From Irene.Huang@sun.com Thu Apr 17 01:58:10 2008 Received: from sunmail5.uk.sun.com (sunmail5.UK.Sun.COM [129.156.85.165]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m3H8w945017804 for ; Thu, 17 Apr 2008 01:58:10 -0700 (PDT) Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11]) by sunmail5.uk.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id m3H8w20f001316 for <@sunmail2sca.sfbay.sun.com:lsarc-ext@sun.com>; Thu, 17 Apr 2008 09:58:08 +0100 (BST) Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0JZG00611OWS8O00@brm-avmta-1.central.sun.com> for lsarc-ext@sun.com (ORCPT lsarc-ext@sun.com); Thu, 17 Apr 2008 02:58:04 -0600 (MDT) Received: from sineb-mail-1.sun.com ([192.18.19.6]) by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0JZG00JFVOWRYG60@brm-avmta-1.central.sun.com> for lsarc-ext@sun.com (ORCPT lsarc-ext@sun.com); Thu, 17 Apr 2008 02:58:04 -0600 (MDT) Received: from fe-apac-06.sun.com (fe-apac-06.sun.com [192.18.19.177] (may be forged)) by sineb-mail-1.sun.com (8.13.6+Sun/8.12.9) with ESMTP id m3H8wFMR024107 for ; Thu, 17 Apr 2008 08:58:15 +0000 (GMT) Received: from conversion-daemon.mail-apac.sun.com by mail-apac.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) id <0JZG00201OKKUG00@mail-apac.sun.com> (original mail from Irene.Huang@Sun.COM) for lsarc-ext@sun.com (ORCPT lsarc-ext@sun.com); Thu, 17 Apr 2008 16:57:22 +0800 (SGT) Received: from [129.156.235.228] by mail-apac.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) with ESMTPSA id <0JZG00BPLOVKREKH@mail-apac.sun.com> for lsarc-ext@sun.com (ORCPT lsarc-ext@sun.com); Thu, 17 Apr 2008 16:57:22 +0800 (SGT) Date: Thu, 17 Apr 2008 16:57:59 +0100 From: Irene Huang Subject: GNOME shutdown dialog [LSARC/2008/262 FastTrack timeout 04/23/2008] Sender: Irene.Huang@sun.com To: lsarc-ext@sun.com Message-id: <1208447879.1074.5.camel@localhost> MIME-version: 1.0 X-Mailer: Evolution 2.12.1 Content-type: multipart/mixed; boundary="Boundary_(ID_NLXvP/W+iJ3tlLHF4admdQ)" X-PMX-Version: 5.4.1.325704 Status: RO Content-Length: 7947 --Boundary_(ID_NLXvP/W+iJ3tlLHF4admdQ) Content-type: text/plain Content-transfer-encoding: 7BIT Hi, all I am sponsoring this case, and setting the time out to be 04/23/2008. The proposal is attached. Please review. --Irene --Boundary_(ID_NLXvP/W+iJ3tlLHF4admdQ) Content-type: text/plain; charset=UTF-8; name=proposal.txt Content-transfer-encoding: 7BIT Content-disposition: attachment; filename=proposal.txt Template Version: @(#)onepager.txt 1.35 07/11/07 SMI Copyright 2007 Sun Microsystems 1. Introduction 1.1. Project/Component Working Name: GNOME shutdown dialog 1.2. Name of Document Author/Supplier: Simon Zheng 1.3. Date of This Document: 04/10/08 2. Background In Solaris gnome desktop, there are 4 scenarios that require user to confirm with logout or shutdown action. - Clicking buttons in launch menu of gnome-panel - Response to user pressing power button - Response to suspend key from keyboard - Sending XSMP saveyourself request to gnome-session. e.g. $gnome-session-save --kill As of now, they're handled by 3 different dialogs from gnome-panel, gnome-sys-suspend and gnome-session. It's not good for both user experience and authorization checking. Recently, Defining Workstation Owner Infrastructure (PSARC/2008/034), HAL power management support (PSARC/2008/021) and GNOME power manager (LSARC/2007/702) provide easier underlying interfaces with application to run power management operation. Based on those interfaces, this project will supply user a unified logout and shutdown GUI dialog. 4. Technical Description: 4.1. Details: Two new dialogs will be added on Solaris. One dialog shows user logout and user switch action buttons. The other dialog provides user another 4 actions, suspend, hibernate, shutdown, reboot. These dialogs are consistent with current upstream. Suspend, hibernate, shutdown and reboot actions are done by calling gnome-power-manager interfaces, e.g. "org.freedesktop. PowerManagement.Suspend". Logout action don't have to depend on extra interface, gnome-session just cleans up itself and its child processes to close session. Note that user switch will be hidden until multi-session capability is supported on Solaris. New GUI dialogs are drawn by gnome-session. Likewise, gnome-session will export two new D-Bus interfaces, which are backported from upstream. Via new interfaces, gnome-panel and other applications can notify gnome-session to show user dialog when necessary. For instance, when console user logs in desktop, menu button "Shut Down..." is visible on Launch Menu. If user pushes it, gnome-panel will cause shutdown dialog show up by invoking "org.gnome.SessionManager.Shutdown" instead of current XSMP-based saveyourself request. Please note gnome-sys-suspend will be obsolete after new dialogs are integrated. Another separate case will be filed to make related interface obsolete. 4.2. Bug/RFE Number(s): - CR #6378018 gnome-sys-suspend should offer "logout" and "reboot" choices as well - CR #6378021 gnome-sys-suspend should not offer "Suspend" if system doesn't support it - CR #6621991 No restart option seen in GUI - CR #6554809 Shutdown option should not appear on non-root Sun Ray desktops 4.3. Interfaces: Exported Interfaces Interface Name Classification Comment ------------------- --------------- -------------- org.gnome.SessionManager.Logout Volatile Show logout dialog. Allow user to logout or switch to another user if supported. org.gnome.SessionManager.Shutdown Volatile Show shutdown dialog. Allow user to choose suspend, hibernate, shutdown, reboot if supported. Imported Interfaces Interface Name Classification ARC Case Comment ------------------- --------------- -------------- --------------------------------- D-BUS Volatile LSARC/2006/368 D-Bus and glib-binding library. D-BUS Message Bus System org.freedesktop.PowerManagement.Suspend Volatile LSARC/2007/702 Attempt to suspend the system. GNOME Power Manager org.freedesktop.PowerManagement.Hibernate Volatile The same as above Attempt to hibernate. org.freedesktop.PowerManagement.Shutdown Volatile The same as above Attempt to shutdown. org.freedesktop.PowerManagement.Reboot Volatile The same as above Attempt to reboot. org.freedesktop.PowerManagement.CanSuspend Volatile The same as above If the current session user is able to suspend the system. org.freedesktop.PowerManagement.CanSuspend Volatile The same as above If the current session user is able to suspend the system. org.freedesktop.PowerManagement.CanShutdown Volatile The same as above If the current session user is able to shutdown the system. org.freedesktop.PowerManagement.CanReboot Volatile The same as above If the current session user is able to reboot the system. 