summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorJosé Bollo <jose.bollo@iot.bzh>2019-04-30 22:59:14 +0200
committerJan-Simon Moeller <jsmoeller@linuxfoundation.org>2019-06-19 13:05:28 +0000
commite6bdca743b257f9c432d34e3597dcf1bf5c0f7bc (patch)
tree4ecf47ee3e00a148cb845a429c73c00d9831d8ca
parenta9acb14210ddda6579ad472654ec62733247ddfd (diff)
Improve management of the group display
The group display protects accesses to display resources. When running as user, it should not be acquired by default but on need. Bug-AGL: SPEC-2006 Change-Id: I7c188720e5cfcb65f02af25d0e4262f59300d16a Signed-off-by: José Bollo <jose.bollo@iot.bzh>
-rw-r--r--meta-agl-profile-core/recipes-config/agl-users/agl-users_0.1.bb4
-rw-r--r--meta-agl-profile-graphical/recipes-graphics/wayland/weston-ready/weston-ready.service1
2 files changed, 3 insertions, 2 deletions
diff --git a/meta-agl-profile-core/recipes-config/agl-users/agl-users_0.1.bb b/meta-agl-profile-core/recipes-config/agl-users/agl-users_0.1.bb
index 79a9461e0..709a1091f 100644
--- a/meta-agl-profile-core/recipes-config/agl-users/agl-users_0.1.bb
+++ b/meta-agl-profile-core/recipes-config/agl-users/agl-users_0.1.bb
@@ -21,7 +21,7 @@ GROUPADD_PARAM_${PN} = "\
"
USERADD_PARAM_${PN} = "\
- -g 1001 -G display -u 1001 -o -d /home/1001 -m -K PASS_MAX_DAYS=-1 agl-driver ; \
- -g 1002 -G display -u 1002 -o -d /home/1002 -m -K PASS_MAX_DAYS=-1 agl-passenger ; \
+ -g 1001 -u 1001 -o -d /home/1001 -m -K PASS_MAX_DAYS=-1 agl-driver ; \
+ -g 1002 -u 1002 -o -d /home/1002 -m -K PASS_MAX_DAYS=-1 agl-passenger ; \
--gid display --groups weston-launch,video,input --home-dir /run/platform/display --shell /bin/false --comment \"Display daemon\" --key PASS_MAX_DAYS=-1 display \
"
diff --git a/meta-agl-profile-graphical/recipes-graphics/wayland/weston-ready/weston-ready.service b/meta-agl-profile-graphical/recipes-graphics/wayland/weston-ready/weston-ready.service
index f8db5114a..603f5f367 100644
--- a/meta-agl-profile-graphical/recipes-graphics/wayland/weston-ready/weston-ready.service
+++ b/meta-agl-profile-graphical/recipes-graphics/wayland/weston-ready/weston-ready.service
@@ -4,6 +4,7 @@ Requires=weston.service
After=weston.service
[Service]
+SupplementaryGroups=display
Environment="XDG_RUNTIME_DIR=/run/platform/display"
ExecStart=/usr/bin/weston-ready -t 10
Type=oneshot