<html><body><div style="color:#000; background-color:#fff; font-family:times new roman, new york, times, serif;font-size:12pt"><div><span>Hi Bastien,</span></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: times new roman,new york,times,serif; background-color: transparent; font-style: normal;"><br><span></span></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: times new roman,new york,times,serif; background-color: transparent; font-style: normal;"><span>Well I could be working against the stream - you tell me, please.</span></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: times new roman,new york,times,serif; background-color: transparent; font-style: normal;"><br><span></span></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: times new roman,new york,times,serif; background-color: transparent; font-style: normal;"><span>What I am attempting to do is this: We have an
application (Qt based) where we would like to use fingerprints to authorize the use of some functionality. So the application itself will not be "changing user" rather it just needs to know who is actually authorizing a special operation at a certain point in time.</span></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: times new roman,new york,times,serif; background-color: transparent; font-style: normal;"><br><span></span></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: times new roman,new york,times,serif; background-color: transparent; font-style: normal;"><span>I know you built the fprintd specially targetting PAM, but since Qt has an excellent DBUS support it seemed obvious to let fprintd connect to Qt using DBUS to facilitate the authorization. Its a bit different than the log-in procedure.</span></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: times new roman,new york,times,serif;
background-color: transparent; font-style: normal;"><br><span></span></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: times new roman,new york,times,serif; background-color: transparent; font-style: normal;"><span>But thanks anyway for your reply, it was helpful,</span></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: times new roman,new york,times,serif; background-color: transparent; font-style: normal;"><br><span></span></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: times new roman,new york,times,serif; background-color: transparent; font-style: normal;"><span>Sincerely,</span></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: times new roman,new york,times,serif; background-color: transparent; font-style: normal;"><span>Karsten Jeppesen</span></div><div><br></div> <div style="font-family: times new roman, new york, times, serif; font-size: 12pt;"> <div
style="font-family: times new roman, new york, times, serif; font-size: 12pt;"> <div dir="ltr"> <font face="Arial" size="2"> <hr size="1"> <b><span style="font-weight:bold;">From:</span></b> Bastien Nocera <hadess@hadess.net><br> <b><span style="font-weight: bold;">To:</span></b> Karsten Jeppesen <arm9263@yahoo.com> <br><b><span style="font-weight: bold;">Cc:</span></b> fprint mailing list <fprint@lists.freedesktop.org> <br> <b><span style="font-weight: bold;">Sent:</span></b> Tuesday, August 28, 2012 3:51 PM<br> <b><span style="font-weight: bold;">Subject:</span></b> Re: [fprint] Is there an option for fprintd to disable policy checking?<br> </font> </div> <br>On Tue, 2012-08-28 at 05:25 -0700, Karsten Jeppesen wrote:<br>> Hi Guys,<br>> <br>> <br>> <br>> <br>> On embedded platforms (ARM9) there are but one user: root. (Not like<br>> highlander, there can be more than one) but usually not.<br>> And theres isn't
that much space.<br>> So the policy checking in device.c<br>> Can it be disabled? (doesn't look like it)<br>> Just asking before using the big cut n paste approach.<br><br>I don't understand why you'd want or need to do that when:<br>- you already use D-Bus and dbus-glib<br>- you should _really_ be using separate users otherwise what's the point<br>of using fprintd when you could talk to the fingerprint reader directly<br>(and lose all privileges separation at the same time)<br><br>It's not possible to remove the dependency, and there's no plans to make<br>that possible.<br><br>Cheers<br><br><br><br><br> </div> </div> </div></body></html>