From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) by finch.gentoo.org (Postfix) with ESMTP id 6C7FE138247 for ; Fri, 17 Jan 2014 04:59:30 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 7C690E0B9E; Fri, 17 Jan 2014 04:59:23 +0000 (UTC) Received: from smtp.gentoo.org (smtp.gentoo.org [140.211.166.183]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 5618EE0B85 for ; Fri, 17 Jan 2014 04:59:22 +0000 (UTC) Received: from [10.185.59.211] (85-76-139-44-nat.elisa-mobile.fi [85.76.139.44]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) (Authenticated sender: ssuominen) by smtp.gentoo.org (Postfix) with ESMTPSA id E333433EE7F for ; Fri, 17 Jan 2014 04:59:20 +0000 (UTC) Message-ID: <52D8B7F4.3060709@gentoo.org> Date: Fri, 17 Jan 2014 06:56:20 +0200 From: Samuli Suominen User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:24.0) Gecko/20100101 Thunderbird/24.2.0 Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@lists.gentoo.org Reply-to: gentoo-user@lists.gentoo.org MIME-Version: 1.0 To: gentoo-user@lists.gentoo.org Subject: Re: [gentoo-user] Re: KDE slow / console-kit-daemon POLKIT_IS_AUTHORITY failed References: <1389784897.14951.0@numa-i.igpm.rwth-aachen.de> <20140115113744.2d176ced@hactar.digimed.co.uk> <52D72880.2090007@gmail.com> <20140116092309.1cd380a0@digimed.co.uk> <20140116173945.4d27feae@hactar.digimed.co.uk> In-Reply-To: <20140116173945.4d27feae@hactar.digimed.co.uk> Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 8bit X-Archives-Salt: c1b5ed5e-b258-4d12-bcd6-d68081adbc48 X-Archives-Hash: 7b35d69b6db84eaefbebacf57172b6fe On 16/01/14 19:39, Neil Bothwick wrote: > On Thu, 16 Jan 2014 10:19:22 -0600, Canek Peláez Valdés wrote: > >>>> Helmut is still using consolekit. Are you still using consolekit? >>> Yes, it's the default for kdm so it is enabled on both computers. >> I don't think it will be the default for much longer; it's unmaintained >> code which sooner or later will start to bitrot. Unless someone steps in >> and starts taking care of it. > Quite likely, but for now it is the default and in use on both systems in > question. > >>>> I have no idea if consolekit is relevant here, but Canek has been >>>> telling us that consolekit is abandonware and we should stop >>>> depending on it. >>> That's part of the drive to put everything in systemd, which I do not >>> use. >> Fact is, nobody is maintaining ck; from its homepage[1]: >> >> "ConsoleKit is currently not actively maintained. The focus has shifted >> to the built-in seat/user/session management of Software/systemd called >> systemd-logind!" > That's what I was paraphrasing above. I checked the latest status on that > page before replying. > >> That message has been there for months; in general ck kinda still works, >> although it never really solved the problem of properly tracking user >> sessions, which is why everybody involved with it quickly jumped ship to >> logind, where the problem is properly solved. > The issue for many is that logind is so closely tied to systemd. > >> However, as the interfaces in the stack evolves, unmaintained code like >> ck will simply stop to work. ConsoleKit uses dbus heavily, and with the >> introduction of kdbus[2] and the inevitable changes that will happen to >> dbus, combined with nobody taking care of ck, I don't think it will keep >> working much longer. > That's a reasonable prediction. >> Ubuntu and Debian (now that is seriously discussing which modern init >> system to use) have been discussing an alternative, API compatible >> implementation of logind, but I don't know if it has got nowhere. I >> think that has more future than ck, but again, nobody (AFAIK) has >> stepped in and do the heavy coding. > Leaving aside my concerns about systemd, I am not happy with the "all > eggs in one basket" direction things seem to be taking. Whatever happened > to tolls doing one job and doing it well? > >> Independently, though, I think is safe to say that ConsoleKit is a dead >> end. > In the future, most probably. but right now it is the preferred option > for KDM. > > Right, only GDM (the display manager for GNOME) has dropped ConsoleKit support so far, that I know, in versions 3.8 and later So other than GNOME, ConsoleKit is still a go -- thus, compatible with OpenRC based system For KDE it might be something else than dbus-glib that needs a recompile, I'd imagine something like kdelibs or polkit-kde-agent, or both It could be something else too, but setting the suid bit on dbus-daemon-launch-helper is stupidest idea ever, that *really* allows anyone to gain root However if you run a machine with single user and no open ports on the machine whatsoever, the attack vector is propably very small, but I still wouldn't do it - Samuli