source: postlfs/security/consolekit.xml@ 1ad59f2

10.0 10.1 11.0 11.1 11.2 11.3 12.0 12.1 7.10 7.6 7.6-blfs 7.6-systemd 7.7 7.8 7.9 8.0 8.1 8.2 8.3 8.4 9.0 9.1 basic bdubbs/svn elogind gnome kde5-13430 kde5-14269 kde5-14686 kea ken/TL2024 ken/inkscape-core-mods ken/tuningfonts krejzi/svn lazarus lxqt nosym perl-modules plabs/newcss plabs/python-mods python3.11 qt5new rahul/power-profiles-daemon renodr/vulkan-addition systemd-11177 systemd-13485 trunk upgradedb xry111/intltool xry111/llvm18 xry111/soup3 xry111/test-20220226 xry111/xf86-video-removal
Last change on this file since 1ad59f2 was 7715803, checked in by Fernando de Oliveira <fernando@…>, 10 years ago

totem-3.12.1, libtasn1-3.5, iso-codes-3.53, openjpeg-1.5.2, mercurial-3.0, whois_5.1.2, xterm-304, rxvt-unicode-9.20, screen-4.2.1, serf-1.3.5 and libdrm-2.4.54. Fixes to colord-1.2.0 and ConsoleKit-0.4.6.

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@13022 af4574ff-66df-0310-9fd7-8a98e5e911e0
  • Property mode set to 100644
File size: 13.3 KB
Line 
1<?xml version="1.0" encoding="ISO-8859-1"?>
2<!DOCTYPE sect1 PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN"
3 "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
4 <!ENTITY % general-entities SYSTEM "../../general.ent">
5 %general-entities;
6
7 <!ENTITY consolekit-download-http "&sources-anduin-http;/c/ConsoleKit-&consolekit-version;.tar.xz">
8 <!ENTITY consolekit-download-ftp " ">
9 <!ENTITY consolekit-md5sum "6aaadf5627d2f7587aa116727e2fc1da">
10 <!ENTITY consolekit-size "356 KB">
11 <!ENTITY consolekit-buildsize "8.0 MB">
12 <!ENTITY consolekit-time "0.3 SBU">
13]>
14
15<sect1 id="consolekit" xreflabel="ConsoleKit-&consolekit-version;">
16 <?dbhtml filename="consolekit.html"?>
17
18 <sect1info>
19 <othername>$LastChangedBy$</othername>
20 <date>$Date$</date>
21 </sect1info>
22
23 <title>ConsoleKit-&consolekit-version;</title>
24
25 <indexterm zone="consolekit">
26 <primary sortas="a-ConsoleKit">ConsoleKit</primary>
27 </indexterm>
28
29 <sect2 role="package">
30 <title>Introduction to ConsoleKit</title>
31
32 <para>
33 The <application>ConsoleKit</application> package is a framework for
34 keeping track of the various users, sessions, and seats present on a system.
35 It provides a mechanism for software to react to changes of any of these
36 items or of any of the metadata associated with them.
37 </para>
38
39 &lfs75_checked;
40
41 <bridgehead renderas="sect3">Package Information</bridgehead>
42 <itemizedlist spacing="compact">
43 <listitem>
44 <para>
45 Download (HTTP): <ulink url="&consolekit-download-http;"/>
46 </para>
47 </listitem>
48 <listitem>
49 <para>
50 Download (FTP): <ulink url="&consolekit-download-ftp;"/>
51 </para>
52 </listitem>
53 <listitem>
54 <para>
55 Download MD5 sum: &consolekit-md5sum;
56 </para>
57 </listitem>
58 <listitem>
59 <para>
60 Download size: &consolekit-size;
61 </para>
62 </listitem>
63 <listitem>
64 <para>
65 Estimated disk space required: &consolekit-buildsize;
66 </para>
67 </listitem>
68 <listitem>
69 <para>
70 Estimated build time: &consolekit-time;
71 </para>
72 </listitem>
73 </itemizedlist>
74
75 <bridgehead renderas="sect3">ConsoleKit Dependencies</bridgehead>
76
77 <bridgehead renderas="sect4">Required</bridgehead>
78 <para role="required">
79 <xref linkend="dbus-glib"/> and
80 <xref linkend="xorg7-lib"/>
81 </para>
82
83 <bridgehead renderas="sect4">Recommended</bridgehead>
84 <para role="recommended">
85 <xref linkend="linux-pam"/> and
86 <xref linkend="polkit"/>
87 </para>
88
89 <warning>
90 <para>
91 If you intend <emphasis role="strong">NOT</emphasis> to install
92 <application>polkit</application>, you will need to manually edit the
93 ConsoleKit.conf file to lock down the service. Failure to do so may be a
94 huge SECURITY HOLE.
