Re: system-tools-backends 2.17

Carlos Garnacho <[email protected]> Thu, 09 Nov 2006 18:39:49 +0100
Newsgroups gmane.comp.gnome.system-tools
Message-ID <1163093989.24604.79.camel__21995.6698980697$1163094015$gmane$org@localhost>
--=-V3vYJHmKATAJm1WuEv3K
Content-Type: text/plain
Content-Transfer-Encoding: 7bit

On Thu, 2006-11-09 at 12:21 -0500, Joe Marcus Clarke wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> Carlos Garnacho wrote:
> > Hi!
> > 
> > On Wed, 2006-11-08 at 17:38 -0500, Joe Marcus Clarke wrote:
> >> I'm having a pretty difficult time getting the latest
> >> system-tools-backends to like FreeBSD.  I was hoping I could get a few
> >> questions answered.
> >>
> >> 1. s-t-b tries to find its D-BUS service using the system bus.  However,
> >> the system bus has no concept of service directories, so this causes
> >> Nautilus to fail to launch since the org.freedesktop.SystemToolsBackends
> >> service cannot be found.  If I add the following to D-BUS's system.conf,
> >> I can get over this hurdle:
> > 
> > Ideally, the backends have to be run as root (they need it to change
> > system configuration) by a script in /etc/dbus-1/event.d, the service
> > file is mostly a fallback to make tools at least show something instead
> > of failing miserably :)
> > 
> > Sadly, due to the diversity of init script types out there, I'm not
> > including any at the moment, so packages should provide their own.
> 
> Oh, cool.  This is the first I've heard of event.d scripts.  Do you have
> an example for s-t-b I could look at?

Hmmm, after reading the DBus initscript, I now realize that it's a
distros' artifact to raise or stop services in the system bus (HAL,
NetworkManager, s-t-b, ...). It's the DBus initscript the one that goes
to that directory and launches the scripts in there... 

At least, all Linux distributions that ship DBus have it, and IIRC some
apps already rely on /etc/dbus-1/event.d/ usage, but running s-t-b
during init as root should be just ok.

I'm attaching both Ubuntu's DBus initscript and s-t-b event.d file, hope
it's a good example :)

	Regards


> 
> > 
> >> <standard_session_servicedirs />
> >>
> >> Why should I need that?  Shouldn't s-t-b be using the session bus like
> >> other applications (e.g. gnome-vfs-daemon, gnome-power-manager, etc.)?
> >> Note: I am using dbus-0.95.
> > 
> > s-t-b changes affect the whole system, besides that, they very probably
> > need to run as a different user than the session bus, and IIRC that's
> > something that's not allowed to happen, and besides that, privileges
> > scalation would be a complete hack...
> > 
> > Instead, the backends are supposed to be running already as root, using
> > DBus policies to block access from untrusted users, only root user and
> > users in stb-admin group are allowed to access backends (the admin group
> > may be modified using --with-stb-group=foo during configure)
> 
> I'm absolutely making use of this configure argument to allow users in
> the wheel group to use s-t-b.  I just need to know how to get things
> started, and I think a sample event.d script would go a long way.
> 
> > 
> > In a close future s-t-b will be using PolicyKit, it will allow much more
> > fine grained permissions than DBus policies.
> > 
> >> 2. s-t-b fails to run as a daemon
> >> (i.e. /usr/local/share/system-tools-backends-2.0/scripts/SystemToolsBackends.pl exits with a status of 0).  This is caused by the daemon not being able to write its PID file to /var/run.  This is understandable as the script is being run by my user, and only root can write to this directory.  My question is, who should be running this script?  Should I be hacking it to write its PID to a directory that is writable by the stb-admin group?
> > 
> > as explained above, "stb-admin" is used to determine which users can
> > access the backends, the backends should run as root however...
> > 
> > Backends failing because they can't write to the pidfile shouldn't be
> > happening, though...
> 
> This will go away if s-t-b is started as root.
> 
> > 
> >> Note: I can also get around this problem by adding --no-daemon to the
> >> D-BUS service config.
> >>
> >> 3. Finally, why does Nautilus try to initialize liboobs when trying to
> >> get SMB share information?  Where in the code path does that occur?
> > 
> > That's the nautilus extension in shares-admin to show an emblem on
> > shared folders, it's in g-s-t/src/shares/nautilus
> 
> Yep, figured this out right after I emailed the list.  I didn't think to
> look at the g-s-t pkg-plist.
> 
> > 
> > I'm sorry for the confusions, perhaps it all should be documented
> > somewhere...
> 
> No problem.  I think the big gotcha would be the event.d script.
> 
> Joe
> 
> - --
> Joe Marcus Clarke
> FreeBSD GNOME Team	::	[email protected]
> FreeNode / #freebsd-gnome
> http://www.FreeBSD.org/gnome
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.5 (Darwin)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
> 
> iD8DBQFFU2ONb2iPiv4Uz4cRAroFAJ4yn3LPoYvQqRy/A9FM7BUPx+jdRgCgnTUL
> ku7jLmzFwnlVUiiA9Crf21U=
> =q+jT
> -----END PGP SIGNATURE-----

