FS#43930 - [polkit] add the polkitd user to the proc group
Attached to Project:
Arch Linux
Opened by Daniel Micay (thestinger) - Tuesday, 24 February 2015, 16:28 GMT
Last edited by Jan Alexander Steffens (heftig) - Wednesday, 12 August 2015, 04:45 GMT
Opened by Daniel Micay (thestinger) - Tuesday, 24 February 2015, 16:28 GMT
Last edited by Jan Alexander Steffens (heftig) - Wednesday, 12 August 2015, 04:45 GMT
|
Details
The filesystem package now ships a proc group for use with
the hidepid mount option on /proc. The polkit daemon runs as
non-root and needs to access information about processes
owned by other users, so it needs to be added to the group
to be granted an exception.
Adding `usermod -a -G proc polkitd` to post_upgrade() and `-G polkitd` to the `useradd` command in post_install is all that's required. Bonus points: The shell might as well be changed from /bin/false to /usr/bin/nologin as was done for the users in the filesystem package too, but that's far from important - it's just a bit friendlier (just an additional `-s /usr/bin/nologin` for the usermod command + changing useradd). |
This task depends upon
Closed by Jan Alexander Steffens (heftig)
Wednesday, 12 August 2015, 04:45 GMT
Reason for closing: Fixed
Additional comments about closing: 0.113-2
Wednesday, 12 August 2015, 04:45 GMT
Reason for closing: Fixed
Additional comments about closing: 0.113-2