hal: disable PolicyKit/ConsoleKit, smbios.

Stuff was taken from Arch Linux, now all users logged in the
console are authenticated via ConsoleKit.

Bump revision.

--HG--
extra : convert_revision : b0986ed4b1454ac2f11ecc35b23d9d8de14996a4
This commit is contained in:
Juan RP 2009-11-30 06:09:41 +01:00
parent be2a01e793
commit 3e5df9accf
2 changed files with 53 additions and 8 deletions

View File

@ -0,0 +1,46 @@
From Arch Linux.
--- hal.conf.in.drop-polkit 2009-02-04 17:07:23.000000000 -0500
+++ hal.conf.in 2009-07-29 23:15:16.866766074 -0400
@@ -25,7 +25,41 @@
send_interface="org.freedesktop.Hal.Device"/>
<allow send_destination="org.freedesktop.Hal"
send_interface="org.freedesktop.Hal.Manager"/>
+ </policy>
+
+ <!-- Only allow users at the local console to manipulate devices -->
+ <policy at_console="true">
+ <allow send_destination="org.freedesktop.Hal"
+ send_interface="org.freedesktop.Hal.Device.CPUFreq"/>
+ <allow send_destination="org.freedesktop.Hal"
+ send_interface="org.freedesktop.Hal.Device.DockStation"/>
+ <allow send_destination="org.freedesktop.Hal"
+ send_interface="org.freedesktop.Hal.Device.KillSwitch"/>
+ <allow send_destination="org.freedesktop.Hal"
+ send_interface="org.freedesktop.Hal.Device.KeyboardBacklight"/>
+ <allow send_destination="org.freedesktop.Hal"
+ send_interface="org.freedesktop.Hal.Device.LaptopPanel"/>
+ <allow send_destination="org.freedesktop.Hal"
+ send_interface="org.freedesktop.Hal.Device.Leds"/>
+ <allow send_destination="org.freedesktop.Hal"
+ send_interface="org.freedesktop.Hal.Device.LightSensor"/>
+ <allow send_destination="org.freedesktop.Hal"
+ send_interface="org.freedesktop.Hal.Device.Storage"/>
+ <allow send_destination="org.freedesktop.Hal"
+ send_interface="org.freedesktop.Hal.Device.Storage.Removable"/>
+ <allow send_destination="org.freedesktop.Hal"
+ send_interface="org.freedesktop.Hal.Device.SystemPowerManagement"/>
+ <allow send_destination="org.freedesktop.Hal"
+ send_interface="org.freedesktop.Hal.Device.Volume"/>
+ <allow send_destination="org.freedesktop.Hal"
+ send_interface="org.freedesktop.Hal.Device.Volume.Crypto"/>
+ <allow send_destination="org.freedesktop.Hal"
+ send_interface="org.freedesktop.Hal.Device.WakeOnLan"/>
+
+ </policy>
+ <!-- well,...and root too -->
+ <policy user="root">
<allow send_destination="org.freedesktop.Hal"
send_interface="org.freedesktop.Hal.Device.CPUFreq"/>
<allow send_destination="org.freedesktop.Hal"

View File

@ -1,12 +1,14 @@
# Template file for 'hal'
pkgname=hal
version=0.5.13
revision=1
distfiles="http://hal.freedesktop.org/releases/hal-$version.tar.bz2"
build_style=gnu_configure
configure_args="--enable-man-pages --enable-console-kit --enable-policy-kit
--enable-acpi-ibm --enable-acpi-toshiba --disable-parted --enable-sonypic
--with-hal-user=hal --with-hal-group=hal --localstatedir=/var
--disable-docbook-docs --with-udev-prefix=/lib"
configure_args="--enable-static=no --disable-console-kit
--disable-policy-kit --disable-acpi-ibm --disable-parted
--disable-acl-management --disable-smbios --enable-umount-helper
--disable-docbook-docs --with-udev-prefix=/lib --localstatedir=/var
--with-hal-user=hal --with-hal-group=hal"
short_desc="Hardware Abstraction Layer"
maintainer="Juan RP <xtraeme@gmail.com>"
checksum=d47c9799c18929cffbce5bfa48f35c89657d7f630c6da682f193928697c71ab5
@ -27,17 +29,14 @@ Add_dependency full expat
Add_dependency full bash
Add_dependency full hal-info
Add_dependency full eject
Add_dependency full PolicyKit
Add_dependency full ConsoleKit
Add_dependency run ConsoleKit-x11
Add_dependency full pciutils
Add_dependency full usbutils
Add_dependency full dmidecode
Add_dependency build pkg-config
Add_dependency build libsmbios
Add_dependency run libsmbios-utils
Add_dependency full pm-utils
Add_dependency full libblkid
Add_dependency build pkg-config
post_install()
{