diff options
Diffstat (limited to 'meta-app-framework/recipes-config')
| -rw-r--r-- | meta-app-framework/recipes-config/agl-session/agl-session_0.1.bb | 6 | ||||
| -rw-r--r-- | meta-app-framework/recipes-config/polkit-rule-agl-app/files/50-agl-app.rules | 2 |
2 files changed, 6 insertions, 2 deletions
diff --git a/meta-app-framework/recipes-config/agl-session/agl-session_0.1.bb b/meta-app-framework/recipes-config/agl-session/agl-session_0.1.bb index ecad1615d..067f2a6e4 100644 --- a/meta-app-framework/recipes-config/agl-session/agl-session_0.1.bb +++ b/meta-app-framework/recipes-config/agl-session/agl-session_0.1.bb @@ -17,9 +17,13 @@ GROUPADD_PARAM:${PN} = "\ --system video ; \ --system pipewire ; \ -g 1001 agl-driver ; \ + -g 1003 applaunchd ; \ " +# agl-driver user needs to be part of applaunchd group for D-Bus activation to still work +# should be removed after everything is converted to gRPC for enhanced security USERADD_PARAM:${PN} = "\ - -g 1001 -u 1001 -G video,display,pipewire -o -d /home/agl-driver -m -K PASS_MAX_DAYS=-1 agl-driver ; \ + -g 1001 -u 1001 -G video,display,pipewire,applaunchd -o -d /home/agl-driver -m -K PASS_MAX_DAYS=-1 agl-driver ; \ + -g 1003 -u 1003 -o -d / -K PASS_MAX_DAYS=-1 applaunchd ; \ " SYSTEMD_PACKAGES = "${PN}" diff --git a/meta-app-framework/recipes-config/polkit-rule-agl-app/files/50-agl-app.rules b/meta-app-framework/recipes-config/polkit-rule-agl-app/files/50-agl-app.rules index dd4b6940d..35b9559c5 100644 --- a/meta-app-framework/recipes-config/polkit-rule-agl-app/files/50-agl-app.rules +++ b/meta-app-framework/recipes-config/polkit-rule-agl-app/files/50-agl-app.rules @@ -1,7 +1,7 @@ polkit.addRule(function(action, subject) { if (action.id == "org.freedesktop.systemd1.manage-units" && action.lookup("unit").indexOf("agl-app") == 0 && - subject.user == "agl-driver") { + subject.isInGroup("applaunchd")) { return polkit.Result.YES; } }); |