From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp12.migadu.com ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms5.migadu.com with LMTPS id YCbeGOm+8mJCWwAAbAwnHQ (envelope-from ) for ; Tue, 09 Aug 2022 22:09:13 +0200 Received: from aspmx1.migadu.com ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp12.migadu.com with LMTPS id 4DC9GOm+8mJ3MAAAauVa8A (envelope-from ) for ; Tue, 09 Aug 2022 22:09:13 +0200 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 2830211869 for ; Tue, 9 Aug 2022 22:09:13 +0200 (CEST) Received: from localhost ([::1]:35676 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1oLVXM-0005TA-6K for larch@yhetil.org; Tue, 09 Aug 2022 16:09:12 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:53468) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1oLVXC-0005Sl-Fz for guix-patches@gnu.org; Tue, 09 Aug 2022 16:09:02 -0400 Received: from debbugs.gnu.org ([209.51.188.43]:55404) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1oLVXC-0005oU-5W for guix-patches@gnu.org; Tue, 09 Aug 2022 16:09:02 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1oLVXC-0001Oi-0l for guix-patches@gnu.org; Tue, 09 Aug 2022 16:09:02 -0400 X-Loop: help-debbugs@gnu.org Subject: [bug#56690] [PATCH] gnu: seatd-service-type: Should use seat group. Resent-From: muradm Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Tue, 09 Aug 2022 20:09:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 56690 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: Liliana Marie Prikler Cc: Ludovic =?UTF-8?Q?Court=C3=A8s?= , 56690@debbugs.gnu.org Received: via spool by 56690-submit@debbugs.gnu.org id=B56690.16600756985315 (code B ref 56690); Tue, 09 Aug 2022 20:09:01 +0000 Received: (at 56690) by debbugs.gnu.org; 9 Aug 2022 20:08:18 +0000 Received: from localhost ([127.0.0.1]:45153 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1oLVWU-0001Ne-1w for submit@debbugs.gnu.org; Tue, 09 Aug 2022 16:08:18 -0400 Received: from nomad-cl1.staging.muradm.net ([139.162.159.157]:36254 helo=nomad-cl1.muradm.net) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1oLVWR-0001NP-QN for 56690@debbugs.gnu.org; Tue, 09 Aug 2022 16:08:16 -0400 Received: from localhost ([127.0.0.1]:54542) by nomad-cl1.muradm.net with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1oLVVl-0002QK-0q; Tue, 09 Aug 2022 20:07:33 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=muradm.net; s=mail; h=Content-Type:MIME-Version:Message-ID:In-reply-to:Date:Subject:Cc:To :From:References:Sender:Reply-To:Content-Transfer-Encoding:Content-ID: Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc :Resent-Message-ID:List-Id:List-Help:List-Unsubscribe:List-Subscribe: List-Post:List-Owner:List-Archive; bh=Wc6y2miFvfmNDVTOl1OXoHepMhsVxZ5OM4ISnvDs8fM=; b=wmfh4GK5Vyb4PYa1zZBtsjBkHr zW11mDZo78tkHMZImb2ZmvMctwJ7K460HR7abM0u2qPPrhFF9V75eLPkIBgrJvQ/HGQMEC5/qOj7M 2U45PafvvUv3bcAKdKKtDU5UfcBmM2KwXhgeWpWLT+oYYsaFF7BjsA2oaPmRAHJj+N+1mrCF6vJqc yOiWUY3uegbPgx+sgQDzhKA4HZbaz17xtCjQeWWMwPlbZFi7qrmuEP/7DSiKgU+uHPAJ1v0+gnkwq 4zoVwMprNfL2h6hgDDpl33D5A54SeS2Ge+WDmf2+ef1DzfW2pnnq4X1g7GYszF0ZhyOSqXgldio/1 K9h+M5l4CWJ0dQbFvemEaF7MayN1qo/WqEEa2DtCcXQcUuQvvL71jN3ydUcNJ4m6trxK1IZT6uCR3 8j+5xnxoLdAApPiW/0WFVATY5eHd31gZHgBzClG4T9VJuYXODkdjZ6V7+YtpkpPcjxRh4UntZoYCA UwEnaCdEDuiBQox5uGg6FD7w; Received: from muradm by localhost with local (Exim 4.96) (envelope-from ) id 1oLVWJ-0007Nt-1x; Tue, 09 Aug 2022 23:08:07 +0300 References: <20220722042745.26745-1-mail@muradm.net> <87czdddrra.fsf@gnu.org> <87les00x51.fsf@muradm.net> <87h72n24ra.fsf@muradm.net> <55a3a3bf118f364b70cbd74d214998955d81eaa9.camel@ist.tugraz.at> <87mtcezhty.fsf@muradm.net> <063eee23b1ff1b0f288d5e465aa5bac1862c9bb8.camel@ist.tugraz.at> User-agent: mu4e 1.8.7; emacs 29.0.50 From: muradm Date: Tue, 09 Aug 2022 22:47:01 +0300 In-reply-to: <063eee23b1ff1b0f288d5e465aa5bac1862c9bb8.camel@ist.tugraz.at> Message-ID: <87y1vxxjrt.fsf@muradm.net> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha256; protocol="application/pgp-signature" X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-patches-bounces+larch=yhetil.org@gnu.org Sender: "Guix-patches" X-Migadu-Flow: FLOW_IN X-Migadu-To: larch@yhetil.org X-Migadu-Country: US ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1660075753; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type:resent-cc:resent-from:resent-sender: resent-message-id:in-reply-to:in-reply-to:references:references: list-id:list-help:list-unsubscribe:list-subscribe:list-post: dkim-signature; bh=Wc6y2miFvfmNDVTOl1OXoHepMhsVxZ5OM4ISnvDs8fM=; b=ZbRFUFvj9ry3x2ChOU8spcq++iBeVirMqi4cB9sPikB4wId5zLpi7N1yOzmxbVKSMJGyG6 RNmbKa8L4wtmxIl6cnRQzPO2t1Aiot17PE33dual7kp5QjH9pWauspmenX0fNUdBc1SNHZ sZQBgQsGXAMwkAQIMRxjIFvwKcQMwXEAFslHboN8Jkn7qCBFWVoA7y0oGgvMyGPbnC2hoY 6w1g02D5v37LCZy80rzw5/7pSSLIhbkh4TP9VlFCHY2+zD4KcSmUoAmGVSgbeV7BC9ABtB gUs+0JBkPEhXrjqIUfL5ZmSBFk01j7INShd/DS6oSwUO0dVNZeGI3MEEkC++gg== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1660075753; a=rsa-sha256; cv=none; b=hvZSAVOTYQD1BeEGd9LV+bKEN/UZYl3hK1+oFXDzAXUepUJXi6Spz8ME/RceP3de2g8ymu D4vgF9dAExr6dVlPJfxtoD7m8O7kK70SNocDWbFl2Hyljh5XTnuMFH2ztJIhqvbl/on3aG h1zaivbuXFDzHlDucwivFj6JOK6qBCBzyCUMhXOzi584ZtiZmzMy30KSBOtQhGoYfbp6rY erSzTXjYVZ7rMDI67xenViSjj1i7wcsVfBd9YopPyVBFgy3RVcEKYDKfVANnf9j1Gs8uDb BGXr7tOHHdwmfsL0K1ngmg+MYjDmen5Rov1u2RxqjUz39DL3u6iGGqr6Dfu3iA== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=muradm.net header.s=mail header.b=wmfh4GK5; dmarc=none; spf=pass (aspmx1.migadu.com: domain of "guix-patches-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-patches-bounces+larch=yhetil.org@gnu.org" X-Migadu-Spam-Score: -1.59 Authentication-Results: aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=muradm.net header.s=mail header.b=wmfh4GK5; dmarc=none; spf=pass (aspmx1.migadu.com: domain of "guix-patches-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-patches-bounces+larch=yhetil.org@gnu.org" X-Migadu-Queue-Id: 2830211869 X-Spam-Score: -1.59 X-Migadu-Scanner: scn0.migadu.com X-TUID: MevvmZst/m0O --=-=-= Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: quoted-printable Liliana Marie Prikler writes: > Am Montag, dem 08.08.2022 um 21:50 +0300 schrieb muradm: >> > Which user?=C2=A0 Closely related, who acquires resources provided=20 >> > by >> > @code{seatd}?=C2=A0 Just the greeter?=C2=A0 A regular user logging in? >> > What access level is needed/provided?=C2=A0 Read access?