4.4. Security Impact: This case is just the consumer of LSARC/2007/702. It doesn't depend on any authorization directly. Since shutdown, suspend, hibernate action aren't available for all users, hardware capability and user authorization need to be checked before showing action buttons on dialog. This checking rely on gnome-power-manager D-Bus interface, e.g. "org.freedesktop.PowerManagement.CanShutdown". In addtions, the same checking is needed before showing "Shut Down..." menu button on Launch Menu. Some distribution, e.g. SunRay, probably wants to hide some buttons and actions. It's easy to be achieved through configuring related power management authorizations (see PSARC/2008/021). 4.5. Dependency: GNOME power manager (LSARC/2007/702) is a putback dependency. 5. Resources and Schedule 5.1 Release Binding Target to a minor release of Solaris 5.2. Consolidation C-team Name: JDS/GNOME 5.3. ARC review type: FastTrack 5.4. ARC Exposure: open 6. Related ARC cases LSARC/2007/702 GNOME power manager LSARC/2006/368 D-BUS Message Bus System PSARC/2008/034 Defining Workstation Owner Infrastructure PSARC/2008/021 HAL Power Management Support --Boundary_(ID_NLXvP/W+iJ3tlLHF4admdQ)-- From Alan.Coopersmith@sun.com Thu Apr 17 07:44:19 2008 Received: from newsunmail1brm.central.sun.com (newsunmail1brm.Central.Sun.COM [129.147.62.245]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m3HEiJWI024903 for ; Thu, 17 Apr 2008 07:44:19 -0700 (PDT) Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11]) by newsunmail1brm.central.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id m3HEiFuB005983 for <@sunmail2sca.sfbay.sun.com:lsarc-ext@sun.com>; Thu, 17 Apr 2008 08:44:18 -0600 (MDT) Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0JZH0070Z4XU9T00@brm-avmta-1.central.sun.com> for lsarc-ext@sun.com (ORCPT lsarc-ext@sun.com); Thu, 17 Apr 2008 08:44:18 -0600 (MDT) Received: from sca-es-mail-1.sun.com ([192.18.43.132]) by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0JZH00KXC4XTRH90@brm-avmta-1.central.sun.com> for lsarc-ext@sun.com (ORCPT lsarc-ext@sun.com); Thu, 17 Apr 2008 08:44:18 -0600 (MDT) Received: from fe-sfbay-09.sun.com ([192.18.43.129]) by sca-es-mail-1.sun.com (8.13.7+Sun/8.12.9) with ESMTP id m3HEiH9U005502 for ; Thu, 17 Apr 2008 07:44:17 -0700 (PDT) Received: from conversion-daemon.fe-sfbay-09.sun.com by fe-sfbay-09.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) id <0JZH00D014WGZH00@fe-sfbay-09.sun.com> (original mail from Alan.Coopersmith@Sun.COM) for lsarc-ext@sun.com (ORCPT lsarc-ext@sun.com); Thu, 17 Apr 2008 07:44:17 -0700 (PDT) Received: from [10.6.102.118] by fe-sfbay-09.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) with ESMTPSA id <0JZH001IR4XR5K90@fe-sfbay-09.sun.com>; Thu, 17 Apr 2008 07:44:16 -0700 (PDT) Date: Thu, 17 Apr 2008 07:48:38 -0700 From: Alan Coopersmith Subject: Re: GNOME shutdown dialog [LSARC/2008/262 FastTrack timeout 04/23/2008] In-reply-to: <1208447879.1074.5.camel@localhost> Sender: Alan.Coopersmith@sun.com To: Irene Huang Cc: lsarc-ext@sun.com, Gary Winiger Message-id: <48076346.9000308@sun.com> MIME-version: 1.0 Content-type: text/plain; charset=ISO-8859-1 Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 X-Enigmail-Version: 0.95.1 References: <1208447879.1074.5.camel@localhost> User-Agent: Thunderbird 2.0.0.6 (X11/20071119) Status: RO Content-Length: 940 > Since shutdown, suspend, hibernate action aren't available for > all users, hardware capability and user authorization need to > be checked before showing action buttons on dialog. What if the user has to assume a role to have the privileges to shutdown? They'll still have to pfexec shutdown and not use this dialog? > Some distribution, e.g. SunRay, probably wants to hide some > buttons and actions. It's easy to be achieved through configuring > related power management authorizations (see PSARC/2008/021). Sun Ray isn't a distribution - it runs on normal Solaris, and may be running on the same system that has a normal console - does this configuration allow the console user to shut down but the Sun Ray or remote desktop (XDMCP or VNC) users to not shut down? -- -Alan Coopersmith- alan.coopersmith@sun.com Sun Microsystems, Inc. - X Window System Engineering From Simon.Zheng@sun.com Thu Apr 17 09:10:11 2008 Received: from newsunmail1brm.central.sun.com (newsunmail1brm.Central.Sun.COM [129.147.62.245]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m3HGABTG027617 for ; Thu, 17 Apr 2008 09:10:11 -0700 (PDT) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by newsunmail1brm.central.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id m3HGA5vO041295 for <@sunmail2sca.sfbay.sun.com:lsarc-ext@sun.com>; Thu, 17 Apr 2008 10:10:10 -0600 (MDT) Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0JZH0062L8WY8C00@nwk-avmta-2.sfbay.sun.com> for lsarc-ext@sun.com (ORCPT lsarc-ext@Sun.COM); Thu, 17 Apr 2008 09:10:10 -0700 (PDT) Received: from sineb-mail-2.sun.com ([192.18.19.7]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0JZH001GT8WWYP90@nwk-avmta-2.sfbay.sun.com> for lsarc-ext@sun.com (ORCPT lsarc-ext@Sun.COM); Thu, 17 Apr 2008 09:10:09 -0700 (PDT) Received: from fe-apac-05.sun.com (fe-apac-05.sun.com [192.18.19.176] (may be forged)) by sineb-mail-2.sun.com (8.13.6+Sun/8.12.9) with ESMTP id m3HGAeTj022765 for ; Thu, 17 Apr 2008 16:10:40 +0000 (GMT) Received: from conversion-daemon.mail-apac.sun.com by mail-apac.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) id <0JZH009018RB8L00@mail-apac.sun.com> (original mail from Simon.Zheng@Sun.COM) for lsarc-ext@Sun.COM (ORCPT lsarc-ext@Sun.COM); Fri, 18 Apr 2008 00:09:59 +0800 (SGT) Received: from [192.168.0.173] ([123.112.43.210]) by mail-apac.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) with ESMTPSA id <0JZH00MAX8W79V10@mail-apac.sun.com>; Fri, 18 Apr 2008 00:09:58 +0800 (SGT) Date: Fri, 18 Apr 2008 00:09:51 +0800 From: "simon.zheng" Subject: Re: GNOME shutdown dialog [LSARC/2008/262 FastTrack timeout 04/23/2008] In-reply-to: <48076346.9000308@sun.com> Sender: Simon.Zheng@sun.com To: Alan Coopersmith Cc: Irene Huang , lsarc-ext@sun.com, Gary Winiger Message-id: <4807764F.2030605@sun.com> MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <1208447879.1074.5.camel@localhost> <48076346.9000308@sun.com> User-Agent: Thunderbird 2.0.0.12 (Windows/20080213) Status: RO Content-Length: 1475 Alan Coopersmith wrote: >> Since shutdown, suspend, hibernate action aren't available for >> all users, hardware capability and user authorization need to >> be checked before showing action buttons on dialog. >> > > What if the user has to assume a role to have the privileges to shutdown? > They'll still have to pfexec shutdown and not use this dialog? > Only when user have corresponding authorization, he is allowed to do shutdown action from dialog. Otherwise, user can do nothing from dialog. Of course, user can shutdown system in other ways outside this dialog. > >> Some distribution, e.g. SunRay, probably wants to hide some >> buttons and actions. It's easy to be achieved through configuring >> related power management authorizations (see PSARC/2008/021). >> > > Sun Ray isn't a distribution - it