Hi Philip Am 02.01.2014 um 11:53 schrieb Philip Van Hoof <philip codeminded be>:
...long snip...A proper solution (with security in mind) might be * add an option that makes Tracker use system dbus context instead of session context * add another option to take a user under which Tracker will run in this case, this user MUST not be rootPatches that implement this would be welcomed. At least from my side. Note that other Tracker maintainers might also have a point of view. Some locations in the code: For tracker-store: https://git.gnome.org/browse/tracker/tree/src/libtracker-bus/tracker-bus.vala#n24 https://git.gnome.org/browse/tracker/tree/src/libtracker-sparql-backend/tracker-backend.vala#n37 https://git.gnome.org/browse/tracker/tree/src/tracker-store/tracker-dbus.vala#n95 This one is used by tracker-extract: https://git.gnome.org/browse/tracker/tree/src/libtracker-common/tracker-dbus.c#n70 The D-Bus service for all miners: https://git.gnome.org/browse/tracker/tree/src/libtracker-miner/tracker-miner-manager.c#n409 Unfortunate manual D-Bus connection to tracker-store from miner-fs: https://git.gnome.org/browse/tracker/tree/src/miners/fs/tracker-main.c#n772 In case you need tracker-writeback: https://git.gnome.org/browse/tracker/tree/src/miners/fs/tracker-writeback-listener.c#n193
Thanks for the pointers! I'll keep you guys updated if and once I start working on this. -Ralph
Attachment:
signature.asc
Description: Message signed with OpenPGP using GPGMail