From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp11.migadu.com ([2001:41d0:8:6d80::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms5.migadu.com with LMTPS id aLZjD6H572L4CgAAbAwnHQ (envelope-from ) for ; Sun, 07 Aug 2022 19:42:57 +0200 Received: from aspmx1.migadu.com ([2001:41d0:8:6d80::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp11.migadu.com with LMTPS id UENiD6H572IYgAEA9RJhRA (envelope-from ) for ; Sun, 07 Aug 2022 19:42:57 +0200 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id EB2FFAEFC for ; Sun, 7 Aug 2022 19:42:56 +0200 (CEST) Received: from localhost ([::1]:40700 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1oKkIh-00080q-Os for larch@yhetil.org; Sun, 07 Aug 2022 13:42:55 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:57582) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1oKkHr-00080T-9a for guix-patches@gnu.org; Sun, 07 Aug 2022 13:42:03 -0400 Received: from debbugs.gnu.org ([209.51.188.43]:48514) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1oKkHr-00036S-0a for guix-patches@gnu.org; Sun, 07 Aug 2022 13:42:03 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1oKkHq-0002S0-RQ for guix-patches@gnu.org; Sun, 07 Aug 2022 13:42:02 -0400 X-Loop: help-debbugs@gnu.org Subject: [bug#56690] [PATCH] gnu: seatd-service-type: Should use seat group. Resent-From: muradm Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sun, 07 Aug 2022 17:42:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 56690 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: Ludovic =?UTF-8?Q?Court=C3=A8s?= Cc: 56690@debbugs.gnu.org Received: via spool by 56690-submit@debbugs.gnu.org id=B56690.16598940859350 (code B ref 56690); Sun, 07 Aug 2022 17:42:02 +0000 Received: (at 56690) by debbugs.gnu.org; 7 Aug 2022 17:41:25 +0000 Received: from localhost ([127.0.0.1]:38258 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1oKkHF-0002Qk-FD for submit@debbugs.gnu.org; Sun, 07 Aug 2022 13:41:25 -0400 Received: from nomad-cl1.staging.muradm.net ([139.162.159.157]:47076 helo=nomad-cl1.muradm.net) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1oKkHC-0002QW-L6 for 56690@debbugs.gnu.org; Sun, 07 Aug 2022 13:41:23 -0400 Received: from localhost ([127.0.0.1]:46790) by nomad-cl1.muradm.net with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1oKkGZ-0001WZ-2u; Sun, 07 Aug 2022 17:40:43 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=muradm.net; s=mail; h=Content-Type:MIME-Version:Message-ID:In-reply-to:Date:Subject:Cc:To :From:References:Sender:Reply-To:Content-Transfer-Encoding:Content-ID: Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc :Resent-Message-ID:List-Id:List-Help:List-Unsubscribe:List-Subscribe: List-Post:List-Owner:List-Archive; bh=yhYTpcpcVjklShORTkhamp8/du06ytbZxCinUoa4IYw=; b=yd6MLuFgAk0Nsw65p4tL2Ey2L3 oIlUx+REPZTFp9UIfXmVA/B/pYEovWplnfmQGrZatb6YR3cBFPnYeQmtK92ngVpRPcOONqXh2IJe1 uolpw4KVxgew/6N6qPCiKj/BS8xL8MevSmpxE56I97m1lSQ1w2cMqUAtMgYqnTE331t8VgMc2PpD/ 2THO6yKZmID64+Epmcy8HTWOBTNbRC/L8bu8tl85Jom/HmH1AgN1NE/Hv3WF/15Vb2uTOk82PI20y cvb5NB2OlBvBw/iio2ReJxQXbYdFc4cfnCdQ9UXzACN8eEVGuBU2QlCy8yHjGRq4sqWgNoh9J/R2D