[Pkg-utopia-maintainers] Bug#608301: Bug#608301: Bug#608301: dbus calls for letting network-manager sleep and wake do no longer work

[Michael Biebl]

reopen 608301
retitle 608301 no access to sleep/wake D-Bus interface if root session active
severity 608301 normal
thanks


On 30.12.2010 10:56, Martin Steigerwald wrote:
> Am Thursday 30 December 2010 schrieb Martin Steigerwald:
>> Am Wednesday 29 December 2010 schrieben Sie:
>>> On 29.12.2010 20:15, Martin Steigerwald wrote:
>>>> Package: network-manager
>>>> Version: 0.8.2-3
>>>> Severity: important
>>>>
>>>> shambhala:~> dbus-send --print-reply --system
>>>> \
>>>>
>>>>         --dest=org.freedesktop.NetworkManager \
>>>>         /org/freedesktop/NetworkManager       \
>>>>         org.freedesktop.NetworkManager.wake
>>>>
>>>> Error org.freedesktop.DBus.Error.AccessDenied: Rejected send
>>>> message, 9 matched rules; type="method_call", sender=":1.369"
>>>> (uid=0 pid=1467 comm="dbus-send)
>>>> interface="org.freedesktop.NetworkManager" member="wake" error
>>>> name="(unset)" requested_reply=0
>>>> destination="org.freedesktop.NetworkManager" (uid=0 pid=1360
>>>> comm="/usr/sbin/NetworkManager))
> [...]
>>> This seems to be intentional:
>>> http://cgit.freedesktop.org/NetworkManager/NetworkManager/commit/?h=N
>>> M_ 0_8&id=878f6c4074acfdee42c320680f5529e01b909ba2
>>>
>>> running as root works fine here.
>>>
>>> If you want to change this configuration, see
>>>
>>> /etc/dbus-1/system.d/NetworkManager.conf.
>>
>> But I am running as root!
> 
> Its not even working from a tty1 where I directly logged in as root.

Well, that is actually the problem.
You are running the script as root with a full (ConsoleKit) session.

I bet, in your other test, you had a ConsoleKit session for root registered,
i.e. you had a file /var/run/console/root and ck-list-sessions showed a session
for root.

A CK session for root is registered, if you run su or if you login on the console.

If you run sudo (which I did) no CK session is registered or if you trigger
pm-suspend via D-Bus, the script runs with root privileges but no CK session.

The issue now is, that as soon as you have CK session for root, no longer the

<policy user="root"> ... </policy> section applies, but
<policy at_console="true"> ... </policy>, which denies access to sleep/wake.


Downgrading to normal, as pm-utils (and the NM sleep hook) is usually not
triggered manually from within a complete root session.

Dan, any suggestion how to address this issue?

Michael

-- 
Why is it that all of the instruments seeking intelligent life in the
universe are pointed away from Earth?

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 900 bytes
Desc: OpenPGP digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-utopia-maintainers/attachments/20101230/bb85d403/attachment-0001.pgp>