--=-V3vYJHmKATAJm1WuEv3K
Content-Disposition: attachment; filename=dbus
Content-Type: application/x-shellscript; name=dbus
Content-Transfer-Encoding: base64

IyEgL2Jpbi9zaAojIyMgQkVHSU4gSU5JVCBJTkZPCiMgUHJvdmlkZXM6ICAgICAgICAgIGRidXMK
IyBSZXF1aXJlZC1TdGFydDogICAgJGxvY2FsX2ZzICRzeXNsb2cKIyBSZXF1aXJlZC1TdG9wOiAg
ICAgJGxvY2FsX2ZzICRzeXNsb2cKIyBEZWZhdWx0LVN0YXJ0OiAgICAgMiAzIDQgNQojIERlZmF1
bHQtU3RvcDogICAgICBTIDAgMSA2CiMjIyBFTkQgSU5JVCBJTkZPCiMgLSotIGNvZGluZzogdXRm
LTggLSotCiMgRGViaWFuIGluaXQuZCBzY3JpcHQgZm9yIEQtQlVTCiMgQ29weXJpZ2h0IMKpIDIw
MDMgQ29saW4gV2FsdGVycyA8d2FsdGVyc0BkZWJpYW4ub3JnPgojIENvcHlyaWdodCDCqSAyMDA1
IFNqb2VyZCBTaW1vbnMgPHNqb2VyZEBkZWJpYW4ub3JnPgoKc2V0IC1lCgpEQUVNT049L3Vzci9i
aW4vZGJ1cy1kYWVtb24KTkFNRT1kYnVzCkRBRU1PTlVTRVI9bWVzc2FnZWJ1cwpQSURESVI9L3Zh
ci9ydW4vZGJ1cwpQSURGSUxFPSRQSURESVIvcGlkCkRFU0M9InN5c3RlbSBtZXNzYWdlIGJ1cyIK
RVZFTlRESVI9L2V0Yy9kYnVzLTEvZXZlbnQuZAoKdGVzdCAteCAkREFFTU9OIHx8IGV4aXQgMAoK
LiAvbGliL2xzYi9pbml0LWZ1bmN0aW9ucwoKIyBTb3VyY2UgZGVmYXVsdHMgZmlsZTsgZWRpdCB0
aGF0IGZpbGUgdG8gY29uZmlndXJlIHRoaXMgc2NyaXB0LgpFTkFCTEVEPTEKUEFSQU1TPSIiCmlm
IFsgLWUgL2V0Yy9kZWZhdWx0L2RidXMgXTsgdGhlbgogIC4gL2V0Yy9kZWZhdWx0L2RidXMKZmkK
CnRlc3QgIiRFTkFCTEVEIiAhPSAiMCIgfHwgZXhpdCAwCgpzdGFydF9pdF91cCgpCnsKICBpZiBb
ICEgLWQgJFBJRERJUiBdOyB0aGVuCiAgICBta2RpciAtcCAkUElERElSCiAgICBjaG93biAkREFF
TU9OVVNFUiAkUElERElSCiAgICBjaGdycCAkREFFTU9OVVNFUiAkUElERElSCiAgZmkKICBpZiBb
IC1lICRQSURGSUxFIF07IHRoZW4KICAgIFBJRERJUj0vcHJvYy8kKGNhdCAkUElERklMRSkKICAg
IGlmIFsgLWQgJHtQSURESVJ9IC1hICAiJChyZWFkbGluayAtZiAke1BJRERJUn0vZXhlKSIgPSAi
JHtEQUVNT059IiBdOyB0aGVuIAogICAgICBsb2dfc3VjY2Vzc19tc2cgIiRERVNDIGFscmVhZHkg
c3RhcnRlZDsgbm90IHN0YXJ0aW5nLiIKICAgIGVsc2UKICAgICAgbG9nX3N1Y2Nlc3NfbXNnICJS
ZW1vdmluZyBzdGFsZSBQSUQgZmlsZSAkUElERklMRS4iCiAgICAgIHJtIC1mICRQSURGSUxFCiAg
ICBmaQogIGZpCiAgbG9nX2RhZW1vbl9tc2cgIlN0YXJ0aW5nICRERVNDIiAiJE5BTUUiCiAgc3Rh
cnQtc3RvcC1kYWVtb24gLS1zdGFydCAtLXF1aWV0IC0tcGlkZmlsZSAkUElERklMRSBcCiAgICAt
LXVzZXIgJERBRU1PTlVTRVIgLS1leGVjICREQUVNT04gLS0gLS1zeXN0ZW0gJFBBUkFNUwogIGxv
