source: postlfs/security/consolekit.xml@ 15fc6d6

10.0 10.1 11.0 11.1 11.2 11.3 12.0 12.1 7.10 7.4 7.5 7.6 7.6-blfs 7.6-systemd 7.7 7.8 7.9 8.0 8.1 8.2 8.3 8.4 9.0 9.1 basic bdubbs/svn elogind gnome kde5-13430 kde5-14269 kde5-14686 kea ken/TL2024 ken/inkscape-core-mods ken/tuningfonts krejzi/svn lazarus lxqt nosym perl-modules plabs/newcss plabs/python-mods python3.11 qt5new rahul/power-profiles-daemon renodr/vulkan-addition systemd-11177 systemd-13485 trunk upgradedb xry111/intltool xry111/llvm18 xry111/soup3 xry111/test-20220226 xry111/xf86-video-removal
Last change on this file since 15fc6d6 was 15fc6d6, checked in by Bruce Dubbs <bdubbs@…>, 11 years ago

Update to gnupg-2.0.21.
More tags.

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@11674 af4574ff-66df-0310-9fd7-8a98e5e911e0
  • Property mode set to 100644
File size: 12.9 KB
Line 
1<?xml version="1.0" encoding="ISO-8859-1"?>
2<!DOCTYPE sect1 PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN"
3 "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
4 <!ENTITY % general-entities SYSTEM "../../general.ent">
5 %general-entities;
6
7 <!ENTITY consolekit-download-http "&sources-anduin-http;/c/ConsoleKit-&consolekit-version;.tar.xz">
8 <!ENTITY consolekit-download-ftp " ">
9 <!ENTITY consolekit-md5sum "6aaadf5627d2f7587aa116727e2fc1da">
10 <!ENTITY consolekit-size "356 KB">
11 <!ENTITY consolekit-buildsize "8.0 MB">
12 <!ENTITY consolekit-time "0.3 SBU">
13]>
14
15<sect1 id="consolekit" xreflabel="ConsoleKit-&consolekit-version;">
16 <?dbhtml filename="consolekit.html"?>
17
18 <sect1info>
19 <othername>$LastChangedBy$</othername>
20 <date>$Date$</date>
21 </sect1info>
22
23 <title>ConsoleKit-&consolekit-version;</title>
24
25 <indexterm zone="consolekit">
26 <primary sortas="a-ConsoleKit">ConsoleKit</primary>
27 </indexterm>
28
29 <sect2 role="package">
30 <title>Introduction to ConsoleKit</title>
31
32 <para>
33 The <application>ConsoleKit</application> package is a framework for
34 keeping track of the various users, sessions, and seats present on a system.
35 It provides a mechanism for software to react to changes of any of these
36 items or of any of the metadata associated with them.
37 </para>
38
39 &lfs74_checked;
40
41 <bridgehead renderas="sect3">Package Information</bridgehead>
42 <itemizedlist spacing="compact">
43 <listitem>
44 <para>
45 Download (HTTP): <ulink url="&consolekit-download-http;"/>
46 </para>
47 </listitem>
48 <listitem>
49 <para>
50 Download (FTP): <ulink url="&consolekit-download-ftp;"/>
51 </para>
52 </listitem>
53 <listitem>
54 <para>
55 Download MD5 sum: &consolekit-md5sum;
56 </para>
57 </listitem>
58 <listitem>
59 <para>
60 Download size: &consolekit-size;
61 </para>
62 </listitem>
63 <listitem>
64 <para>
65 Estimated disk space required: &consolekit-buildsize;
66 </para>
67 </listitem>
68 <listitem>
69 <para>
70 Estimated build time: &consolekit-time;
71 </para>
72 </listitem>
73 </itemizedlist>
74
75 <bridgehead renderas="sect3">ConsoleKit Dependencies</bridgehead>
76
77 <bridgehead renderas="sect4">Required</bridgehead>
78 <para role="required">
79 <xref linkend="acl"/>,
80 <xref linkend="dbus-glib"/> and
81 <xref linkend="xorg7-lib"/>
82 </para>
83
84 <bridgehead renderas="sect4">Recommended</bridgehead>
85 <para role="recommended">
86 <xref linkend="linux-pam"/> and
87 <xref linkend="polkit"/>
88 </para>
89
90 <warning>
91 <para>
92 If you intend <emphasis role="strong">NOT</emphasis> to install
93 <application>polkit</application>, you will need to manually edit the
94 ConsoleKit.conf file to lock down the service. Failure to do so may be a
95 huge SECURITY HOLE.