95 </para>
96 </warning>
97
98 <bridgehead renderas="sect4">Optional</bridgehead>
99 <para role="optional">
100 <xref linkend="xmlto"/>
101 </para>
102
103 <para condition="html" role="usernotes">User Notes:
104 <ulink url="&blfs-wiki;/consolekit"/>
105 </para>
106 </sect2>
107
108 <sect2 role="installation">
109 <title>Installation of ConsoleKit</title>
110
111 <para>
112 Install <application>ConsoleKit</application> by running the following
113 commands:
114 </para>
115
116<screen><userinput>./configure --prefix=/usr \
117 --sysconfdir=/etc \
118 --localstatedir=/var \
119 --enable-udev-acl \
120 --enable-pam-module &amp;&amp;
121make</userinput></screen>
122
123 <para>
124 This package does not come with a test suite.
125 </para>
126
127 <para>
128 Now, as the <systemitem class="username">root</systemitem> user:
129 </para>
130
131<screen role="root"><userinput>make install</userinput></screen>
132
133 </sect2>
134
135 <sect2 role="commands">
136 <title>Command Explanations</title>
137
138 <para>
139 <option>--enable-udev-acl</option>: This switch enables building of the
140 <command>udev-acl</command> tool, which is used to allow normal users
141 to access device nodes normally only accessible to
142 <systemitem class="username">root</systemitem>.
143 </para>
144
145 <para>
146 <option>--enable-pam-module</option>: This switch enables building of the
147 <application>ConsoleKit</application> <application>PAM</application>
148 module which is needed for <application>ConsoleKit</application> to
149 work correctly with <application>PAM</application>. Remove if
150 <application>Linux PAM</application> is
151 <emphasis role="strong">NOT</emphasis> installed.
152 </para>
153
154 <para>
155 <option>--enable-docbook-docs</option>: Use this switch if
156 <application>xmlto</application> is installed and you wish to
157 build the API documentation.
158 </para>
159
160 <para><option>--libexecdir=/usr/lib/ConsoleKit</option>: This option
161 creates a <filename class="directory">ConsoleKit</filename> directory in
162 <filename class="directory">/usr/lib</filename> instead of putting the
163 program's private executables into <filename
164 class="directory">/usr/libexec</filename> in accordance with the old
165 version of the FHS used before LFS-7.5.</para>
166
167 </sect2>
168
169 <sect2 role="configuration">
170 <title>Configuring ConsoleKit</title>
171
172 <sect3>
173 <title>PAM Module Configuration</title>
174
175 <para>
176 If you use <application>Linux PAM</application> you need to
177 configure <application>Linux PAM</application> to activate
178 <application>ConsoleKit</application> upon user login.
