source: postlfs/security/consolekit.xml@ b3f038c6

10.0 10.1 11.0 11.1 11.2 11.3 12.0 12.1 7.10 7.9 8.0 8.1 8.2 8.3 8.4 9.0 9.1 basic bdubbs/svn elogind kea ken/TL2024 ken/inkscape-core-mods ken/tuningfonts lazarus lxqt nosym perl-modules plabs/newcss plabs/python-mods python3.11 qt5new rahul/power-profiles-daemon renodr/vulkan-addition trunk upgradedb xry111/intltool xry111/llvm18 xry111/soup3 xry111/test-20220226 xry111/xf86-video-removal
Last change on this file since b3f038c6 was b3f038c6, checked in by Ken Moffat <ken@…>, 8 years ago

tags

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@17023 af4574ff-66df-0310-9fd7-8a98e5e911e0
  • Property mode set to 100644
File size: 14.3 KB
Line 
1<?xml version="1.0" encoding="ISO-8859-1"?>
2<!DOCTYPE sect1 PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN"
3 "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
4 <!ENTITY % general-entities SYSTEM "../../general.ent">
5 %general-entities;
6
7 <!ENTITY consolekit-download-http "https://github.com/Consolekit2/ConsoleKit2/releases/download/&consolekit-version;/ConsoleKit2-&consolekit-version;.tar.bz2">
8 <!ENTITY consolekit-download-ftp " ">
9 <!ENTITY consolekit-md5sum "fcdaf885658f6b22e5f4930cc63fc3ea">
10 <!ENTITY consolekit-size "1.2 MB">
11 <!ENTITY consolekit-buildsize "16 MB">
12 <!ENTITY consolekit-time "0.1 SBU">
13]>
14
15<sect1 id="consolekit" xreflabel="ConsoleKit2-&consolekit-version;">
16 <?dbhtml filename="consolekit.html"?>
17
18 <sect1info>
19 <othername>$LastChangedBy$</othername>
20 <date>$Date$</date>
21 </sect1info>
22
23 <title>ConsoleKit2-&consolekit-version;</title>
24
25 <indexterm zone="consolekit">
26 <primary sortas="a-ConsoleKit">ConsoleKit2</primary>
27 </indexterm>
28
29 <sect2 role="package">
30 <title>Introduction to ConsoleKit</title>
31
32 <para>
33 The <application>ConsoleKit</application> package is a framework for
34 keeping track of the various users, sessions, and seats present on a system.
35 It provides a mechanism for software to react to changes of any of these
36 items or of any of the metadata associated with them.
37 </para>
38
39 &lfs79_checked;
40
41 <bridgehead renderas="sect3">Package Information</bridgehead>
42 <itemizedlist spacing="compact">
43 <listitem>
44 <para>
45 Download (HTTP): <ulink url="&consolekit-download-http;"/>
46 </para>
47 </listitem>
48 <listitem>
49 <para>
50 Download (FTP): <ulink url="&consolekit-download-ftp;"/>
51 </para>
52 </listitem>
53 <listitem>
54 <para>
55 Download MD5 sum: &consolekit-md5sum;
56 </para>
57 </listitem>
58 <listitem>
59 <para>
60 Download size: &consolekit-size;
61 </para>
62 </listitem>
63 <listitem>
64 <para>
65 Estimated disk space required: &consolekit-buildsize;
66 </para>
67 </listitem>
68 <listitem>
69 <para>
70 Estimated build time: &consolekit-time;
71 </para>
72 </listitem>
73 </itemizedlist>
74
75 <bridgehead renderas="sect3">ConsoleKit Dependencies</bridgehead>
76
77 <bridgehead renderas="sect4">Required</bridgehead>
78 <para role="required">
79 <xref linkend="dbus-glib"/> and
80 <xref linkend="xorg7-lib"/>
81 </para>
82
83 <bridgehead renderas="sect4">Recommended</bridgehead>
84 <para role="recommended">
85 <xref linkend="linux-pam"/> and
86 <xref linkend="polkit"/>
87 </para>
88
89 <warning>
90 <para>
91 If you intend <emphasis role="strong">NOT</emphasis> to install
92 <application>polkit</application>, you will need to manually edit the
93 ConsoleKit.conf file to lock down the service. Failure to do so may be a
94 huge SECURITY HOLE.