xKEgg+PYOts/iaCf6ElOY8eUj3G5iJSvWzwFyfc3TKvzQr0e717vr3QO0a4IEuhXXgBywbIFDwVSU w4EfpYyCi2ejtBgCekPSxX2gymVdGvm/r+iU4IXGPXi4mNYTjOKWCBNK1oDFdgGNR4h9jgqgY9+7O lriQESWKHcrPf0QNtsaSj+IA; Received: from muradm by localhost with local (Exim 4.96) (envelope-from ) id 1oKkH5-0000Wy-1i; Sun, 07 Aug 2022 20:41:15 +0300 References: <20220722042745.26745-1-mail@muradm.net> <87czdddrra.fsf@gnu.org> User-agent: mu4e 1.8.7; emacs 29.0.50 From: muradm Date: Sun, 07 Aug 2022 20:28:58 +0300 In-reply-to: <87czdddrra.fsf@gnu.org> Message-ID: <87les00x51.fsf@muradm.net> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha256; protocol="application/pgp-signature" X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-patches-bounces+larch=yhetil.org@gnu.org Sender: "Guix-patches" X-Migadu-Flow: FLOW_IN X-Migadu-To: larch@yhetil.org X-Migadu-Country: US ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1659894177; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type:resent-cc:resent-from:resent-sender: resent-message-id:in-reply-to:in-reply-to:references:references: list-id:list-help:list-unsubscribe:list-subscribe:list-post: dkim-signature; bh=yhYTpcpcVjklShORTkhamp8/du06ytbZxCinUoa4IYw=; b=UwlJwUq78PeToC6N7/jja+ySm9wBjMhFKFpxmmZ/xempz1t1QH91zqVQuMPSqwjthU9y1c c9T3BCjfnYyNKqS4YC7omU485CgMF0nxfCzzdWMbBfF4dPbeaKMyw6iCOi+esJ5GZl6Oar l+4WjzN+TtQ/GeftrOjVL7pQbwtRDCWdMqVS4zJf+YyShy7XZlgqi9KOHbiBiv1C6Q0VAY VW2WRlTDwYheRwOv7yYiGIxq9zV9c3NjX/iSO0l489a+Yvc8mZ4hkyD9kl36b/Naa9EY+p ulUnlbEHzAPJw6zhK3gPQ30xXq4R+uw98ecOPuJINDbtAyvKYx4PMyKzIVe8Nw== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1659894177; a=rsa-sha256; cv=none; b=RCQyb0slyHTDgIbXleaCFeKkfPQjxyMzLlhJOXuNmaiKKAh7SHYaNGutcSQPcr0NhhRYFI U2nvhX/yOBiek7fkWn+WoV3PpOLvStWN7IlHfZMh4e2ga4WOeDldsGtWkTogIBDLTHrZBl gByZzgnLw42Ci6UIwtHCy4kSSknqT4hrGEHsrwTtudlJFkd+6kkLhM3Sw6vIoK4pfw3tCX k0EOJfgk+N8EUS/5GX7Gf8/Wry2Lc4ZKXOHd/7dqtwuHNNIa8W/lkkQ0gVVo+sGPmNVsbF XHkznmV5daWT+iUTzeWSppWYyOtMi73EGMytC+X/1CuqyOEVuXNJpFvZ3UdgrA== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=muradm.net header.s=mail header.b=yd6MLuFg; dmarc=none; spf=pass (aspmx1.migadu.com: domain of "guix-patches-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-patches-bounces+larch=yhetil.org@gnu.org" X-Migadu-Spam-Score: -1.59 Authentication-Results: aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=muradm.net header.s=mail header.b=yd6MLuFg; dmarc=none; spf=pass (aspmx1.migadu.com: domain of "guix-patches-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-patches-bounces+larch=yhetil.org@gnu.org" X-Migadu-Queue-Id: EB2FFAEFC X-Spam-Score: -1.59 X-Migadu-Scanner: scn0.migadu.com X-TUID: 1ybuLxkShymY --=-=-= Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: quoted-printable Hi, Ludovic Court=C3=A8s writes: > Hi, > > muradm skribis: > >> * gnu/services/desktop.scm (seatd-service-type): Uses "seat"=20 >> group. >> [extensions]: Added account-service-type with %seatd-accounts. >> (%seatd-accounts): List with "seat" group. >> (): [group] Change default value to=20 >> "seat". >> * doc/guix.texi: