Re: [systemd-devel] timedate1 permissions

2021-02-17 Thread Greg Wilson-Lindberg
Hi Mantas, That was the advice that I needed. I modified our Yocto build to include polkit, added datetime group to our user and now it’s working. Thanks, Greg From: Mantas Mikulėnas Sent: Wednesday, February 17, 2021 10:56 AM To: Greg Wilson-Lindberg Cc: systemd-devel@lists.freedesktop.org Su

Re: [systemd-devel] systemd-ask-password causes systemd to use very high CPU

2021-02-17 Thread Barry Scott
Is there any work around that I can use? Barry > On 23 Jan 2021, at 14:32, Barry Scott wrote: > > I opened this bug: https://bugzilla.redhat.com/show_bug.cgi?id=1919538 > > > I'd love to know if there is a work around until you have time

Re: [systemd-devel] timedate1 permissions

2021-02-17 Thread Mantas Mikulėnas
Systemd D-Bus services use polkit for authorization when the message is sent by someone not uid 0. Depending on which version you have, you can write a .pkla file (Debian) or a JavaScript function (other distros) that allows a specific action for a specific user or group. You'll want to allow the

[systemd-devel] timedate1 permissions

2021-02-17 Thread Greg Wilson-Lindberg
First, I hope that I have found the proper list for this question, if not I'm sorry to bother you all. I'm trying to run a program that changes the timezone. Our application is using the dbus facility to change the time zone. It works when run as root but fails when run as our user. I had thoug

[systemd-devel] Design patterns for privilege separating systemd services?

2021-02-17 Thread Colin Walters
I'm having a debate with the SSSD team over here around multiple systemd units and privilege separation: https://github.com/SSSD/sssd/issues/3412 And we also had a related topic come up in Fedora CoreOS where we have a privileged service (rpm-ostreed.service) and we want a separate unprivileged