95 </para>
96 </warning>
97
98 <bridgehead renderas="sect4">Optional</bridgehead>
99 <para role="optional">
100 <xref linkend="xmlto"/>
101 </para>
102
103 <para condition="html" role="usernotes">User Notes:
104 <ulink url="&blfs-wiki;/consolekit"/>
105 </para>
106 </sect2>
107
108 <sect2 role="installation">
109 <title>Installation of ConsoleKit</title>
110
111 <para>
112 Install <application>ConsoleKit</application> by running the following
113 commands:
114 </para>
115
116<screen><userinput>./configure --prefix=/usr \
117 --sysconfdir=/etc \
118 --localstatedir=/var \
119 --enable-udev-acl \
120 --enable-pam-module \
121 --enable-polkit \
122 --with-xinitrc-dir=/etc/X11/app-defaults/xinitrc.d \
123 --docdir=/usr/share/doc/ConsoleKit-&consolekit-version; \
124 --with-systemdsystemunitdir=no &amp;&amp;
125make</userinput></screen>
126
127 <para>
128 This package does not come with a test suite.
129 </para>
130
131 <para>
132 Now, as the <systemitem class="username">root</systemitem> user:
133 </para>
134
135<screen role="root"><userinput>make install &amp;&amp;
136
137mv -v /etc/X11/app-defaults/xinitrc.d/90-consolekit{,.sh}</userinput></screen>
138
139 </sect2>
140
141 <sect2 role="commands">
142 <title>Command Explanations</title>
143
144 <para>
145 <parameter>--enable-udev-acl</parameter>: This switch enables building of
146 the <command>udev-acl</command> tool, which is used to allow normal users
147 to access device nodes normally only accessible to
148 <systemitem class="username">root</systemitem>.
149 </para>
150
151 <para>
152 <parameter>--enable-pam-module</parameter>: This switch enables building
153 of the <application>ConsoleKit</application>
154 <application>PAM</application> module which is needed for
155 <application>ConsoleKit</application> to work correctly with
156 <application>PAM</application>. Remove if
157 <application>Linux PAM</application> is
158 <emphasis role="strong">NOT</emphasis> installed.
159 </para>
160
161 <para>
162 <parameter>--enable-polkit</parameter>: Enable PolicyKit support.
163 </para>
164
165 <para>
166 <parameter>--with-xinitrc-dir=/etc/X11/app-defaults/xinitrc.d</parameter>:
167 Fix the location of the 90-consolekit.sh script. Notice that the script
168 has been renamed after installation, because xinitrc only sources script
169 names ending with extension <emphasis>.sh</emphasis>.
170 </para>
171
172 <para>
173 <parameter>--with-systemdsystemunitdir=no</parameter>: Disable
174 attempting to build with systemd libraries.
175 </para>
176
177 <para>
178 <option>--enable-docbook-docs</option>: Use this switch if
179 <application>xmlto</application> is installed and you wish to
180 build the user and API documentation.