runs on normal Solaris, and may be running > on the same system that has a normal console Sorry. I just mean some enviroment perhaps have specifical requirement. > - does this configuration allow > the console user to shut down but the Sun Ray or remote desktop (XDMCP or VNC) > users to not shut down? > Yes, it is. But firstly I want to state this configuration isn't provided by this case. Power management RBAC authorizations are defined by PSARC/2008/021. By default, only console owner and root have shutdown and suspend auths. So remote user unable to do this. Thanks, -Simon From Darren.Moffat@sun.com Thu Apr 17 13:14:17 2008 Received: from sunmail4.singapore.sun.com (sunmail4.Singapore.Sun.COM [129.158.71.19]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m3HKEGSs006911 for ; Thu, 17 Apr 2008 13:14:16 -0700 (PDT) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by sunmail4.singapore.sun.com (8.13.4+Sun/8.13.3/ENSMAIL,v2.2) with ESMTP id m3HKEASx023891 for <@sunmail2sca.sfbay.sun.com:lsarc-ext@sun.com>; Fri, 18 Apr 2008 04:14:15 +0800 (SGT) Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0JZH00G07K7N3900@nwk-avmta-2.sfbay.sun.com> for lsarc-ext@sun.com (ORCPT lsarc-ext@sun.com); Thu, 17 Apr 2008 13:14:11 -0700 (PDT) Received: from gmp-eb-inf-2.sun.com ([192.18.6.24]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0JZH00FRYK7MSI00@nwk-avmta-2.sfbay.sun.com> for lsarc-ext@sun.com (ORCPT lsarc-ext@sun.com); Thu, 17 Apr 2008 13:14:11 -0700 (PDT) Received: from fe-emea-10.sun.com (gmp-eb-lb-2-fe2.eu.sun.com [192.18.6.11]) by gmp-eb-inf-2.sun.com (8.13.7+Sun/8.12.9) with ESMTP id m3HKEAKW003878 for ; Thu, 17 Apr 2008 20:14:10 +0000 (GMT) Received: from conversion-daemon.fe-emea-10.sun.com by fe-emea-10.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) id <0JZH00001K6YPX00@fe-emea-10.sun.com> (original mail from Darren.Moffat@Sun.COM) for lsarc-ext@sun.com (ORCPT lsarc-ext@sun.com); Thu, 17 Apr 2008 21:14:09 +0100 (BST) Received: from [129.146.30.182] by fe-emea-10.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) with ESMTPSA id <0JZH00ETSK7GBM10@fe-emea-10.sun.com> for lsarc-ext@sun.com (ORCPT lsarc-ext@sun.com); Thu, 17 Apr 2008 21:14:06 +0100 (BST) Date: Thu, 17 Apr 2008 21:14:03 +0100 From: Darren J Moffat Subject: Re: GNOME shutdown dialog [LSARC/2008/262 FastTrack timeout 04/23/2008] In-reply-to: <1208447879.1074.5.camel@localhost> Sender: Darren.Moffat@sun.com To: Irene Huang Cc: lsarc-ext@sun.com Message-id: <4807AF8B.20905@Sun.COM> MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <1208447879.1074.5.camel@localhost> User-Agent: Thunderbird 2.0.0.12 (X11/20080310) Status: RO Content-Length: 195 Was any consideration given to having only one dialog that covers ALL of the operations ? Like Ubuntu does. This is particularly interesting if "bound" to the "power" key. -- Darren J Moffat From Brian.Cameron@Sun.COM Thu Apr 17 15:24:13 2008 Received: from sunmail3mpk.sfbay.sun.com (sunmail3mpk.SFBay.Sun.COM [129.146.11.52]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m3HMODRc012282 for ; Thu, 17 Apr 2008 15:24:13 -0700 (PDT) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by sunmail3mpk.sfbay.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id m3HMOC97004442 for <@sunmail2sca.sfbay.sun.com:lsarc-ext@sun.com>; Thu, 17 Apr 2008 15:24:13 -0700 (PDT) Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0JZH0010DQ8CFC00@nwk-avmta-1.sfbay.Sun.COM> for lsarc-ext@sun.com (ORCPT lsarc-ext@Sun.COM); Thu, 17 Apr 2008 15:24:12 -0700 (PDT) Received: from brmea-mail-3.sun.com ([192.18.98.34]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0JZH00FYYQ8BAU40@nwk-avmta-1.sfbay.Sun.COM> for lsarc-ext@sun.com (ORCPT lsarc-ext@Sun.COM); Thu, 17 Apr 2008 15:24:11 -0700 (PDT) Received: from fe-amer-09.sun.com ([192.18.109.79]) by brmea-mail-3.sun.com (8.13.6+Sun/8.12.9) with ESMTP id m3HMOBF6008084 for ; Thu, 17 Apr 2008 22:24:11 +0000 (GMT) Received: from conversion-daemon.mail-amer.sun.com by mail-amer.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) id <0JZH00701PU4LL00@mail-amer.sun.com> (original mail from Brian.Cameron@Sun.COM) for lsarc-ext@Sun.COM (ORCPT lsarc-ext@Sun.COM); Thu, 17 Apr 2008 16:24:11 -0600 (MDT) Received: from [129.153.198.210] by mail-amer.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) with ESMTPSA id <0JZH00HTNQ85LKF0@mail-amer.sun.com> for lsarc-ext@Sun.COM (ORCPT lsarc-ext@Sun.COM); Thu, 17 Apr 2008 16:24:07 -0600 (MDT) Date: Thu, 17 Apr 2008 17:24:13 -0500 From: Brian Cameron Subject: Re: GNOME shutdown dialog [LSARC/2008/262 FastTrack timeout 04/23/2008] In-reply-to: <4807AF8B.20905@Sun.COM> Sender: Brian.Cameron@Sun.COM To: Darren J Moffat Cc: Irene Huang , lsarc-ext@Sun.COM Message-id: <4807CE0D.9040801@sun.com> MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <1208447879.1074.5.camel@localhost> <4807AF8B.20905@Sun.COM> User-Agent: Thunderbird 2.0.0.12 (X11/20080325) Status: RO Content-Length: 555 Darren: > Was any consideration given to having only one dialog that covers ALL of > the operations ? Like Ubuntu does. > > This is particularly interesting if "bound" to the "power" key. The Power Management and JDS HCI team did review the two sets of dialogs. People seemed to agree that the single dialog was too complicated. Also the GNOME community has already said that they won't accept the Ubuntu style dialog upstream, and we would prefer to follow the GNOME usability guidelines rather than forking the dialog as Ubuntu has done. Brian From Simon.Zheng@sun.com Thu Apr 17 21:19:47 2008 Received: from sunmail4.singapore.sun.com (sunmail4.Singapore.Sun.COM [129.158.71.19]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m3I4Jkpb020422 for ; Thu, 17 Apr 2008 21:19:47 -0700 (PDT) Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11]) by sunmail4.singapore.sun.com (8.13.4+Sun/8.13.3/ENSMAIL,v2.2) with ESMTP id m3I4Jhlk016969 for <@sunmail2sca.sfbay.sun.com:lsarc-ext@sun.com>; Fri, 18 Apr 2008 12:19:45 +0800 (SGT) Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0JZI00K036OVGB00@brm-avmta-1.central.sun.com> for lsarc-ext@sun.com (ORCPT lsarc-ext@Sun.COM); Thu, 17 Apr 2008 22:19:43 -0600 (MDT) Received: from sineb-mail-1.sun.com ([192.18.19.6]) by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0JZI00KQT6OT2BC0@brm-avmta-1.central.sun.com> for lsarc-ext@sun.com (ORCPT lsarc-ext@Sun.COM); Thu, 17 Apr 2008 22:19:42 -0600 (MDT) Received: from fe-apac-05.sun.com (fe-apac-05.sun.com [192.18.19.176] (may be forged)) by sineb-mail-1.sun.com (8.13.6+Sun/8.12.9) with ESMTP id m3I4Jua4003910 for ; Fri, 18 Apr 2008 04:19:56 +0000 (GMT) Received: from conversion-daemon.mail-apac.sun.com by mail-apac.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) id <0JZI00C016N8VY00@mail-apac.sun.com> (original mail from Simon.Zheng@Sun.COM) for lsarc-ext@Sun.COM (ORCPT lsarc-ext@Sun.COM); Fri, 18 Apr 2008 12:19:32 +0800 (SGT) Received: from [129.158.217.108] by mail-apac.