=C2=A0 Write >> > access? >> While I understand what you are saying, for me user is fine,=20 >> and I >> can't come up with better description, as my eyes too blurred=20 >> on >> this subject. Anyway for now I specified it as "libseat user". > I don't think this really aids us here =E2=80=93 it instead lets us ask=20 > who is > a "libseat user". Perhaps you want to specify "login managers"=20 > like > greetd or gdm/sddm/etc. explicitly here? Also, (when) do=20 > regular users > have to be in the seat group? There is no such specification as login manager or what ever. User=20 is any one/thing acquiring resources via seat management. It is=20 perfectly fine to run mingetty, login into bash and from command line start=20 sway that will use libseat to acquire video for instance. Who is user=20 here? There is also no display manager as it was before. Please see my explanation to unmatched-paren:=20 https://debbugs.gnu.org/cgi/bugreport.cgi?msg=3D46;bug=3D56690 What is sway in this usecase, it is not a user (like you or me), it is not a display manager (as gdm, sddm etc.). It is just application requiring video card (not only) resource, which it instead of having exclusive root access, uses libseat to acquire it in "seat managy" way. And greetd does/should not care about seatd/libseat until it is not required to acquire resources in "seat managy" way. Instead it is a greeter which is totatly customizable, could be even a bash script or small suckless-like application or else. This is the point of seatd I suppose, to do one thing only without enforcing on who should do what. Thus, none of your proposals are suitable, and I can't come up with something better than "seat management user" or "libseat user". However in my opinion, the one who commits into such setup, should be aware of what is seatd libseat and how, why to interact with it. >> > > +=C2=A0 (group seatd-group (default "seat")) >> > > +=C2=A0 (existing-group? seatd-existing-group? (default #f)) >> > AFAIK this is not necessary.=C2=A0 accounts-service-type can=20 >> > handle >> > multiple eq? groups, so as long as you're careful with what=20 >> > you put >> > into group, you shouldn't get an error. >> ok field removed > Note =E2=80=98eq?=E2=80=99 groups here. In other words, you should be ab= le to=20 > take a > group (not just a group name) for the group field, sanitize the=20 > field > so that it will always be a group, and then use that group in=20 > seatd- > accounts (see the second option mentioned in > <79341a82bf9cd5fc6c2227255095f3fe2927dcbe.camel@ist.tugraz.at>).=20 > If > for instance instead of seat, you wanted the video group, you=20 > would > have to take the one from %base-groups, rather than creating a=20 > new one. Sorry, but I'm not so proficient in english as you. I can only speculate on what is written here. And that reference does not say anything to me, even duck duck go gives single result, it is your message. Could you please be more specific here, and/or provide more useful hyperlink style references. Thanks in advance. > Cheers --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEESPY5lma9A9l5HGLP6M7O0mLOBeIFAmLyvqcACgkQ6M7O0mLO BeJ33g//Y3p0ZZS5LeyPn/fYrNpYGcWSTHDNLE62062nTAagyfHTsF9fLUeh+F82 9oBhWMQ0KZKCwJaPpPP8UrG+Rx1PRMOFsHBtP4x0ynO8TsFy4BH9Aq54oPpIZqdT XSpiLZg2g2EN+G6qOpxP57sdtm5mTMkEA6+0NOLPQnHLMP5Jq8bjTTqeFcuyWeg7 n4HG1twfWGGlE65oWgWysWGUCIcU2ihclCibvaL+Ro2e6kKMVRsDiCNSGn/RHcRK l3ewd67f+Jlwc62HNyC71tQojdkTM2zODhBl6+XlM0DcklVMcxtpMrIMhWa5KT/3 Rq8gB06RiiFMJJebB2f/deqNYNxwS272sa4tgq5wE9j+Vtkdjj1U2sLJMvXri8da hGkHjEcN1eBrM8lOBAS1juxESuM2EE7rZ+2SVZF2TemlxIRt3R8kzkfjs/A9+Ep3 LFGB1UKsZcozMoeCT3a4qk/O3XluooTH/+/cEX2vVqyU5mavzCKD1YfjyFWkWJfn K2EHRk2G9f41qpVddcQRGcbHUqjwUyTCaaMp8sXRUbYUQlPyvGM5BFQskk6ceXzm UygW+Q4sdtfEXhgDCuEYTbu1GdWXZKuMjvFq3cATGHqvIMpWMZmCCfKIZ+xJMCO3 UwtsLnFxURrxZjsfljQhCGLviKQy+bZr5VNZHqJNd/KJRW/zJNA= =NHrW -----END PGP SIGNATURE----- --=-=-=--