179 This can be achieved by editing the
180 <filename>/etc/pam.d/system-session</filename> file as the
181 <systemitem class="username">root</systemitem> user:
182 </para>
183
184<screen role="root"><userinput>cat &gt;&gt; /etc/pam.d/system-session &lt;&lt; "EOF"
185# Begin ConsoleKit addition
186
187session optional pam_loginuid.so
188session optional pam_ck_connector.so nox11
189
190# End ConsoleKit addition
191EOF</userinput></screen>
192
193 <para>
194 You will also need a helper script that creates a file in
195 <filename class="directory">/var/run/console</filename>
196 named as the currently logged in user and that contains the
197 <application>D-Bus</application> address of the session. You
198 can create the script by running the following commands as
199 the <systemitem class="username">root</systemitem> user:
200 </para>
201
202<screen role="root"><userinput>cat &gt; /usr/lib/ConsoleKit/run-session.d/pam-foreground-compat.ck &lt;&lt; "EOF"
203#!/bin/sh
204TAGDIR=/var/run/console
205
206[ -n "$CK_SESSION_USER_UID" ] || exit 1
207[ "$CK_SESSION_IS_LOCAL" = "true" ] || exit 0
208
209TAGFILE="$TAGDIR/`getent passwd $CK_SESSION_USER_UID | cut -f 1 -d:`"
210
211if [ "$1" = "session_added" ]; then
212 mkdir -p "$TAGDIR"
213 echo "$CK_SESSION_ID" &gt;&gt; "$TAGFILE"
214fi
215
216if [ "$1" = "session_removed" ] &amp;&amp; [ -e "$TAGFILE" ]; then
217 sed -i "\%^$CK_SESSION_ID\$%d" "$TAGFILE"
218 [ -s "$TAGFILE" ] || rm -f "$TAGFILE"
219fi
220EOF
221chmod -v 755 /usr/lib/ConsoleKit/run-session.d/pam-foreground-compat.ck</userinput></screen>
222
223 <para>
224 See /usr/share/doc/ConsoleKit/spec/ConsoleKit.html for more
225 configuration.
226 </para>
227
228 </sect3>
229
230 </sect2>
231
232 <sect2 role="content">
233 <title>Contents</title>
234
235 <segmentedlist>
236 <segtitle>Installed Programs</segtitle>
237 <segtitle>Installed Libraries</segtitle>
238 <segtitle>Installed Directories</segtitle>
239
240 <seglistitem>
241 <seg>
242 ck-history, ck-launch-session, ck-list-sessions,
243 ck-log-system-restart, ck-log-system-start,
244 ck-log-system-stop and console-kit-daemon
245 </seg>
246 <seg>
247 libck-connector.so and pam_ck_connector.so
248 </seg>
249 <seg>
250 /etc/ConsoleKit,
251 /usr/include/ConsoleKit,
252 /usr/lib/ConsoleKit,
253 /usr/share/doc/ConsoleKit and
254 /var/log/ConsoleKit
255 </seg>
256 </seglistitem>
257 </segmentedlist>
258
259 <variablelist>
260 <bridgehead renderas="sect3">Short Descriptions</bridgehead>
261 <?dbfo list-presentation="list"?>
262 <?dbhtml list-presentation="table"?>
263
264<!--
265 <varlistentry id="ck-history">
266 <term><command>ck-history</command></term>
267 <listitem>
268 <para>does this .....</para>
269 <indexterm zone="consolekit ck-history">
270 <primary sortas="b-ck-history">ck-history</primary>
271 </indexterm>
272 </listitem>
273 </varlistentry>
274
275 <varlistentry id="ck-launch-session">
276 <term><command>ck-launch-session</command></term>
277 <listitem>
278 <para>does this .....</para>
279 <indexterm zone="consolekit ck-launch-session">
280 <primary sortas="b-ck-launch-session">ck-launch-session</primary>
281 </indexterm>
282 </listitem>
283 </varlistentry>
284-->
285
286 <varlistentry id="ck-list-sessions">
287 <term><command>ck-list-sessions</command></term>
288 <listitem>
289 <para>list sessions with respective properties. Also good for
290 debugging purposes.</para>
291 <indexterm zone="consolekit ck-list-sessions">
292 <primary sortas="b-ck-list-sessions">ck-list-sessions</primary>
293 </indexterm>
294 </listitem>
295 </varlistentry>
296<!--
297 <varlistentry id="ck-log-system-restart">
298 <term><command>ck-log-system-restart</command></term>
299 <listitem>
300 <para>does this .....</para>
