Making to/from gvariant/string methods in PolkitIdentity virtual

Nikki VonHollen vonhollen at google.com
Thu Nov 17 15:05:04 PST 2011


On Thu, Nov 17, 2011 at 2:24 PM, David Zeuthen <zeuthen at gmail.com> wrote:
> Hey,
>
> Sorry I missed your message, for some reason it was in my spam folder.

No problem.

> Before we start talking about specifics or the code, do you mean
> netgroup as in the NIS sense of the word, e.g
>
>  http://www.informit.com/library/content.aspx?b=red_hat_linux7&seqNum=143
>
> or something else?

Yes, netgroup as in what NIS and others provide via NSS. Specifically
'man 5 netgroup'.

>
> I'm also assuming the intent is to be able to use this together with a
> PKLA file, cf.
>
>  http://hal.freedesktop.org/docs/polkit/pklocalauthority.8.html
>
> so you can, for example, drop a file
>
>  /etc/polkit-1/localauthority/20-org.d/my-company-policy.pkla
>
> with contents
>
>  [Developers]
>  Identity=netgroup:xyz_developers
>  Action=com.example.xyz.*
>  ResultAny=no
>  ResultInactive=no
>  ResultActive=yes
>
> such that any user that is in the xyz_developers Netgroup is permitted
> for com.example.xyz.*
>
> Is that the intent?

Yep, exactly :-)

>
> Thanks,
> David
>

-- 
Nikki VonHollen
vonhollen at google.com


More information about the polkit-devel mailing list