[oi-dev] glib changes review
alp at rsu.ru
Fri Mar 11 12:03:06 UTC 2016
The issue is that glib incorrectly detects pfexec usage as setuid
program (even when pfexec doesn't change euid). So, it refuses to launch
dbus - https://github.com/GNOME/glib/blob/master/gio/gdbusaddress.c#L1060
We heal it by falling back to euid/uid comparison. We also use pfexec to
launch brasero and sound-juicer.
console user (Console User) should have "Desktop Removable Media User"
profile and have sys_devices privileges, necessary for brasero and sound
juicer (which uses brasero libraries) to work with CD devices.
I'm a bit concerned about unexpected security issues which it could cause...
system administrator of Southern Federal University IT department
More information about the oi-dev