[Pkg-utopia-maintainers] Bug#668251: Bug#668251: org.freedesktop.ConsoleKit.Manager.Stop not working

[Michael Biebl]

Am 10.04.2012 16:38, schrieb Simon McVittie:
> On 10/04/12 08:59, Harald Dunkel wrote:
>> Even though I am in group powerdev and I am sitting on the console
>> I am not authorized to shutdown the host via dbus. Sample session:
>>
>> % dbus-send --print-reply --system
>> --dest=org.freedesktop.ConsoleKit
>> /org/freedesktop/ConsoleKit/Manager
>> org.freedesktop.ConsoleKit.Manager.Stop Error
>> org.freedesktop.ConsoleKit.Manager.NotPrivileged: Not Authorized
> 
> This error means that ConsoleKit asked PolicyKit whether you were
> allowed to use Stop, and PolicyKit replied "no" (without error).
> 
> If you haven't edited the policy, it seems the default is:
> 
>     <defaults>
>       <allow_inactive>no</allow_inactive>
>       <allow_active>yes</allow_active>
>     </defaults>
> 
> or if multiple users are logged in,
> 
>     <defaults>
>       <allow_inactive>no</allow_inactive>
>       <allow_active>auth_admin_keep</allow_active>
>     </defaults>
> 
> That should mean that you can Stop the system if your session is
> considered active, but if another user is logged-in in parallel, you
> have to authenticate first.
> 
> If you run ck-list-sessions, does it say your session is active?

Being in group powerdev is not relevant for being able to shut down your
system.

Simon's remark is correct:
If you are the only logged in user and you are issuing the shutdown
request from a user session which is marked as active *and* no other
user is logged in, then this request is granted.
If another user is logged in, you need admin privileges.
That means PolicyKit will prompt you for the admin password (this can be
the root password or your own, if you are in group sudo).

I don't really see an issue in ConsoleKit atm, so I'm inclined to close
this bug.

Michael





-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 898 bytes
Desc: OpenPGP digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-utopia-maintainers/attachments/20120410/b84ef134/attachment.pgp>