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) with ESMTPSA id <0JZI00MOB6OB9M31@mail-apac.sun.com> for lsarc-ext@Sun.COM (ORCPT lsarc-ext@Sun.COM); Fri, 18 Apr 2008 12:19:31 +0800 (SGT) Date: Fri, 18 Apr 2008 12:19:19 +0800 From: "simon.zheng@sun.com" Subject: Re: GNOME shutdown dialog [LSARC/2008/262 FastTrack timeout 04/23/2008] In-reply-to: <4807CE0D.9040801@sun.com> Sender: Simon.Zheng@sun.com To: Brian Cameron , Darren J Moffat Cc: Irene Huang , lsarc-ext@sun.com Message-id: <1208492359.101028.13.camel@olympic> MIME-version: 1.0 X-Mailer: Evolution 2.22.0 Content-type: text/plain Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <1208447879.1074.5.camel@localhost> <4807AF8B.20905@Sun.COM> <4807CE0D.9040801@sun.com> Status: RO Content-Length: 881 On Thu, 2008-04-17 at 17:24 -0500, Brian Cameron wrote: > Darren: > > > Was any consideration given to having only one dialog that covers ALL of > > the operations ? Like Ubuntu does. > > > > This is particularly interesting if "bound" to the "power" key. > > The Power Management and JDS HCI team did review the two sets of > dialogs. People seemed to agree that the single dialog was too > complicated. Also the GNOME community has already said that they > won't accept the Ubuntu style dialog upstream, and we would prefer > to follow the GNOME usability guidelines rather than forking the > dialog as Ubuntu has done. > We intend to split into 2 dialogs as upstream, logout and shutdown, please screenshots. http://sac.eng/LSARC/2008/262/screenshots/ And pressing front-panel power button or suspend key on Sun type 6/7 keyboard will pop up shutdown dialog. -Simon From gww@eng.sun.com Sat Apr 19 09:39:53 2008 Received: from newsunmail1brm.central.sun.com (newsunmail1brm.Central.Sun.COM [129.147.62.245]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m3JGdr2N028949 for ; Sat, 19 Apr 2008 09:39:53 -0700 (PDT) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by newsunmail1brm.central.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id m3JGdqNO016247; Sat, 19 Apr 2008 10:39:52 -0600 (MDT) Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0JZK00I01ZMG8H00@nwk-avmta-1.sfbay.Sun.COM>; Sat, 19 Apr 2008 09:39:52 -0700 (PDT) Received: from dm-eng-02.sfbay.sun.com ([129.146.11.32]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0JZK00HJZZMFSXC0@nwk-avmta-1.sfbay.Sun.COM>; Sat, 19 Apr 2008 09:39:51 -0700 (PDT) Received: from marduk.eng.sun.com (marduk.SFBay.Sun.COM [129.146.108.224]) by dm-eng-02.sfbay.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id m3JGdo4v012756; Sat, 19 Apr 2008 09:39:50 -0700 (PDT) Received: from marduk.eng.sun.com (localhost [127.0.0.1]) by marduk.eng.sun.com (8.13.6+Sun/8.12.11) with ESMTP id m3JGdUu8017499; Sat, 19 Apr 2008 09:39:30 -0700 (PDT) Received: (from gww@localhost) by marduk.eng.sun.com (8.13.6+Sun/8.12.11/Submit) id m3JGdUTm017498; Sat, 19 Apr 2008 09:39:30 -0700 (PDT) Date: Sat, 19 Apr 2008 09:39:30 -0700 (PDT) From: Gary Winiger Subject: Re: GNOME shutdown dialog [LSARC/2008/262 FastTrack timeout 04/23/2008] To: Irene.Huang@sun.com, lsarc-ext@sun.com Message-id: <200804191639.m3JGdUTm017498@marduk.eng.sun.com> Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 Status: RO Content-Length: 1633 > - Clicking buttons in launch menu of gnome-panel > - Response to user pressing power button > - Response to suspend key from keyboard > - Sending XSMP saveyourself request to gnome-session. > e.g. $gnome-session-save --kill I presume all these operations are auditable to meet the Solaris Aduit policy. > For instance, when console user logs in desktop, menu button > "Shut Down..." is visible on Launch Menu. If user pushes it, > gnome-panel will cause shutdown dialog show up by invoking > "org.gnome.SessionManager.Shutdown" instead of current XSMP-based > saveyourself request. Again I presume these will also all be auditable in accordance with the Solaris Audit policy. > Please note gnome-sys-suspend will be obsolete after new dialogs > are integrated. Another separate case will be filed to make > related interface obsolete. Not part of this case, but the one alluded to. How will this all relate to /usr/openwin/bin/sys-suspend? > 4.4. Security Impact: > > This case is just the consumer of LSARC/2007/702. It doesn't > depend on any authorization directly. I ask the audit questions above because they directly relate to the communication from the GUI process to whomever is enforcing the policy which is where I expect the audit to take place. > 4.5. Dependency: > > GNOME power manager (LSARC/2007/702) is a putback dependency. Is PSARC/2008/021 HAL Power Management Support not a dependency because LSARC/2007/702 is dependent on 021? Gary.. From gww@eng.sun.com Sat Apr 19 09:44:24 2008 Received: from sunmail4.singapore.sun.com (sunmail4.Singapore.Sun.COM [129.158.71.19]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m3JGiNuM029008 for ; Sat, 19 Apr 2008 09:44:24 -0700 (PDT) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by sunmail4.singapore.sun.com (8.13.4+Sun/8.13.3/ENSMAIL,v2.2) with ESMTP id m3JGi6qi007596; Sun, 20 Apr 2008 00:44:20 +0800 (SGT) Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0JZK0070VZTSBW00@nwk-avmta-2.sfbay.sun.com>; Sat, 19 Apr 2008 09:44:16 -0700 (PDT) Received: from dm-eng-02.sfbay.sun.com ([129.146.11.32]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0JZK00C29ZTQJ680@nwk-avmta-2.sfbay.sun.com>; Sat, 19 Apr 2008 09:44:14 -0700 (PDT) Received: from marduk.eng.sun.com (marduk.SFBay.Sun.COM [129.146.108.224]) by dm-eng-02.sfbay.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id m3JGiCHg014230; Sat, 19 Apr 2008 09:44:12 -0700 (PDT) Received: from marduk.eng.sun.com (localhost [127.0.0.1]) by marduk.eng.sun.com (8.13.6+Sun/8.12.11) with ESMTP id m3JGhrle017521; Sat, 19 Apr 2008 09:43:53 -0700 (PDT) Received: (from gww@localhost) by marduk.eng.sun.com (8.13.6+Sun/8.12.11/Submit) id m3JGhr8o017520; Sat, 19 Apr 2008 09:43:53 -0700 (PDT) Date: Sat, 19 Apr 2008 09:43:53 -0700 (PDT) From: Gary Winiger Subject: Re: GNOME shutdown dialog [LSARC/2008/262 FastTrack timeout 04/23/2008] To: Alan.Coopersmith@sun.com, Irene.Huang@sun.com Cc: gww@eng.sun.com, lsarc-ext@sun.com Message-id: <200804191643.m3JGhr8o017520@marduk.eng.sun.com> Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 Status: RO Content-Length: 573 > > Since shutdown, suspend, hibernate action aren't available for > > all users, hardware capability and user authorization need to > > be checked before showing action buttons on dialog. > > What if the user has to assume a role to have the privileges to shutdown? > They'll still have to pfexec shutdown and not use this dialog? I don't believe the desktop has support for role assumption. (IMO, it should %^{) So, I guess your question boils down to, is there also a CLI interface proposed that can be used from a terminal/shell. Gary.. From gww@eng.sun.com Sat Apr 19 10:08:26 2008 Received: from sunmail5.uk.sun.com (sunmail5.UK.Sun.COM [129.156.85.165]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m3JH8PYL029917 for ; Sat, 19 Apr 2008 10:08:25 -0700 (PDT) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by sunmail5.uk.