96 </para>
97 </warning>
98
99 <bridgehead renderas="sect4">Optional</bridgehead>
100 <para role="optional">
101 <xref linkend="xmlto"/>
102 </para>
103
104 <para condition="html" role="usernotes">User Notes:
105 <ulink url="&blfs-wiki;/consolekit"/>
106 </para>
107 </sect2>
108
109 <sect2 role="installation">
110 <title>Installation of ConsoleKit</title>
111
112 <para>
113 Install <application>ConsoleKit</application> by running the following
114 commands:
115 </para>
116
117<screen><userinput>
118./configure --prefix=/usr \
119 --sysconfdir=/etc \
120 --localstatedir=/var \
121 --enable-udev-acl \
122 --enable-pam-module \
123 --libexecdir=/usr/lib/ConsoleKit &amp;&amp;
124make</userinput></screen>
125
126 <para>
127 This package does not come with a test suite.
128 </para>
129
130 <para>
131 Now, as the <systemitem class="username">root</systemitem> user:
132 </para>
133
134<screen role="root"><userinput>make install</userinput></screen>
135
136 </sect2>
137
138 <sect2 role="commands">
139 <title>Command Explanations</title>
140
141 <para>
142 <option>--enable-udev-acl</option>: This switch enables building of the
143 <command>udev-acl</command> tool, which is used to allow normal users
144 to access device nodes normally only accessible to
145 <systemitem class="username">root</systemitem>.
146 </para>
147
148 <para>
149 <option>--enable-pam-module</option>: This switch enables building of the
150 <application>ConsoleKit</application> <application>PAM</application>
151 module which is needed for <application>ConsoleKit</application> to
152 work correctly with <application>PAM</application>. Remove if
153 <application>Linux PAM</application> is
154 <emphasis role="strong">NOT</emphasis> installed.
155 </para>
156
157 <para>
158 <option>--enable-docbook-docs</option>: Use this switch if
159 <application>xmlto</application> is installed and you wish to
160 build the API documentation.
161 </para>
162
163 </sect2>
164
165 <sect2 role="configuration">
166 <title>Configuring ConsoleKit</title>
167
168 <sect3>
169 <title>PAM Module Configuration</title>
170
171 <para>
172 If you use <application>Linux PAM</application> you need to
173 configure <application>Linux PAM</application> to activate
174 <application>ConsoleKit</application> upon user login.
