[systemd-devel] joystick doesn't respect seat rule

[Mantas Mikulėnas]

So the seat assignment works fine – gdm is added to the ACL.

The problem is that the devnode is *world-readable*.

-- 
Mantas Mikulėnas <grawity at gmail.com>
On May 28, 2014 8:57 PM, "Floris" <jkfloris at dds.nl> wrote:

> Op Wed, 28 May 2014 19:06:22 +0200 schreef Zbigniew Jędrzejewski-Szmek <
> zbyszek at in.waw.pl>:
>
>  On Wed, May 28, 2014 at 05:45:01PM +0200, Floris wrote:
>>
>>> >Are you logged in as the same user on both seats?
>>> >
>>>
>>> Nobody is logged in on seat1
>>>
>>> >I think the difference is that with `jstest`, the device doesn't
>>> >interact with your seat, but *you* are interacting directly with its
>>> >device node, so the only thing that's checked is devnode
>>> >permissions...
>>> >
>>>
>>> When I start a game on seat0 I can use the joystick attached to seat1
>>>
>> What does 'getfacl /dev/input/js0' say? And 'loginctl seat-status seat1'?
>>
>> Zbyszek
>>
>>  $ getfacl /dev/input/js0
> getfacl: Removing leading '/' from absolute path names
> # file: dev/input/js0
> # owner: root
> # group: root
> user::rw-
> user:Debian-gdm:rw-
> group::r--
> mask::rw-
> other::r--
>
> $ loginctl seat-status seat1
> seat1
>         Sessions: *c1
>          Devices:
>                   ├─/sys/devices/pci0000:00/0000:00:05.0/0000:02:00.0
>                   │ [MASTER] pci:0000:02:00.0
>                   ├─/sys/devices/pci0000:00/0000:00:05.0/0000:02:00.1/
> sound/card1
>                   │ sound:card1 "NVidia"
>                   │ ├─/sys/devices/pci0000:00/0000:00:05.0/0000:02:00.1/
> sound/card1/input14
>                   │ │ input:input14 "HDA NVidia HDMI/DP,pcm=7"
>                   │ └─/sys/devices/pci0000:00/0000:00:05.0/0000:02:00.1/
> sound/card1/input5
>                   │   input:input5 "HDA NVidia HDMI/DP,pcm=3"
>                   ├─/sys/devices/pci0000:00/0000:00:1a.0/usb1/1-1/1-1.4
>                   │ usb:1-1.4
>                   │ ├─/sys/devices/pci0000...000:
> 00:1a.0/usb1/1-1/1-1.4/1-1.4.1/1-1.4.1:1.0/0003:05FE:0011.
> 0005/input/input19
>                   │ │ input:input19 "Cypress Sem PS2/USB Browser Combo
> Mouse"
>                   │ ├─/sys/devices/pci0000...000:
> 00:1a.0/usb1/1-1/1-1.4/1-1.4.2/1-1.4.2:1.0/0003:046D:C312.
> 0006/input/input20
>                   │ │ input:input20 "BTC USB Multimedia Keyboard"
>                   │ ├─/sys/devices/pci0000...000:
> 00:1a.0/usb1/1-1/1-1.4/1-1.4.2/1-1.4.2:1.1/0003:046D:C312.
> 0007/input/input21
>                   │ │ input:input21 "BTC USB Multimedia Keyboard"
>                   │ ├─/sys/devices/pci0000...000:
> 00:1a.0/usb1/1-1/1-1.4/1-1.4.3/1-1.4.3:1.0/0003:0079:0006.
> 0008/input/input22
>                   │ │ input:input22 "DragonRise Inc.   Generic   USB
>  Joystick  "
>                   │ │ ├─/sys/devices/pci0000...0/
> usb1/1-1/1-1.4/1-1.4.3/1-1.4.3:1.0/0003:0079:0006.0008/
> input/input22/event19
>                   │ │ │ input:event19
>                   │ │ └─/sys/devices/pci0000...:1a.
> 0/usb1/1-1/1-1.4/1-1.4.3/1-1.4.3:1.0/0003:0079:0006.0008/input/input22/js0
>                   │ │   input:js0
>                   │ └─/sys/devices/pci0000...000:
> 00:1a.0/usb1/1-1/1-1.4/1-1.4.4/1-1.4.4:1.0/0003:0079:0006.
> 0009/input/input23
>                   │   input:input23 "DragonRise Inc.   Generic   USB
>  Joystick  "
>                   │   ├─/sys/devices/pci0000...0/
> usb1/1-1/1-1.4/1-1.4.4/1-1.4.4:1.0/0003:0079:0006.0009/
> input/input23/event20
>                   │   │ input:event20
>                   │   └─/sys/devices/pci0000...:1a.
> 0/usb1/1-1/1-1.4/1-1.4.4/1-1.4.4:1.0/0003:0079:0006.0009/input/input23/js1
>                   │     input:js1
>                   └─/sys/devices/pci0000:00/0000:00:1e.0/0000:08:02.0/
> sound/card2
>                     sound:card2 "Live"
> _______________________________________________
> systemd-devel mailing list
> systemd-devel at lists.freedesktop.org
> http://lists.freedesktop.org/mailman/listinfo/systemd-devel
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freedesktop.org/archives/systemd-devel/attachments/20140528/9fdcae46/attachment.html>