Re: [gdm-list] Fixes for ConsoleKit and GDM 2.21 for Solaris

["William Jon McCann" <mccann jhu edu>]

Hey,

On Jan 26, 2008 10:59 AM, Brian Cameron <Brian Cameron sun com> wrote:
>
> Jon:
>
> Here's an updated patch that works just as well as the previous
> patch except it uses the getuid () to the the current user when
> checking against RBAC instead of looking up the "GDM User" via the
> configuration.  This is needed to avoid showing the Restart and
> Shutdown buttons if the user doesn't have RBAC permissions to
> perform the operation.
>
> This is slightly different than the way things are done with
> PolicyKit, but makes GDM 2.21 work the same as GDM 2.20 does
> for shutodwn/reboot on Solaris wit RBAC.
>
> The main difference with PolicyKit is that PolicyKit will ask
> you for the root password and grant you the authority on the fly.
> With RBAC you need to first configure RBAC for the shutdown/reboot
> features to work.  This is more in-line with the way the Solaris
> security team wants things to work.  They prefer to avoid asking
> for passwords in GUI's, for example.
>
> This avoids needing to make the simple-greeter know about the
> settings, so the patch is less intrusive and looks better.
> Otherwise same information as before.

Yeah looks ok.  Please commit.

Thanks,
Jon