181 </para>
182
183 </sect2>
184
185 <sect2 role="configuration">
186 <title>Configuring ConsoleKit</title>
187
188 <sect3>
189 <title>PAM Module Configuration</title>
190
191 <para>
192 If you use <application>Linux PAM</application>, it needs to be
193 configured to activate <application>ConsoleKit</application> upon user
194 login. This can be achieved by editing the
195 <filename>/etc/pam.d/system-session</filename> file as the <systemitem
196 class="username">root</systemitem> user:
197 </para>
198
199<screen role="root"><userinput>cat &gt;&gt; /etc/pam.d/system-session &lt;&lt; "EOF"
200<literal># Begin ConsoleKit addition
201
202session optional pam_loginuid.so
203session optional pam_ck_connector.so nox11
204
205# End ConsoleKit addition</literal>
206EOF</userinput></screen>
207
208 <para>
209 You will also need a helper script that creates a file in
210 <filename class="directory">/var/run/console</filename>
211 named as the currently logged in user and that contains the
212 <application>D-Bus</application> address of the session. You
213 can create the script by running the following commands as
214 the <systemitem class="username">root</systemitem> user:
215 </para>
216
217<screen role="root"><userinput>cat &gt; /usr/lib/ConsoleKit/run-session.d/pam-foreground-compat.ck &lt;&lt; "EOF"
218#!/bin/sh
219TAGDIR=/var/run/console
220
221[ -n "$CK_SESSION_USER_UID" ] || exit 1
222[ "$CK_SESSION_IS_LOCAL" = "true" ] || exit 0
223
224TAGFILE="$TAGDIR/`getent passwd $CK_SESSION_USER_UID | cut -f 1 -d:`"
225
226if [ "$1" = "session_added" ]; then
227 mkdir -p "$TAGDIR"
228 echo "$CK_SESSION_ID" &gt;&gt; "$TAGFILE"
229fi
230
231if [ "$1" = "session_removed" ] &amp;&amp; [ -e "$TAGFILE" ]; then
232 sed -i "\%^$CK_SESSION_ID\$%d" "$TAGFILE"
233 [ -s "$TAGFILE" ] || rm -f "$TAGFILE"
234fi
235EOF
236chmod -v 755 /usr/lib/ConsoleKit/run-session.d/pam-foreground-compat.ck</userinput></screen>
237
238 <para>
239 See /usr/share/doc/ConsoleKit/spec/ConsoleKit.html for more
240 configuration.
241 </para>
242
243 </sect3>
244
245 </sect2>
246
247 <sect2 role="content">
248 <title>Contents</title>
249
250 <segmentedlist>
251 <segtitle>Installed Programs</segtitle>
252 <segtitle>Installed Libraries</segtitle>
253 <segtitle>Installed Directories</segtitle>
254
255 <seglistitem>
256 <seg>
257 ck-history, ck-launch-session, ck-list-sessions,
258 ck-log-system-restart, ck-log-system-start,
259 ck-log-system-stop and console-kit-daemon
260 </seg>
261 <seg>
262 libck-connector.so and pam_ck_connector.so
263 </seg>
264 <seg>
265 /etc/ConsoleKit,
266 /usr/{include,lib}/ConsoleKit,
267 /usr/share/doc/ConsoleKit-&consolekit-version;, and
268 /var/{log,run}/ConsoleKit
269 </seg>
270 </seglistitem>
271 </segmentedlist>
272
273 <variablelist>
274 <bridgehead renderas="sect3">Short Descriptions</bridgehead>
275 <?dbfo list-presentation="list"?>
276 <?dbhtml list-presentation="table"?>
277
278 <varlistentry id="ck-history">
279 <term><command>ck-history</command></term>
280 <listitem>
281 <para>is a utility that provides information from the ConsoleKit
282 database about what users have logged into the system.</para>
283 <indexterm zone="consolekit ck-history">
284 <primary sortas="b-ck-history">ck-history</primary>
285 </indexterm>
286 </listitem>
287 </varlistentry>
288
289 <varlistentry id="ck-launch-session">
290 <term><command>ck-launch-session</command></term>
291 <listitem>
292 <para>is a utility for starting a command in its own ConsoleKit
293 session.
