[Pkg-utopia-maintainers] Bug#566596: Bug#566596: policykit-1: ResultAny only applies to non-local sessions

[Michael Biebl]

This is certainly an upstream issue so I'll bring David into the loop as I'm
interested in his opinion on this issue and how it is solved best.

On 24.01.2010 01:12, Josh Triplett wrote:
> Package: policykit-1
> Version: 0.96-1
> Severity: normal
> 
> The pklocalauthority manpage describes the Result* keys as follows:
> 
>  ResultActive
>      The result to return for subjects in an active local session that
>      matches one or more of the given identities. Allowed values are
>      similar to what can be used in the defaults section of .policy
>      files used to define actions, e.g.  yes, no, auth_self,
>      auth_self_keep, auth_admin and auth_admin_keep.
> 
>  ResultInactive
>      Like ResultActive but instead applies to subjects in inactive local
>      sessions.
> 
>  ResultAny
>      Like ResultActive but instead applies to any subject.
> 
> I interpreted this to mean that ResultAny supersedes the others, since
> it "applies to any subject".  However, after much configuration
> difficulty, a look at the policykit-1 source showed that ResultAny
> only applies if not local.
> 
> I think it makes the most sense for policykit-1 to let ResultAny really
> mean "any": local or non-local.  It doesn't make sense to allow a
> certain action only if *not* at the console.
> 
> (Similarly, it would probably make sense to have ResultInactive apply to
> any local session, since it doesn't make sense to allow a certain action
> only if *not* active.)
> 
> However, if this will not change, then the manpage needs improvement to
> make it clear that "ResultAny" applies only if not local.



-- 
Why is it that all of the instruments seeking intelligent life in the
universe are pointed away from Earth?

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 262 bytes
Desc: OpenPGP digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-utopia-maintainers/attachments/20100124/1d83a2c0/attachment.pgp>