Re: Re: [opensuse-packaging] Proposal for a multimedia team.

On 11/25/2010 12:54 AM, Pedro Lopez-Cabanillas wrote:
> On Wednesday 24 November 2010, Dave Plater wrote:
>   
>> I would like to achieve is a jack that just works with no tweaking but
>> it seems there is a security problem with a %post rpm script granting real time rights when jack is installed.
>>     
> Can we see this %post script? Is it modifying /etc/security/limits.conf and/or something else?
>
> Regards,
> Pedro
>   
I simply inquired, on the packaging list about the existence of a macro
to add the entries that jack needs to /etc/security/limits.conf and one
of the factory reviewers replied quote :
"I'd veto such abuse of the audio group. The jack daemon needs to be
started with appropriate privileges, ie either by a supervising root
process or via setuid/fscaps."
and when I explained that jack was normally run as a users process and
was normally started by the application that wished to use it quote :
"Just as cited above :-) Either some root process needs to start jackd
as the intended user with the necessary privileges (e.g. via DBus) or
you need to make jackd setuid root/grant fscaps. If jackd isn't prepared
to run that way you could also write a small wrapper for that purpose.
In any case the security team wants to review such things prior to
inclusion in Factory."

I haven't quite digested this information yet but it doesn't look like
there's any other way to achieve this besides sed. What I don't quite
understand yet is what I have to do to enable this to be accepted into
factory although I'm starting to understand the reason for jack dbus,
which doesn't work for rosegarden. I've test built a jack with both
classic and dbus which works with rosegarden although I perceived a slow
down and the warning when built, also my instinct, says be wary of this.

I've only about 5 to 8 years, self taught, linux experience, my
programming has all been win98se multimedia and dedicated arcade games
at assembler level and getting a jack that "just works" is the thing
that prompted me to start this thread.

Do you understand from the quoted replies above what is needed to get a
jack that "just works"?

Thanks
Dave P