Z19lbmRfbXNnICQ/CiAgaWYgWyAtZCAkRVZFTlRESVIgXTsgdGhlbgogICAgICBydW4tcGFydHMg
LS1hcmc9c3RhcnQgJEVWRU5URElSIHx8IHRydWUKICBmaQp9CgpzaHV0X2l0X2Rvd24oKQp7CiAg
aWYgWyAtZCAkRVZFTlRESVIgXTsgdGhlbgogICAgICBydW4tcGFydHMgLS1yZXZlcnNlIC0tYXJn
PXN0b3AgJEVWRU5URElSIHx8IHRydWUKICBmaQogIGxvZ19kYWVtb25fbXNnICJTdG9wcGluZyAk
REVTQyIgIiROQU1FIgogIHN0YXJ0LXN0b3AtZGFlbW9uIC0tc3RvcCAtLXJldHJ5IDYwIC0tcXVp
ZXQgLS1va25vZG8gLS1waWRmaWxlICRQSURGSUxFIFwKICAgIC0tdXNlciAkREFFTU9OVVNFUgog
ICMgV2Ugbm8gbG9uZ2VyIGluY2x1ZGUgdGhlc2UgYXJndW1lbnRzIHNvIHRoYXQgc3RhcnQtc3Rv
cC1kYWVtb24KICAjIGNhbiBkbyBpdHMgam9iIGV2ZW4gZ2l2ZW4gdGhhdCB3ZSBtYXkgaGF2ZSBi
ZWVuIHVwZ3JhZGVkLgogICMgV2UgcmVseSBvbiB0aGUgcGlkZmlsZSBiZWluZyBzYW5lbHkgbWFu
YWdlZAogICMgLS1leGVjICREQUVNT04gLS0gLS1zeXN0ZW0gJFBBUkFNUwogIGxvZ19lbmRfbXNn
ICQ/CiAgcm0gLWYgJFBJREZJTEUKfQoKcmVsb2FkX2l0KCkKewogIGxvZ19iZWdpbl9tc2cgIlJl
bG9hZGluZyAkREVTQyBjb25maWciCiAgZGJ1cy1zZW5kIC0tcHJpbnQtcmVwbHkgLS1zeXN0ZW0g
LS10eXBlPW1ldGhvZF9jYWxsIFwKICAgICAgICAgICAgLS1kZXN0PW9yZy5mcmVlZGVza3RvcC5E
QnVzIFwKICAgICAgICAgICAgLyBvcmcuZnJlZWRlc2t0b3AuREJ1cy5SZWxvYWRDb25maWcgPiAv
ZGV2L251bGwKICAjIGhvcGVmdWxseSB0aGlzIGlzIGVub3VnaCB0aW1lIGZvciBkYnVzIHRvIHJl
bG9hZCBpdCdzIGNvbmZpZyBmaWxlLgogIGxvZ19lbmRfbXNnICQ/Cn0KCmNhc2UgIiQxIiBpbgog
IHN0YXJ0KQogICAgc3RhcnRfaXRfdXAKICA7OwogIHN0b3ApCiAgICBzaHV0X2l0X2Rvd24KICA7
OwogIHJlbG9hZHxmb3JjZS1yZWxvYWQpCiAgICByZWxvYWRfaXQKICA7OwogIHJlc3RhcnQpCiAg
ICBzaHV0X2l0X2Rvd24KICAgIHN0YXJ0X2l0X3VwCiAgOzsKICAqKQogICAgZWNobyAiVXNhZ2U6
IC9ldGMvaW5pdC5kLyROQU1FIHtzdGFydHxzdG9wfHJlbG9hZHxyZXN0YXJ0fGZvcmNlLXJlbG9h
ZH0iID4mMgogICAgZXhpdCAxCiAgOzsKZXNhYwoKZXhpdCAwCg==


--=-V3vYJHmKATAJm1WuEv3K
Content-Disposition: attachment; filename=70system-tools-backends
Content-Type: application/x-shellscript; name=70system-tools-backends
Content-Transfer-Encoding: base64
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--=-V3vYJHmKATAJm1WuEv3K
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
system-tools-list mailing list
[email protected]
http://mail.gnome.org/mailman/listinfo/system-tools-list

--=-V3vYJHmKATAJm1WuEv3K--