301 <indexterm zone="consolekit ck-log-system-restart">
302 <primary sortas="b-ck-log-system-restart">ck-log-system-restart</primary>
303 </indexterm>
304 </listitem>
305 </varlistentry>
306
307 <varlistentry id="ck-log-system-start">
308 <term><command>ck-log-system-start</command></term>
309 <listitem>
310 <para>does this .....</para>
311 <indexterm zone="consolekit ck-log-system-start">
312 <primary sortas="b-ck-log-system-start">ck-log-system-start</primary>
313 </indexterm>
314 </listitem>
315 </varlistentry>
316
317 <varlistentry id="ck-log-system-stop">
318 <term><command>ck-log-system-stop</command></term>
319 <listitem>
320 <para>does this .....</para>
321 <indexterm zone="consolekit ck-log-system-stop">
322 <primary sortas="b-ck-log-system-stop">ck-log-system-stop</primary>
323 </indexterm>
324 </listitem>
325 </varlistentry>
326
327 <varlistentry id="console-kit-daemon">
328 <term><command>console-kit-daemon</command></term>
329 <listitem>
330 <para>is the <application>ConsoleKit</application> daemon.</para>
331 <indexterm zone="consolekit console-kit-daemon">
332 <primary sortas="b-console-kit-daemon">console-kit-daemon</primary>
333 </indexterm>
334 </listitem>
335 </varlistentry>
336
337 <varlistentry id="ck-collect-session-info">
338 <term><command>ck-collect-session-info</command></term>
339 <listitem>
340 <para>does this .....</para>
341 <indexterm zone="consolekit ck-collect-session-info">
342 <primary sortas="b-ck-collect-session-info">ck-collect-session-info</primary>
343 </indexterm>
344 </listitem>
345 </varlistentry>
346
347 <varlistentry id="ck-get-x11-display-device">
348 <term><command>ck-get-x11-display-device</command></term>
349 <listitem>
350 <para>does this .....</para>
351 <indexterm zone="consolekit ck-get-x11-display-device">
352 <primary sortas="b-ck-get-x11-display-device">ck-get-x11-display-device</primary>
353 </indexterm>
354 </listitem>
355 </varlistentry>
356
357 <varlistentry id="ck-get-x11-server-pid">
358 <term><command>ck-get-x11-server-pid</command></term>
359 <listitem>
360 <para>does this .....</para>
361 <indexterm zone="consolekit ck-get-x11-server-pid">
362 <primary sortas="b-ck-get-x11-server-pid">ck-get-x11-server-pid</primary>
363 </indexterm>
364 </listitem>
365 </varlistentry>
366
367 <varlistentry id="ck-system-restart">
368 <term><command>ck-system-restart</command></term>
369 <listitem>
370 <para>does this .....</para>
371 <indexterm zone="consolekit ck-system-restart">
372 <primary sortas="b-ck-system-restart">ck-system-restart</primary>
373 </indexterm>
374 </listitem>
375 </varlistentry>
376
377 <varlistentry id="ck-system-stop">
378 <term><command>ck-system-stop</command></term>
379 <listitem>
380 <para>does this .....</para>
381 <indexterm zone="consolekit ck-system-stop">
382 <primary sortas="b-ck-system-stop">ck-system-stop</primary>
383 </indexterm>
384 </listitem>
385 </varlistentry>
386
387 <varlistentry id="libck-connector">
388 <term><filename class='libraryfile'>libck-connector.so</filename></term>
389 <listitem>
390 <para>contains functions that .....</para>
391 <indexterm zone="consolekit libck-connector">
392 <primary sortas="c-libck-connector">libck-connector.so</primary>
393 </indexterm>
394 </listitem>
395 </varlistentry>
396
397 <varlistentry id="pam_ck_connector">
398 <term><filename class='libraryfile'>pam_ck_connector.so</filename></term>
399 <listitem>
400 <para>contains functions that .....</para>
401 <indexterm zone="consolekit pam_ck_connector">
402 <primary sortas="c-pam_ck_connector">pam_ck_connector.so</primary>
403 </indexterm>
404 </listitem>
405 </varlistentry>
406-->
407 </variablelist>
408
409 </sect2>
410
411</sect1>
Note: See TracBrowser for help on using the repository browser.