175 This can be achieved by editing the
176 <filename>/etc/pam.d/system-session</filename> file as the
177 <systemitem class="username">root</systemitem> user:
178 </para>
179
180<screen role="root"><userinput>cat &gt;&gt; /etc/pam.d/system-session &lt;&lt; "EOF"
181# Begin ConsoleKit addition
182
183session optional pam_loginuid.so
184session optional pam_ck_connector.so nox11
185
186# End ConsoleKit addition
187EOF</userinput></screen>
188
189 <para>
190 You will also need a helper script that creates a file in
191 <filename class="directory">/var/run/console</filename>
192 named as the currently logged in user and that contains the
193 <application>D-Bus</application> address of the session. You
194 can create the script by running the following commands as
195 the <systemitem class="username">root</systemitem> user:
196 </para>
197
198<screen role="root"><userinput>cat &gt; /usr/lib/ConsoleKit/run-session.d/pam-foreground-compat.ck &lt;&lt; "EOF"
199#!/bin/sh
200TAGDIR=/var/run/console
201
202[ -n "$CK_SESSION_USER_UID" ] || exit 1
203[ "$CK_SESSION_IS_LOCAL" = "true" ] || exit 0
204
205TAGFILE="$TAGDIR/`getent passwd $CK_SESSION_USER_UID | cut -f 1 -d:`"
206
207if [ "$1" = "session_added" ]; then
208 mkdir -p "$TAGDIR"
209 echo "$CK_SESSION_ID" &gt;&gt; "$TAGFILE"
210fi
211
212if [ "$1" = "session_removed" ] &amp;&amp; [ -e "$TAGFILE" ]; then
213 sed -i "\%^$CK_SESSION_ID\$%d" "$TAGFILE"
214 [ -s "$TAGFILE" ] || rm -f "$TAGFILE"
215fi
216EOF
217chmod -v 755 /usr/lib/ConsoleKit/run-session.d/pam-foreground-compat.ck</userinput></screen>
218
219 <para>
220 See /usr/share/doc/ConsoleKit/spec/ConsoleKit.html for more
221 configuration.
222 </para>
223
224 </sect3>
225
226 </sect2>
227
228 <sect2 role="content">
229 <title>Contents</title>
230
231 <segmentedlist>
232 <segtitle>Installed Programs</segtitle>
233 <segtitle>Installed Libraries</segtitle>
234 <segtitle>Installed Directories</segtitle>
235
236 <seglistitem>
237 <seg>
238 ck-history, ck-launch-session, ck-list-sessions,
239 ck-log-system-restart, ck-log-system-start,
240 ck-log-system-stop and console-kit-daemon
241 </seg>
242 <seg>
243 libck-connector.so and pam_ck_connector.so
244 </seg>
245 <seg>
246 /etc/ConsoleKit,
247 /usr/include/ConsoleKit,
248 /usr/lib/ConsoleKit,
249 /usr/share/doc/ConsoleKit and
250 /var/log/ConsoleKit
251 </seg>
252 </seglistitem>
253 </segmentedlist>
254
255<!--
256 <variablelist>
257 <bridgehead renderas="sect3">Short Descriptions</bridgehead>
258 <?dbfo list-presentation="list"?>
259 <?dbhtml list-presentation="table"?>
260
261 <varlistentry id="ck-history">
262 <term><command>ck-history</command></term>
263 <listitem>
264 <para>does this .....</para>
265 <indexterm zone="consolekit ck-history">
266 <primary sortas="b-ck-history">ck-history</primary>
267 </indexterm>
268 </listitem>
269 </varlistentry>
270
271 <varlistentry id="ck-launch-session">
272 <term><command>ck-launch-session</command></term>
273 <listitem>
274 <para>does this .....</para>
275 <indexterm zone="consolekit ck-launch-session">
276 <primary sortas="b-ck-launch-session">ck-launch-session</primary>
277 </indexterm>
278 </listitem>
279 </varlistentry>
280
281 <varlistentry id="ck-list-sessions">
282 <term><command>ck-list-sessions</command></term>
283 <listitem>
284 <para>does this .....</para>
285 <indexterm zone="consolekit ck-list-sessions">
286 <primary sortas="b-ck-list-sessions">ck-list-sessions</primary>
287 </indexterm>
288 </listitem>
289 </varlistentry>
290
291 <varlistentry id="ck-log-system-restart">
292 <term><command>ck-log-system-restart</command></term>
293 <listitem>
294 <para>does this .....</para>
295 <indexterm zone="consolekit ck-log-system-restart">
