Lintian ReportsBETA

Wdbus-policy-at-console

Tag versions

The tag is present in Lintian version 2.104.319. That is the most recent version we know about.

The package contains D-Bus policy configuration that uses the deprecated at_console condition to impose a different policy for users who are "logged in at the console" according to systemd-logind, ConsoleKit or similar APIs, such as:

<policy context="default"> <deny send_destination="com.example.PowerManagementDaemon"/> </policy> <policy at_console="true"> <allow send_destination="com.example.PowerManagementDaemon"/> </policy>

The maintainers of D-Bus recommend that services should allow or deny method calls according to broad categories that are not typically altered by the system administrator (usually either "all users", or only root and/or a specified system user). If finer-grained authorization is required, the service should accept the method call message, then call out to PolicyKit to decide whether to honor the request. PolicyKit can use system-administrator-configurable policies to make that decision, including distinguishing between users who are "at the console" and those who are not.

Please refer to https://bugs.freedesktop.org/show_bug.cgi?id=39611 for details.

Visibility: warning

Check: desktop/dbus

The following 6 source packages in the archive triggered the tag 18 times.

There were no overrides.