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id m3JH8Nxn004609 for <@sunmail2sca.sfbay.sun.com:lsarc-ext@sun.com>; Sat, 19 Apr 2008 18:08:24 +0100 (BST) Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0JZL00L030XZHM00@nwk-avmta-1.sfbay.Sun.COM> for lsarc-ext@sun.com (ORCPT lsarc-ext@sun.com); Sat, 19 Apr 2008 10:08:23 -0700 (PDT) Received: from dm-eng-02.sfbay.sun.com ([129.146.11.32]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0JZL00H1R0XYSUD0@nwk-avmta-1.sfbay.Sun.COM> for lsarc-ext@sun.com (ORCPT lsarc-ext@sun.com); Sat, 19 Apr 2008 10:08:22 -0700 (PDT) Received: from marduk.eng.sun.com (marduk.SFBay.Sun.COM [129.146.108.224]) by dm-eng-02.sfbay.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id m3JH8KJu019709; Sat, 19 Apr 2008 10:08:20 -0700 (PDT) Received: from marduk.eng.sun.com (localhost [127.0.0.1]) by marduk.eng.sun.com (8.13.6+Sun/8.12.11) with ESMTP id m3JH81mP017552; Sat, 19 Apr 2008 10:08:01 -0700 (PDT) Received: (from gww@localhost) by marduk.eng.sun.com (8.13.6+Sun/8.12.11/Submit) id m3JH81XK017551; Sat, 19 Apr 2008 10:08:01 -0700 (PDT) Date: Sat, 19 Apr 2008 10:08:01 -0700 (PDT) From: Gary Winiger Subject: Re: GNOME shutdown dialog [LSARC/2008/262 FastTrack timeout 04/23/2008] To: Alan.Coopersmith@sun.com, Simon.Zheng@sun.com Cc: Irene.Huang@sun.com, gww@eng.sun.com, lsarc-ext@sun.com Message-id: <200804191708.m3JH81XK017551@marduk.eng.sun.com> Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 Status: RO Content-Length: 692 > Yes, it is. But firstly I want to state this configuration isn't > provided by this case. > > Power management RBAC authorizations are defined by PSARC/2008/021. By > default, only console > owner and root have shutdown and suspend auths. So remote user unable to > do this. It is possible to grant the authorizations to any user or role. Solaris ships with the root user being granted all authorizations. PSARC/2008/034 Defining Workstation Owner Infrastructure allows other cases to populate authorizations granted to whomever logs in on /dev/console. Presumably, 2008/021 uses 034 to grant the power management authorizations to the user who logs in on /dev/console. Gary.. From Simon.Zheng@sun.com Sun Apr 20 10:12:09 2008 Received: from sunmail4.singapore.sun.com (sunmail4.Singapore.Sun.COM [129.158.71.19]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m3KHC8B2012533 for ; Sun, 20 Apr 2008 10:12:09 -0700 (PDT) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by sunmail4.singapore.sun.com (8.13.4+Sun/8.13.3/ENSMAIL,v2.2) with ESMTP id m3KHC58k018031 for <@sunmail2sca.sfbay.sun.com:lsarc-ext@sun.com>; Mon, 21 Apr 2008 01:12:07 +0800 (SGT) Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0JZM00C0FVS5N400@nwk-avmta-1.sfbay.Sun.COM> for lsarc-ext@sun.com (ORCPT lsarc-ext@sun.com); Sun, 20 Apr 2008 10:12:05 -0700 (PDT) Received: from sineb-mail-2.sun.com ([192.18.19.7]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0JZM005QUVS3V8E0@nwk-avmta-1.sfbay.Sun.COM> for lsarc-ext@sun.com (ORCPT lsarc-ext@sun.com); Sun, 20 Apr 2008 10:12:04 -0700 (PDT) Received: from fe-apac-05.sun.com (fe-apac-05.sun.com [192.18.19.176] (may be forged)) by sineb-mail-2.sun.com (8.13.6+Sun/8.12.9) with ESMTP id m3KHCbMR003199 for ; Sun, 20 Apr 2008 17:12:37 +0000 (GMT) Received: from conversion-daemon.mail-apac.sun.com by mail-apac.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) id <0JZM00101VBLAB00@mail-apac.sun.com> (original mail from Simon.Zheng@Sun.COM) for lsarc-ext@sun.com (ORCPT lsarc-ext@sun.com); Mon, 21 Apr 2008 01:11:54 +0800 (SGT) Received: from [192.168.0.173] ([125.33.128.247]) by mail-apac.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) with ESMTPSA id <0JZM00MP5VRM9UI3@mail-apac.sun.com>; Mon, 21 Apr 2008 01:11:54 +0800 (SGT) Date: Mon, 21 Apr 2008 01:11:52 +0800 From: "simon.zheng" Subject: Re: GNOME shutdown dialog [LSARC/2008/262 FastTrack timeout 04/23/2008] In-reply-to: <200804191639.m3JGdUTm017498@marduk.eng.sun.com> Sender: Simon.Zheng@sun.com To: Gary Winiger Cc: Irene.Huang@sun.com, lsarc-ext@sun.com Message-id: <480B7958.3040601@sun.com> MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=UTF-8 Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200804191639.m3JGdUTm017498@marduk.eng.sun.com> User-Agent: Thunderbird 2.0.0.12 (Windows/20080213) Status: RO Content-Length: 3306 Gary, Gary Winiger wrote: >> - Clicking buttons in launch menu of gnome-panel >> - Response to user pressing power button >> - Response to suspend key from keyboard >> - Sending XSMP saveyourself request to gnome-session. >> e.g. $gnome-session-save --kill >> > > I presume all these operations are auditable to meet the > Solaris Aduit policy. > > >> For instance, when console user logs in desktop, menu button >> "Shut Down..." is visible on Launch Menu. If user pushes it, >> gnome-panel will cause shutdown dialog show up by invoking >> "org.gnome.SessionManager.Shutdown" instead of current XSMP-based >> saveyourself request. >> > > Again I presume these will also all be auditable in accordance > with the Solaris Audit policy. > > >> Please note gnome-sys-suspend will be obsolete after new dialogs >> are integrated. Another separate case will be filed to make >> related interface obsolete. >> > > Not part of this case, but the one alluded to. How will this all > relate to /usr/openwin/bin/sys-suspend? > Good question. As early discussion with Power Management team, sys-suspend will probably be evolved as a pure command line based on Power Management realted RBAC authorization. I guess Power Management team will have a case for this. > >> 4.4. Security Impact: >> >> This case is just the consumer of LSARC/2007/702. It doesn't >> depend on any authorization directly. >> > > I ask the audit questions above because they directly relate to > the communication from the GUI process to whomever is enforcing > the policy which is where I expect the audit to take place. > I agree auditing is really needed when running shutdown action. Perhaps hald is the right audit place. The same as LSARC/2007/021, desktop applications involved in this case, gnome-panel and gnome-session, both run as user and haven't access control. When popping up dialog, they only check user authorizations through LSARC/2007/702 interface (calling checkauthattr() eventually). If check result is true, we show uer shutdown dialog and button. Othewise, part of buttons or the entire dialog will be hidden. When user clicks "shutdown" button, they invoke LSARC/2007/702 interface (calling HAL interface eventually) to run action. At that time, hald process running as root enforces authrization and access control. If user have right authorization, a real action will be done by hald. Otherwise, return desktop applications an error. My understanding is that auditing will be done in hald (PSARC/2008/021 HAL Power Management Support). This case doesn't seem to audit again since they haven't access control. If I'm wrong, please correct me. > >> 4.5. Dependency: >> >> GNOME power manager (LSARC/2007/702) is a putback dependency. >> > > Is PSARC/2008/021 HAL Power Management Support > not a dependency because LSARC/2007/702 is dependent on 021? > Yes, it's a dependency. But this case doesn't directly depend on interfaces of PSARC/2008/021. So we don't list. Because LSARC/2007/702 have to putback until 021 is ready, apparently this case wait until 702 and 021 are ready. Thanks, -Simon From Simon.Zheng@sun.com Sun Apr 20 10:22:03 2008 Received: from newsunmail1brm.central.sun.com (newsunmail1brm.Central.Sun.COM [129.147.62.245]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m3KHM3Nq012591 for ; Sun, 20 Apr 2008 10:22:03 -0700 (PDT) Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11]) by newsunmail1brm.central.