296 <primary sortas="b-ck-log-system-restart">ck-log-system-restart</primary>
297 </indexterm>
298 </listitem>
299 </varlistentry>
300
301 <varlistentry id="ck-log-system-start">
302 <term><command>ck-log-system-start</command></term>
303 <listitem>
304 <para>does this .....</para>
305 <indexterm zone="consolekit ck-log-system-start">
306 <primary sortas="b-ck-log-system-start">ck-log-system-start</primary>
307 </indexterm>
308 </listitem>
309 </varlistentry>
310
311 <varlistentry id="ck-log-system-stop">
312 <term><command>ck-log-system-stop</command></term>
313 <listitem>
314 <para>does this .....</para>
315 <indexterm zone="consolekit ck-log-system-stop">
316 <primary sortas="b-ck-log-system-stop">ck-log-system-stop</primary>
317 </indexterm>
318 </listitem>
319 </varlistentry>
320
321 <varlistentry id="console-kit-daemon">
322 <term><command>console-kit-daemon</command></term>
323 <listitem>
324 <para>is the <application>ConsoleKit</application> daemon.</para>
325 <indexterm zone="consolekit console-kit-daemon">
326 <primary sortas="b-console-kit-daemon">console-kit-daemon</primary>
327 </indexterm>
328 </listitem>
329 </varlistentry>
330
331 <varlistentry id="ck-collect-session-info">
332 <term><command>ck-collect-session-info</command></term>
333 <listitem>
334 <para>does this .....</para>
335 <indexterm zone="consolekit ck-collect-session-info">
336 <primary sortas="b-ck-collect-session-info">ck-collect-session-info</primary>
337 </indexterm>
338 </listitem>
339 </varlistentry>
340
341 <varlistentry id="ck-get-x11-display-device">
342 <term><command>ck-get-x11-display-device</command></term>
343 <listitem>
344 <para>does this .....</para>
345 <indexterm zone="consolekit ck-get-x11-display-device">
346 <primary sortas="b-ck-get-x11-display-device">ck-get-x11-display-device</primary>
347 </indexterm>
348 </listitem>
349 </varlistentry>
350
351 <varlistentry id="ck-get-x11-server-pid">
352 <term><command>ck-get-x11-server-pid</command></term>
353 <listitem>
354 <para>does this .....</para>
355 <indexterm zone="consolekit ck-get-x11-server-pid">
356 <primary sortas="b-ck-get-x11-server-pid">ck-get-x11-server-pid</primary>
357 </indexterm>
358 </listitem>
359 </varlistentry>
360
361 <varlistentry id="ck-system-restart">
362 <term><command>ck-system-restart</command></term>
363 <listitem>
364 <para>does this .....</para>
365 <indexterm zone="consolekit ck-system-restart">
366 <primary sortas="b-ck-system-restart">ck-system-restart</primary>
367 </indexterm>
368 </listitem>
369 </varlistentry>
370
371 <varlistentry id="ck-system-stop">
372 <term><command>ck-system-stop</command></term>
373 <listitem>
374 <para>does this .....</para>
375 <indexterm zone="consolekit ck-system-stop">
376 <primary sortas="b-ck-system-stop">ck-system-stop</primary>
377 </indexterm>
378 </listitem>
379 </varlistentry>
380
381 <varlistentry id="libck-connector">
382 <term><filename class='libraryfile'>libck-connector.so</filename></term>
383 <listitem>
384 <para>contains functions that .....</para>
385 <indexterm zone="consolekit libck-connector">
386 <primary sortas="c-libck-connector">libck-connector.so</primary>
387 </indexterm>
388 </listitem>
389 </varlistentry>
390
391 <varlistentry id="pam_ck_connector">
392 <term><filename class='libraryfile'>pam_ck_connector.so</filename></term>
393 <listitem>
394 <para>contains functions that .....</para>
395 <indexterm zone="consolekit pam_ck_connector">
396 <primary sortas="c-pam_ck_connector">pam_ck_connector.so</primary>
397 </indexterm>
398 </listitem>
399 </varlistentry>
400
401 </variablelist>
402-->
403
404 </sect2>
405
406</sect1>
Note: See TracBrowser for help on using the repository browser.