Bug#501576: [Fwd: Re: PK: suid binaries, libpolkit]

[Michael Biebl]

-- 
Why is it that all of the instruments seeking intelligent life in the
universe are pointed away from Earth?

--- Begin Message ---

David Zeuthen wrote:

On Wed, 2008-04-23 at 01:54 +0200, Michael Biebl wrote:

Ok, I guess I have to say a few words about that. In Debian library packages are usually named $libraryname$soversion. Atm this would be

libpolkit2, where libpolkit2 contains:

/usr/lib/libpolkit.so.2.0.0
/usr/lib/libpolkit.so.2

The reason for this is, that library packages with different sonames are coninstallable, which makes library transitions (i.e. libpolkit2 -> libpolkit3) easier. If I would put /var/lib/misc/PolicyKit.reload into libpolkit2 and libpolkit3, I'd have a file conflict between those two packages.

Is /var/lib/misc/PolicyKit.reload the only file that is required by libpolkit, or does libpolkit also expect /var/lib/PolicyKit(-public) to be existent?

The problem is what to do in polkit-set-default-helper if the
directory /var/lib/PolicyKit-public doesn't exist... we'd have to
return an error. Ditto for /var/{run,lib}/PolicyKit and the helpers
there

Hm, /var/lib/misc/PolicyKit.reload could be split into a separate package libpolkit-common or so. But that would be additional effort and overhead (a separate package for an empty file ;-) )

If this was an RPM based system I'd just create the file in %post ;-).
Somewhat a hack but I bet it would work .. modulo SELinux labeling
problems.

console-kit-daemon[28160]: CRITICAL: cannot initialize libpolkit






Cheers,
Michael



--
Why is it that all of the instruments seeking intelligent life in the
universe are pointed away from Earth?

Hm, seems as if libpolkit also tries to set an inotify watch on /etc/PolicyKit/PolicyKit.conf, resulting in a failure of CK: console-kit-daemon[28160]: GLib-CRITICAL: g_async_queue_unref: assertion `queue->waiting_threads == 0' failed The other possible problem is, that I currently create the polkituser in the postinst of the policykit package, so I could create a file /var/lib/misc/PolicyKit.reload in postinst of libpolkit, but not chown it (unless I move the user creation into postinst of libpolkit). Brings me back to the initial question: Could libpolkit be changed to work without those files being installed?

signature.asc
Description: OpenPGP digital signature

--- End Message ---

signature.asc
Description: OpenPGP digital signature