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id m3KHM2XK053712 for <@sunmail2sca.sfbay.sun.com:lsarc-ext@sun.com>; Sun, 20 Apr 2008 11:22:03 -0600 (MDT) Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0JZM0000NW8Q2P00@brm-avmta-1.central.sun.com> for lsarc-ext@sun.com (ORCPT lsarc-ext@sun.com); Sun, 20 Apr 2008 11:22:02 -0600 (MDT) Received: from sineb-mail-2.sun.com ([192.18.19.7]) by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0JZM00F7AW8LK9B0@brm-avmta-1.central.sun.com> for lsarc-ext@sun.com (ORCPT lsarc-ext@sun.com); Sun, 20 Apr 2008 11:21:58 -0600 (MDT) Received: from fe-apac-05.sun.com (fe-apac-05.sun.com [192.18.19.176] (may be forged)) by sineb-mail-2.sun.com (8.13.6+Sun/8.12.9) with ESMTP id m3KHMVT8003287 for ; Sun, 20 Apr 2008 17:22:31 +0000 (GMT) Received: from conversion-daemon.mail-apac.sun.com by mail-apac.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) id <0JZM00201VV5ML00@mail-apac.sun.com> (original mail from Simon.Zheng@Sun.COM) for lsarc-ext@sun.com (ORCPT lsarc-ext@sun.com); Mon, 21 Apr 2008 01:21:48 +0800 (SGT) Received: from [192.168.0.173] ([125.33.128.247]) by mail-apac.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) with ESMTPSA id <0JZM00MXQW899UI3@mail-apac.sun.com>; Mon, 21 Apr 2008 01:21:48 +0800 (SGT) Date: Mon, 21 Apr 2008 01:21:51 +0800 From: "simon.zheng" Subject: Re: GNOME shutdown dialog [LSARC/2008/262 FastTrack timeout 04/23/2008] In-reply-to: <200804191643.m3JGhr8o017520@marduk.eng.sun.com> Sender: Simon.Zheng@sun.com To: Gary Winiger Cc: Alan.Coopersmith@sun.com, Irene.Huang@sun.com, lsarc-ext@sun.com Message-id: <480B7BAF.1000308@sun.com> MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=UTF-8 Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200804191643.m3JGhr8o017520@marduk.eng.sun.com> User-Agent: Thunderbird 2.0.0.12 (Windows/20080213) Status: RO Content-Length: 831 Gary Winiger wrote: >>> Since shutdown, suspend, hibernate action aren't available for >>> all users, hardware capability and user authorization need to >>> be checked before showing action buttons on dialog. >>> >> What if the user has to assume a role to have the privileges to shutdown? >> They'll still have to pfexec shutdown and not use this dialog? >> > > I don't believe the desktop has support for role assumption. > (IMO, it should %^{) Yeah. At least desktop applications in this case and LSARC/2007/702 unable to support directly. They all turn to hald eventually. > So, I guess your question boils down to, > is there also a CLI interface proposed that can be used from > a terminal/shell. > Yes, PM team will figure out a CLI. Please see my another mail. > Gary.. > From Irene.Huang@sun.com Tue Apr 22 11:07:19 2008 Received: from sunmail2sca.sfbay.sun.com (sunmail2sca.SFBay.Sun.COM [129.145.155.234]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m3MI7JZP027572 for ; Tue, 22 Apr 2008 11:07:19 -0700 (PDT) Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11]) by sunmail2sca.sfbay.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id m3MI7JsA018078 for <@sunmail2sca.sfbay.sun.com:lsarc-ext@sun.com>; Tue, 22 Apr 2008 11:07:19 -0700 (PDT) Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0JZQ0070JNO67D00@brm-avmta-1.central.sun.com> for lsarc-ext@sun.com (ORCPT lsarc-ext@sun.com); Tue, 22 Apr 2008 12:07:18 -0600 (MDT) Received: from sineb-mail-2.sun.com ([192.18.19.7]) by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0JZQ000PQNO2AN90@brm-avmta-1.central.sun.com> for lsarc-ext@sun.com (ORCPT lsarc-ext@sun.com); Tue, 22 Apr 2008 12:07:15 -0600 (MDT) Received: from fe-apac-05.sun.com (fe-apac-05.sun.com [192.18.19.176] (may be forged)) by sineb-mail-2.sun.com (8.13.6+Sun/8.12.9) with ESMTP id m3MI7mw9007738 for ; Tue, 22 Apr 2008 18:07:48 +0000 (GMT) Received: from conversion-daemon.mail-apac.sun.com by mail-apac.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) id <0JZQ00B01NNQTD00@mail-apac.sun.com> (original mail from Irene.Huang@Sun.COM) for lsarc-ext@sun.com (ORCPT lsarc-ext@sun.com); Wed, 23 Apr 2008 02:07:05 +0800 (SGT) Received: from [129.156.235.108] by mail-apac.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) with ESMTPSA id <0JZQ00MQGNNR9UFB@mail-apac.sun.com> for lsarc-ext@sun.com (ORCPT lsarc-ext@sun.com); Wed, 23 Apr 2008 02:07:05 +0800 (SGT) Date: Tue, 22 Apr 2008 19:06:37 +0000 From: Irene Huang Subject: Re: GNOME shutdown dialog [LSARC/2008/262 FastTrack timeout 04/23/2008] In-reply-to: <480B7958.3040601@sun.com> Sender: Irene.Huang@sun.com To: "simon.zheng" Cc: lsarc-ext@sun.com Message-id: <1208891197.1179.71.camel@localhost> MIME-version: 1.0 X-Mailer: Evolution 2.12.2 Content-type: text/plain Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200804191639.m3JGdUTm017498@marduk.eng.sun.com> <480B7958.3040601@sun.com> Status: RO Content-Length: 4053 Hi, all This case is due timeout tomorrow. If all are satisfied with the answers to from Simon, I'll close the project as approved tomorrow. 1. Authentication: responsibility of PSARC/2008/021 2. Single dialog? This has been carefully considered and it was finally decided to use two dialogs. 