Re: [PATCH 0/4] Upgrade connman to 1.0
From: Burton, Ross <hidden>
Date: 2012-05-29 22:23:15
On 29 May 2012 22:20, Koen Kooi [off-list ref] wrote:
quoted
Out of the box, root can access the service. There is another patch to add "xuser" for systems which run a raw X session as that user. If you're logging in with gdm to an arbitrary user, then the at_console test should work, right?No, our PAM magic is still not strong enough :( And worse, serial console doesn't work with at_console either.
Damn shame - totally bust access control is quite depressing. I'll revert that chunk and throw a large comment around it - can't have something some suspicious without any documentation. Hopefully without sounding like an ex-MeeGo fanboy, uxlaunch is actually pretty useful for this. It sets up a proper PAM login, brings up X, and handles XDG autostart. Might be worth looking at for single-user environments. Ross