Mention that users may need to become members=20 >> of >> "seat" group and update default value for group field. > > I guess I=E2=80=99m missing some context: is this fixing a bug currently > present? (Apologies if this has been discussed elsewhere!) > Not really a bug, but misconfiguration i suppose. Started here=20 with commit about month or two ago: https://lists.gnu.org/archive/html/guix-devel/2022-08/msg00021.html Basically, with original configuration, greeter was in the wheel=20 group which allowed it to communicate with seatd over /run/seatd.sock. >> +Users which are going to interact with @code{seatd} daemon=20 >> while logged in > > s/which/who/ > With above fix, wheel and other groups were removed. While it was=20 not affecting default greeter agretty, some people including me, use graphical greeter gtkgreet or others based on sway. Then sway with greeter started by greetd needs to communicate with seatd. Due to the fact of missing permission, greeter just dies with blank=20 screen. So "users which are going to interact" basically users who want to run sway, or anything else requiring libseat based seat=20 management present. >> +should be added to @code{seat} group. For instance: >> + >> +@lisp >> +(user-account >> + (name "alice") >> + (group "users") >> + (supplementary-groups '("wheel" ;allow use of sudo, etc. >> + "seat" ;interact with seatd >> + "audio" ;sound card >> + "video" ;video devices such as=20 >> webcams >> + "cdrom")) ;the good ol' CD-ROM >> + (comment "Bob's sister")) > > The problem I see with this extra doc is that even I wouldn=E2=80=99t=20 > know how > to tell whether I=E2=80=99m going to =E2=80=9Cinteract with seatd=E2=80= =9D.=20 > Fundamentally it=E2=80=99s > not something I really care about. :-) > > How could we improve on this? Like, if this is important,=20 > should it be > the default? > Two options, a) users who want greetd/seatd setup normally=20 advanced users wishing to get away from systemd/logind/dbus world, so they probably was to be aware of what is going on; b) copy a piece of documentation from seatd, explaining seatd.sock maybe. Other than that I could ask the same question about video, audio etc. groups=20 :) > Thanks, > Ludo=E2=80=99. --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEESPY5lma9A9l5HGLP6M7O0mLOBeIFAmLv+ToACgkQ6M7O0mLO BeKg1BAAlL9PDuhHMyFYW+BzphnqLFw03WLV4lcFJZ9DFVHNOecGvS/O3xpDWBPi v9l12weJsyfSpKEEmyER2uZGPaHZ/UTvCN6nhB2vrUvSMlIAipnIOVavWzTXq0AW ZgWzKlCFAa6lcHg+WLkmgv3dTb9LKb66pYPsLonS8FvZ3lSxGCaRH1Z5m2xer4wR iXjld7nrN3h8WG+iD6nqBk3Lm1Yjd17j/ewuamTuYnyr6oqZilVeIPxCUCd3+u3N lg9fXzn6LGFO8oNVpgz5sZDDYkSimZ7Ao593gJYmCi/o6fJsqYxmdkUYIEnVxtTA ArmIjyMRHRgwqG8LKfPmUKNoA0g2QhYjwr/eD9QcGS/X7klSGRwjTUR7H97vKxSE txNTe1R8XtxhI3FKGGkKscUkKBe0brAm/tE2zaJDAo+9Dvcy20zTOw6wvZzh8ap+ NMoIz+EgqNcXDPkpqKFUAM0ZYeFsN9rGnwP6lpixML5yo1QjLaIJwviq5Y63XvgD M7Qbt9EjSflA1bZ7F8yIckl70oSfOZjcFYHtWxgqc7bJKxMMG+KPUDGz8tZqCxX4 Dd0rn8LjAyPOsv+DBnEreIEZXYPbeR10cNEnMHKZ4nY9pmmqH2kma4Jbft8nEn/n yiIWfNIYo622/Ikp3f7BEztiOgcKTir1hCX/MU3a00A5tjUjA3Y= =fs8Z -----END PGP SIGNATURE----- --=-=-=--