3. Auditing: hald should be the right place to implement auditing For details for answers, please see the mails from Simon. If there's any further issues, please raise before timeout. Thanks --Irene On Mon, 2008-04-21 at 01:11 +0800, simon.zheng wrote: > Gary, > > Gary Winiger wrote: > >> - Clicking buttons in launch menu of gnome-panel > >> - Response to user pressing power button > >> - Response to suspend key from keyboard > >> - Sending XSMP saveyourself request to gnome-session. > >> e.g. $gnome-session-save --kill > >> > > > > I presume all these operations are auditable to meet the > > Solaris Aduit policy. > > > > > >> For instance, when console user logs in desktop, menu button > >> "Shut Down..." is visible on Launch Menu. If user pushes it, > >> gnome-panel will cause shutdown dialog show up by invoking > >> "org.gnome.SessionManager.Shutdown" instead of current XSMP-based > >> saveyourself request. > >> > > > > Again I presume these will also all be auditable in accordance > > with the Solaris Audit policy. > > > > > >> Please note gnome-sys-suspend will be obsolete after new dialogs > >> are integrated. Another separate case will be filed to make > >> related interface obsolete. > >> > > > > Not part of this case, but the one alluded to. How will this all > > relate to /usr/openwin/bin/sys-suspend? > > > > Good question. > > As early discussion with Power Management team, sys-suspend > will probably be evolved as a pure command line based on > Power Management realted RBAC authorization. I guess Power > Management team will have a case for this. > > > > >> 4.4. Security Impact: > >> > >> This case is just the consumer of LSARC/2007/702. It doesn't > >> depend on any authorization directly. > >> > > > > I ask the audit questions above because they directly relate to > > the communication from the GUI process to whomever is enforcing > > the policy which is where I expect the audit to take place. > > > > I agree auditing is really needed when running shutdown > action. Perhaps hald is the right audit place. > > The same as LSARC/2007/021, desktop applications involved > in this case, gnome-panel and gnome-session, both run as > user and haven't access control. > > When popping up dialog, they only check user > authorizations through LSARC/2007/702 interface (calling > checkauthattr() eventually). If check result is true, > we show uer shutdown dialog and button. Othewise, part > of buttons or the entire dialog will be hidden. > > When user clicks "shutdown" button, they invoke > LSARC/2007/702 interface (calling HAL interface eventually) > to run action. At that time, hald process running as root > enforces authrization and access control. If user have > right authorization, a real action will be done by hald. > Otherwise, return desktop applications an error. > > My understanding is that auditing will be done in hald > (PSARC/2008/021 HAL Power Management Support). This > case doesn't seem to audit again since they haven't > access control. If I'm wrong, please correct me. > > > > >> 4.5. Dependency: > >> > >> GNOME power manager (LSARC/2007/702) is a putback dependency. > >> > > > > Is PSARC/2008/021 HAL Power Management Support > > not a dependency because LSARC/2007/702 is dependent on 021? > > > > Yes, it's a dependency. But this case doesn't directly > depend on interfaces of PSARC/2008/021. So we don't list. > > Because LSARC/2007/702 have to putback until 021 is ready, > apparently this case wait until 702 and 021 are ready. > > Thanks, > -Simon > From gww@eng.sun.com Tue Apr 22 11:19:18 2008 Received: from sunmail3mpk.sfbay.sun.com (sunmail3mpk.SFBay.Sun.COM [129.146.11.52]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m3MIJIAW028397 for ; Tue, 22 Apr 2008 11:19:18 -0700 (PDT) Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11]) by sunmail3mpk.sfbay.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id m3MIJFSc007962 for <@sunmail2sca.sfbay.sun.com:lsarc-ext@sun.com>; Tue, 22 Apr 2008 11:19:18 -0700 (PDT) Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0JZQ00715O84YC00@brm-avmta-1.central.sun.com> for lsarc-ext@sun.com (ORCPT lsarc-ext@sun.com); Tue, 22 Apr 2008 12:19:16 -0600 (MDT) Received: from dm-eng-02.sfbay.sun.com ([129.146.11.32]) by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0JZQ000OUO82AJA0@brm-avmta-1.central.sun.com> for lsarc-ext@sun.com (ORCPT lsarc-ext@sun.com); Tue, 22 Apr 2008 12:19:15 -0600 (MDT) Received: from marduk.eng.sun.com (marduk.SFBay.Sun.COM [129.146.108.224]) by dm-eng-02.sfbay.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id m3MIJDBP008340; Tue, 22 Apr 2008 11:19:13 -0700 (PDT) Received: from marduk.eng.sun.com (localhost [127.0.0.1]) by marduk.eng.sun.com (8.13.6+Sun/8.12.11) with ESMTP id m3MIIwn8020885; Tue, 22 Apr 2008 11:18:58 -0700 (PDT) Received: (from gww@localhost) by marduk.eng.sun.com (8.13.6+Sun/8.12.11/Submit) id m3MIIwu9020884; Tue, 22 Apr 2008 11:18:58 -0700 (PDT) Date: Tue, 22 Apr 2008 11:18:58 -0700 (PDT) From: Gary Winiger Subject: Re: GNOME shutdown dialog [LSARC/2008/262 FastTrack timeout 04/23/2008] To: Simon.Zheng@sun.com, Irene.Huang@sun.com Cc: lsarc-ext@sun.com Message-id: <200804221818.m3MIIwu9020884@marduk.eng.sun.com> Content-transfer-encoding: 7BIT X-Sun-Charset: US-ASCII X-PMX-Version: 5.4.1.325704 Status: RO Content-Length: 474 > 3. Auditing: hald should be the right place to implement auditing > For details for answers, please see the mails from Simon. The important point for audit relative to this case is that the GUI runs with the logined in users complete context. VIZ, the process calling DBUS context is no different from a CLI process run from a terminal emulator. If I've misread Xiu-Rong's reply and the preceeding isn't cprrect, we need to discuss how to make it correct. Gary.. From Simon.Zheng@sun.com Tue Apr 22 22:30:02 2008 Received: from sunmail4.singapore.sun.com (sunmail4.Singapore.Sun.COM [129.158.71.19]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m3N5U2FP018460 for ; Tue, 22 Apr 2008 22:30:02 -0700 (PDT) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by sunmail4.singapore.sun.com (8.13.4+Sun/8.13.3/ENSMAIL,v2.2) with ESMTP id m3N5TlOi001509 for <@sunmail2sca.sfbay.sun.com:lsarc-ext@sun.com>; Wed, 23 Apr 2008 13:30:01 +0800 (SGT) Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0JZR00201J9Z8800@nwk-avmta-2.sfbay.sun.com> for lsarc-ext@sun.com (ORCPT lsarc-ext@sun.com); Tue, 22 Apr 2008 22:29:59 -0700 (PDT) Received: from sineb-mail-2.sun.com ([192.18.19.7]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0JZR00E85J9Y2F90@nwk-avmta-2.sfbay.sun.com> for lsarc-ext@sun.com (ORCPT lsarc-ext@sun.com); Tue, 22 Apr 2008 22:29:59 -0700 (PDT) Received: from fe-apac-05.sun.com (fe-apac-05.sun.com [192.18.19.176] (may be forged)) by sineb-mail-2.sun.com (8.13.6+Sun/8.12.9) with ESMTP id m3N5UWkf004801 for ; Wed, 23 Apr 2008 05:30:32 +0000 (GMT) Received: from conversion-daemon.mail-apac.sun.com by mail-apac.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) id <0JZR00601J610G00@mail-apac.sun.com> (original mail from Simon.Zheng@Sun.COM) for lsarc-ext@sun.com (ORCPT lsarc-ext@sun.com); Wed, 23 Apr 2008 13:29:49 +0800 (SGT) Received: from [129.158.217.108] by mail-apac.