hal: Branch 'master' - 2 commits

Holger Macht homac at kemper.freedesktop.org
Tue Mar 27 08:41:43 PDT 2007


 privileges/hal-power-cpufreq.privilege   |    6 +++---
 privileges/hal-power-hibernate.privilege |    6 +++---
 privileges/hal-power-suspend.privilege   |    6 +++---
 3 files changed, 9 insertions(+), 9 deletions(-)

New commits:
diff-tree af0658e1afae94aebcaf00fcffa8fccdec1d5cba (from parents)
Merge: 8220fb7a1fc3e17470bde7161de6cc66f3fdd0f9 916c9b2d7291561ef53cc1a96f28c4801d1eb0b7
Author: Holger Macht <holger at homac.de>
Date:   Tue Mar 27 17:41:27 2007 +0200

    Merge branch 'master' of git+ssh://homac@git.freedesktop.org/git/hal

diff-tree 8220fb7a1fc3e17470bde7161de6cc66f3fdd0f9 (from 28fc2fa7c6bbde540d4f17e810ab59fda0c186ba)
Author: Holger Macht <holger at homac.de>
Date:   Tue Mar 27 17:40:09 2007 +0200

    allow hibernate, suspend and CPUFreq for the root user independent of desktop-console
    
    This changes the logic how privileges for hibernate, suspend and cpufreq
    are determined. Now, the root user is granted to do hibernate, suspend and
    all CPUFreq methods with no regard to the desktop-console privilege. In the
    past, the application/script checking if the caller is allowed to do
    something, had to explicitly grant access for the root user with checking
    for uid == 0. The new method exclusively grants access for the root user,
    but specifies that others can possess the privilege as soon as they possess
    the desktop-console privilege. This way, the lower lever application/script
    does not have to handle any special case, it just has to check if the
    caller (whether root or not) possesses the specific privilege.

diff --git a/privileges/hal-power-cpufreq.privilege b/privileges/hal-power-cpufreq.privilege
index cee08b4..49df022 100644
--- a/privileges/hal-power-cpufreq.privilege
+++ b/privileges/hal-power-cpufreq.privilege
@@ -3,9 +3,9 @@
 # via the org.freedesktop.Hal.Device.CPUFreq interface
 
 [Privilege]
-RequiredPrivileges=desktop-console
-SufficientPrivileges=
-Allow=uid:__all__
+RequiredPrivileges=
+SufficientPrivileges=desktop-console
+Allow=uid:root
 Deny=
 CanObtain=True
 CanGrant=True
diff --git a/privileges/hal-power-hibernate.privilege b/privileges/hal-power-hibernate.privilege
index d93c4bd..0fd5037 100644
--- a/privileges/hal-power-hibernate.privilege
+++ b/privileges/hal-power-hibernate.privilege
@@ -2,9 +2,9 @@
 # This privilege specifies who is allowed to hibernate the system.
 
 [Privilege]
-RequiredPrivileges=desktop-console
-SufficientPrivileges=
-Allow=uid:__all__
+RequiredPrivileges=
+SufficientPrivileges=desktop-console
+Allow=uid:root
 Deny=
 CanObtain=True
 CanGrant=True
diff --git a/privileges/hal-power-suspend.privilege b/privileges/hal-power-suspend.privilege
index fb20576..2f39d07 100644
--- a/privileges/hal-power-suspend.privilege
+++ b/privileges/hal-power-suspend.privilege
@@ -2,9 +2,9 @@
 # This privilege specifies who is allowed to suspend the system.
 
 [Privilege]
-RequiredPrivileges=desktop-console
-SufficientPrivileges=
-Allow=uid:__all__
+RequiredPrivileges=
+SufficientPrivileges=desktop-console
+Allow=uid:root
 Deny=
 CanObtain=True
 CanGrant=True


More information about the hal-commit mailing list