Control: retitle -1 does not cleanup sessions when user logs out

Cameron Norman [2014-09-28 14:35 -0700]:
> While this is true, it seems that device permissions are actually removed
> correctly.

Not here actually. At least under current Ubuntu, when I log out my
"test" user, the automatic ACL on /dev/kvm persists as long as the
corresponding logind session remains in "closing" state. This might
look differently in other scenarios, but that it happens in some
scenarios is IMHO enough to justify the high severity.

I adjust the bug title as the "org.freedesktop.systemd1.Scope" part
was implemented a while ago. Indeed the cgroups get cleaned up
properly, just nothing tells logind about that as there is currently
no notify_on_release being set/used. I'm looking into that now.

Thanks,

Martin
-- 
Martin Pitt                        | http://www.piware.de
Ubuntu Developer (www.ubuntu.com)  | Debian Developer  (www.debian.org)

Attachment: signature.asc
Description: Digital signature

Reply via email to