connman permissions

  • Done
  • quality assurance status badge
Details
2 participants
  • Christopher Howard
  • Maxim Cournoyer
Owner
unassigned
Submitted by
Christopher Howard
Severity
normal

Debbugs page

C
C
Christopher Howard wrote on 22 Mar 2021 10:16
(name . bug-guix)(address . bug-guix@gnu.org)
5d125fe4c3ddffa4cff0c326eefbde93b42e77b8.camel@librehacker.com
Short description: In Guix, controlling connman seems to require root
permissions, but a non-root user should be able to control it.

Longer description: I am running a DE with slim + elogind + lxqt +
connman. When logged in to lxqt, I can run applications like csmt and
connmanctl to control connman, but if I start them as a non-root user,
I get a chain of dbus permission errors and am not able to see or
change network settings.

I have attached my system config file as well as info about my Guix
commit and system hardware.

Looking at Guix source, it appears that lxqt-desktop-service-type has
polkit settings, but I'm not seeing something similiar in the source
for connman package (connman.scm). I checked with the folks on #connman
and they said that connman does provide a polkit policy file which
should be working in conjunction with elogind, the standard location
being /usr/share/polkit-1/actions/net.connman.policy.

It could just be a problem with my system config definition, of course,
but it is not obvious to me, and it didn't seem to be anything obvious
to the folks on #guix IRC.
Attachment: file
christopher@mithril
-------------------
OS: Guix System 1ab03fb74505458e7754dce338a5da29dc754d80 i686
Host: CF-30CTQAZBM 001
Kernel: 5.11.7-gnu
Uptime: 2 days, 19 hours, 4 mins
Packages: 71 (guix-system), 11 (guix-user)
Shell: bash 5.0.16
Resolution: 1024x768
DE: LXQt 0.15.0
Terminal: qterminal
Terminal Font: Monospace 12
CPU: Genuine Intel L2400 (2) @ 1.667GHz
GPU: Intel Mobile 945GM/GMS/GME, 943/940GML Express
Memory: 203MiB / 3013MiB
(use-modules (gnu)
(rnrs lists))
(use-service-modules desktop networking ssh xorg)

(operating-system
(locale "en_US.utf8")
(timezone "America/Anchorage")
(keyboard-layout (keyboard-layout "us" #:options '("ctrl:swapcaps")))
(host-name "mithril")
(users (cons* (user-account
(name "christopher")
(comment "Christopher Howard")
(group "users")
(home-directory "/home/christopher")
(supplementary-groups
'("wheel" "netdev" "audio" "video" "dialout" "disk" "floppy" "cdrom" "kvm")))
%base-user-accounts))
(packages
(append
(list
(specification->package+output "bind" "utils"))
(map specification->package
'("cmst"
"cpupower"
"file"
"gforth"
"hexedit"
"iperf"
"lsof"
"lxqt-connman-applet"
"minicom"
"neofetch"
"nss-certs"
"openssl"
"picocom"
"p7zip"
"rsync"
"screen"
"sshfs"
"tree"
"wget"
"zip"))
%base-packages))
(services
(append
(list (service lxqt-desktop-service-type)
(service slim-service-type
(slim-configuration
(xorg-configuration
(xorg-configuration
(keyboard-layout keyboard-layout)))))
(service elogind-service-type)
(service openssh-service-type)
(service connman-service-type)
(service wpa-supplicant-service-type))
%base-services))
(bootloader
(bootloader-configuration
(bootloader grub-bootloader)
(target "/dev/sda")
(keyboard-layout keyboard-layout)))
(kernel-arguments (cons "cpufreq.default_governor=conservative" %default-kernel-arguments))
(file-systems
(cons* (file-system
(mount-point "/")
(device
(uuid "981f1ff0-cb4f-446d-81ed-be6bf64a139e"
'ext4))
(type "ext4"))
%base-file-systems)))
Generation 3 Mar 19 2021 02:21:25 (current)
guix 1ab03fb
branch: master
commit: 1ab03fb74505458e7754dce338a5da29dc754d80
M
M
Maxim Cournoyer wrote on 23 Apr 05:09 -0700
(name . Christopher Howard)(address . christopher@librehacker.com)(address . 47326@debbugs.gnu.org)
87h62fw03j.fsf@gmail.com
Hi,

Christopher Howard <christopher@librehacker.com> writes:

Toggle quote (3 lines)
> Short description: In Guix, controlling connman seems to require root
> permissions, but a non-root user should be able to control it.

Is this still a problem? It seems the connman-service-type should take
care of extending polkit with its actions correctly already, from a cursory
review.

--
Thanks,
Maxim
M
M
Maxim Cournoyer wrote on 23 Apr 05:09 -0700
control message for bug #47326
(address . control@debbugs.gnu.org)
87frhzw03a.fsf@gmail.com
tags 47326 + moreinfo
quit
C
C
Christopher Howard wrote on 23 Apr 05:41 -0700
Re: bug#47326: connman permissions
(name . Maxim Cournoyer)(address . maxim.cournoyer@gmail.com)(address . 47326-done@debbugs.gnu.org)
87cyd3jbih.fsf@librehacker.com
Toggle quote (4 lines)
> Is this still a problem? It seems the connman-service-type should take
> care of extending polkit with its actions correctly already, from a cursory
> review.

I'm not sure, as I stopped using it a long time ago. I'll go ahead an close this bug.

--
Christopher Howard
Closed
?
Your comment

This issue is archived.

To comment on this conversation send an email to 47326@patchwise.org

To respond to this issue using the mumi CLI, first switch to it
mumi current 47326
Then, you may apply the latest patchset in this issue (with sign off)
mumi am -- -s
Or, compose a reply to this issue
mumi compose
Or, send patches to this issue
mumi send-email *.patch