the content
>exported from notes.kde.org) so the user isn't too far from the
>original link.
>
>In terms of feature regressions i'm tracking, I see the following:
>- Lack of editor highlighting
>- No stored history aside from Nextcloud versioning
>- Slightly harder to create new documents
>
>Any other comments on this which I missed from the document?
>
>Cheers,
>Ben
>
>>
>> Valorie
>> --
>> http://about.me/valoriez - pronouns: she/her
>>
>>

I personally don't find the author highlighting very necessary. For one thing, 
the information of who actually wrote a color often seems to go missing from 
notes.kde.org anyway. Granted, I have not been around here very long, so maybe 
I just haven't seen a killer use for it. Does anyone have one come to mind?

Again from the point of view of someone who hasn't been around for very long, I 
made a face when I saw the notes.kde.org landing screen and interface. It gave 
me the impression that KDE infrastructure was stuck in the past. One big 
advantage IMO is that the new tool feels much more modern and inviting, which 
might help retain new contributors. It may sound petty, but I imagine there are 
some people who would see that and run away.
(This is not to knock notes.kde.org. Once I started using it I thought it was 
nice and useful, but crossing that initial barrier is important)

Thanks,
Simon