[OpenIndiana-discuss] time-slider will not start due to dbus security policy on oi151a-text

[Jan Owoc]

Hi,


I'm having trouble starting time-slider on the text version of oi151a.
Steps to reproduce:

1. Install oi151a text.


2. Reboot. Login. Run:
# pkg install time-slider
# svcadm enable -r time-slider


3. Obtain error. Time-slider put in "maintenance" mode.
# svcs -xv
svc:/application/time-slider:default (GNOME Desktop Snapshot Management Service)
 State: maintenance since January 23, 2012 10:30:10 AM MST
Reason: Start method exited with $SMF_EXIT_ERR_FATAL.
   See: http://sun.com/msg/SMF-8000-KS
   See: man -M /usr/share/man -s 1M zfs
   See: /var/svc/log/application-time-slider:default.log
Impact: This service is not running.

# cat /var/svc/log/application-time-slider\:default.log
[ Jan 23 10:29:12 Disabled. ]
[ Jan 23 10:29:12 Rereading configuration. ]
[ Jan 23 10:30:06 Enabled. ]
[ Jan 23 10:30:06 Executing start method ("/lib/svc/method/time-slider
start"). ]
crontab: can't open your crontab file.
Traceback (most recent call last):
  File "/usr/lib/time-sliderd", line 10, in <module>
    main(abspath(__file__))
  File "/usr/lib/../share/time-slider/lib/time_slider/timesliderd.py",
line 956, in main
    name = dbus.service.BusName("org.opensolaris.TimeSlider", systemBus)
  File "/usr/lib/python2.6/vendor-packages/dbus/service.py", line 129,
in __new__
    retval = bus.request_name(name, name_flags)
  File "/usr/lib/python2.6/vendor-packages/dbus/bus.py", line 306, in
request_name
    'su', (name, flags))
  File "/usr/lib/python2.6/vendor-packages/dbus/connection.py", line
630, in call_blocking
    message, timeout)
dbus.exceptions.DBusException:
org.freedesktop.DBus.Error.AccessDenied: Connection ":1.2" is not
allowed to own the service "org.opensolaris.TimeSlider" due to
security policies in the configuration file
Time Slider failed to start: error 95
[ Jan 23 10:30:10 Method "start" exited with status 95. ]


Work-around (?):
I poked around the system, and found that a work-around is to remove
the restrictions of ownership of the service in the file
/etc/dbus-1/system.d/time-slider.conf

These restrictions are likely there for a reason, so this work-around
is not a solution. In addition, they are present in the gui version of
oi151a, and time-slider seems to work fine (assuming one runs the
graphical time-slider-setup).


What I need is the autosnapshot capability of timeslider. Is there a
way of enabling autosnapshots without the security work-around or
using the graphical setup program?


Jan