[Pcsclite-muscle] [PATCH] pcsc-lite & polkit: allow auth_admin

Nikos Mavrogiannopoulos nmav at redhat.com
Sat Dec 6 10:01:33 UTC 2014


----- Original Message -----
> Nikos Mavrogiannopoulos:
> 
> > I remember I have practical issues with polkit authentication enabled,
> > and that why it was explicitly disabled. It's been some time and I may
> > be wrong, but you may know better whether an application (e.g. a gnome
> > component) could potentially use a single pcscd connection for multiple
> > requests sent in parallel. If Stanislav has, however, tested such use
> > cases and they cause no issue I have no problem with the change.
> 
> Well, in this case, please disable it by changing "auth_admin" to "no"
> (my second patch in the thread).
> 
> Yes, "auth_admin" still causes issues: Second app is waiting until you
> authorize first waiting app. Then second app wakes, and asks for
> password as well. And you will be asked twice. First time to obtain
> permission to access the reader, second time to access the card.
> This is ugly, but it is the correct behavior of "auth_admin".

It is not ugly, it is a description of a best case scenario. There are
multiple scenarios where that would break a lot of things if a user don't
enter a password at the prompt. I'd suggest to keep that patch system
specific.

regards,
Nikos



More information about the Pcsclite-muscle mailing list