294 </para>
295 <indexterm zone="consolekit ck-launch-session">
296 <primary sortas="b-ck-launch-session">ck-launch-session</primary>
297 </indexterm>
298 </listitem>
299 </varlistentry>
300
301 <varlistentry id="ck-list-sessions">
302 <term><command>ck-list-sessions</command></term>
303 <listitem>
304 <para>list sessions with respective properties. Also good for
305 debugging purposes.</para>
306 <indexterm zone="consolekit ck-list-sessions">
307 <primary sortas="b-ck-list-sessions">ck-list-sessions</primary>
308 </indexterm>
309 </listitem>
310 </varlistentry>
311
312 <varlistentry id="ck-log-system-restart">
313 <term><command>ck-log-system-restart</command></term>
314 <listitem>
315 <para>write system restart to log.</para>
316 <indexterm zone="consolekit ck-log-system-restart">
317 <primary sortas="b-ck-log-system-restart">ck-log-system-restart</primary>
318 </indexterm>
319 </listitem>
320 </varlistentry>
321
322 <varlistentry id="ck-log-system-start">
323 <term><command>ck-log-system-start</command></term>
324 <listitem>
325 <para>write system start to log.</para>
326 <indexterm zone="consolekit ck-log-system-start">
327 <primary sortas="b-ck-log-system-start">ck-log-system-start</primary>
328 </indexterm>
329 </listitem>
330 </varlistentry>
331
332 <varlistentry id="ck-log-system-stop">
333 <term><command>ck-log-system-stop</command></term>
334 <listitem>
335 <para>write system stop to log.</para>
336 <indexterm zone="consolekit ck-log-system-stop">
337 <primary sortas="b-ck-log-system-stop">ck-log-system-stop</primary>
338 </indexterm>
339 </listitem>
340 </varlistentry>
341
342 <varlistentry id="console-kit-daemon">
343 <term><command>console-kit-daemon</command></term>
344 <listitem>
345 <para>is the <application>ConsoleKit</application> daemon.</para>
346 <indexterm zone="consolekit console-kit-daemon">
347 <primary sortas="b-console-kit-daemon">console-kit-daemon</primary>
348 </indexterm>
349 </listitem>
350 </varlistentry>
351
352<!-- Note (Denis): I don't know if theses programs are installed by the current version of consolekit.
353 Must be validate before uncomment
354
355 <varlistentry id="ck-collect-session-info">
356 <term><command>ck-collect-session-info</command></term>
357 <listitem>
358 <para>displays session informations about the current session.</para>
359 <indexterm zone="consolekit ck-collect-session-info">
360 <primary sortas="b-ck-collect-session-info">ck-collect-session-info</primary>
361 </indexterm>
362 </listitem>
363 </varlistentry>
364
365 <varlistentry id="ck-get-x11-display-device">
366 <term><command>ck-get-x11-display-device</command></term>
367 <listitem>
368 <para>displays the x11 display device of the current session.</para>
369 <indexterm zone="consolekit ck-get-x11-display-device">
370 <primary sortas="b-ck-get-x11-display-device">ck-get-x11-display-device</primary>
371 </indexterm>
372 </listitem>
373 </varlistentry>
374
375 <varlistentry id="ck-get-x11-server-pid">
376 <term><command>ck-get-x11-server-pid</command></term>
377 <listitem>
378 <para>displays the x11 server pid of the current session.</para>
379 <indexterm zone="consolekit ck-get-x11-server-pid">
380 <primary sortas="b-ck-get-x11-server-pid">ck-get-x11-server-pid</primary>
381 </indexterm>
382 </listitem>
383 </varlistentry>
384
385 <varlistentry id="ck-system-restart">
386 <term><command>ck-system-restart</command></term>
387 <listitem>
388 <para>is the system restart script.</para>
389 <indexterm zone="consolekit ck-system-restart">
390 <primary sortas="b-ck-system-restart">ck-system-restart</primary>
391 </indexterm>
392 </listitem>
393 </varlistentry>
394
395 <varlistentry id="ck-system-stop">
396 <term><command>ck-system-stop</command></term>
397 <listitem>
398 <para>is the system stop script.</para>
399 <indexterm zone="consolekit ck-system-stop">
400 <primary sortas="b-ck-system-stop">ck-system-stop</primary>
401 </indexterm>
402 </listitem>
403 </varlistentry>
404
405 <varlistentry id="libck-connector">
406 <term><filename class='libraryfile'>libck-connector.so</filename></term>
407 <listitem>
408 <para>contains functions that .....</para>
409 <indexterm zone="consolekit libck-connector">
410 <primary sortas="c-libck-connector">libck-connector.so</primary>
411 </indexterm>
412 </listitem>
413 </varlistentry>
414
415 <varlistentry id="pam_ck_connector">
416 <term><filename class='libraryfile'>pam_ck_connector.so</filename></term>
417 <listitem>
418 <para>contains functions that .....</para>
419 <indexterm zone="consolekit pam_ck_connector">
420 <primary sortas="c-pam_ck_connector">pam_ck_connector.so</primary>
421 </indexterm>
422 </listitem>
423 </varlistentry>
424-->
425 </variablelist>
426
427 </sect2>
428
429</sect1>
Note: See TracBrowser for help on using the repository browser.