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) with ESMTPSA id <0JZR00MVMJ9O9UXD@mail-apac.sun.com>; Wed, 23 Apr 2008 13:29:49 +0800 (SGT) Date: Wed, 23 Apr 2008 13:29:38 +0800 From: "simon.zheng@sun.com" Subject: Re: GNOME shutdown dialog [LSARC/2008/262 FastTrack timeout 04/23/2008] In-reply-to: <200804221818.m3MIIwu9020884@marduk.eng.sun.com> Sender: Simon.Zheng@sun.com To: Gary Winiger Cc: Irene.Huang@sun.com, lsarc-ext@sun.com Message-id: <1208928578.103642.48.camel@olympic> MIME-version: 1.0 X-Mailer: Evolution 2.22.0 Content-type: text/plain Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200804221818.m3MIIwu9020884@marduk.eng.sun.com> Status: RO Content-Length: 617 Gary, On Tue, 2008-04-22 at 11:18 -0700, Gary Winiger wrote: > > 3. Auditing: hald should be the right place to implement auditing > > For details for answers, please see the mails from Simon. > > The important point for audit relative to this case is that > the GUI runs with the logined in users complete context. > VIZ, the process calling DBUS context is no different from > a CLI process run from a terminal emulator. Yes. Here GUI always run in login-user context. -Simon > If I've misread Xiu-Rong's reply and the preceeding isn't cprrect, > we need to discuss how to make it correct. > > Gary.. From Simon.Zheng@sun.com Wed Apr 23 00:07:23 2008 Received: from sunmail2sca.sfbay.sun.com (sunmail2sca.SFBay.Sun.COM [129.145.155.234]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m3N77NGD022039 for ; Wed, 23 Apr 2008 00:07:23 -0700 (PDT) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by sunmail2sca.sfbay.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id m3N77MN0002704 for <@sunmail2sca.sfbay.sun.com:lsarc-ext@sun.com>; Wed, 23 Apr 2008 00:07:23 -0700 (PDT) Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0JZR00H03NSBWG00@nwk-avmta-1.sfbay.Sun.COM> for lsarc-ext@sun.com (ORCPT lsarc-ext@sun.com); Wed, 23 Apr 2008 00:07:23 -0700 (PDT) Received: from sineb-mail-1.sun.com ([192.18.19.6]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0JZR00HF4NSAPW00@nwk-avmta-1.sfbay.Sun.COM> for lsarc-ext@sun.com (ORCPT lsarc-ext@sun.com); Wed, 23 Apr 2008 00:07:23 -0700 (PDT) Received: from fe-apac-05.sun.com (fe-apac-05.sun.com [192.18.19.176] (may be forged)) by sineb-mail-1.sun.com (8.13.6+Sun/8.12.9) with ESMTP id m3N77aPs010078 for ; Wed, 23 Apr 2008 07:07:36 +0000 (GMT) Received: from conversion-daemon.mail-apac.sun.com by mail-apac.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) id <0JZR00C01NMJTJ00@mail-apac.sun.com> (original mail from Simon.Zheng@Sun.COM) for lsarc-ext@sun.com (ORCPT lsarc-ext@sun.com); Wed, 23 Apr 2008 15:07:13 +0800 (SGT) Received: from [129.158.217.108] by mail-apac.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) with ESMTPSA id <0JZR00M7ZNRW9UEE@mail-apac.sun.com> for lsarc-ext@sun.com (ORCPT lsarc-ext@sun.com); Wed, 23 Apr 2008 15:07:09 +0800 (SGT) Date: Wed, 23 Apr 2008 15:06:58 +0800 From: "simon.zheng@sun.com" Subject: Re: GNOME shutdown dialog [LSARC/2008/262 FastTrack timeout 04/23/2008] In-reply-to: <1208891197.1179.71.camel@localhost> Sender: Simon.Zheng@sun.com To: Irene Huang Cc: lsarc-ext@sun.com Message-id: <1208934418.103642.57.camel@olympic> MIME-version: 1.0 X-Mailer: Evolution 2.22.0 Content-type: text/plain Content-transfer-encoding: 8BIT X-PMX-Version: 5.4.1.325704 References: <200804191639.m3JGdUTm017498@marduk.eng.sun.com> <480B7958.3040601@sun.com> <1208891197.1179.71.camel@localhost> Status: RO Content-Length: 4499 On Tue, 2008-04-22 at 19:06 +0000, Irene Huang wrote: > Hi, all > > This case is due timeout tomorrow. If all are satisfied with the answers > to from Simon, I'll close the project as approved tomorrow. > 1. Authentication: responsibility of PSARC/2008/021 Should be "Authorization". This case doesn't involve any authentication. Authorizations related to Power Management are defined in PSARC/2008/021. -Simon > 2. Single dialog? This has been carefully considered and it was finally > decided to use two dialogs. > 3. Auditing: hald should be the right place to implement auditing > For details for answers, please see the mails from Simon. > > If there's any further issues, please raise before timeout. > > Thanks > > --Irene > On Mon, 2008-04-21 at 01:11 +0800, simon.zheng wrote: > > Gary, > > > > Gary Winiger wrote: > > >> - Clicking buttons in launch menu of gnome-panel > > >> - Response to user pressing power button > > >> - Response to suspend key from keyboard > > >> - Sending XSMP saveyourself request to gnome-session. > > >> e.g. $gnome-session-save --kill > > >> > > > > > > I presume all these operations are auditable to meet the > > > Solaris Aduit policy. > > > > > > > > >> For instance, when console user logs in desktop, menu button > > >> "Shut Down..." is visible on Launch Menu. If user pushes it, > > >> gnome-panel will cause shutdown dialog show up by invoking > > >> "org.gnome.SessionManager.Shutdown" instead of current XSMP-based > > >> saveyourself request. > > >> > > > > > > Again I presume these will also all be auditable in accordance > > > with the Solaris Audit policy. > > > > > > > > >> Please note gnome-sys-suspend will be obsolete after new dialogs > > >> are integrated. Another separate case will be filed to make > > >> related interface obsolete. > > >> > > > > > > Not part of this case, but the one alluded to. How will this all > > > relate to /usr/openwin/bin/sys-suspend? > > > > > > > Good question. > > > > As early discussion with Power Management team, sys-suspend > > will probably be evolved as a pure command line based on > > Power Management realted RBAC authorization. I guess Power > > Management team will have a case for this. > > > > > > > >> 4.4. Security Impact: > > >> > > >> This case is just the consumer of LSARC/2007/702. It doesn't > > >> depend on any authorization directly. > > >> > > > > > > I ask the audit questions above because they directly relate to > > > the communication from the GUI process to whomever is enforcing > > > the policy which is where I expect the audit to take place. > > > > > > > I agree auditing is really needed when running shutdown > > action. Perhaps hald is the right audit place. > > > > The same as LSARC/2007/021, desktop applications involved > > in this case, gnome-panel and gnome-session, both run as > > user and haven't access control. > > > > When popping up dialog, they only check user > > authorizations through LSARC/2007/702 interface (calling > > checkauthattr() eventually). If check result is true, > > we show uer shutdown dialog and button. Othewise, part > > of buttons or the entire dialog will be hidden. > > > > When user clicks "shutdown" button, they invoke > > LSARC/2007/702 interface (calling HAL interface eventually) > > to run action. At that time, hald process running as root > > enforces authrization and access control. If user have > > right authorization, a real action will be done by hald. > > Otherwise, return desktop applications an error. > > > > My understanding is that auditing will be done in hald > > (PSARC/2008/021 HAL Power Management Support). This > > case doesn't seem to audit again since they haven't > > access control. If I'm wrong, please correct me. > > > > > > > >> 4.5. Dependency: > > >> > > >> GNOME power manager (LSARC/2007/702) is a putback dependency. > > >> > > > > > > Is PSARC/2008/021 HAL Power Management Support > > > not a dependency because LSARC/2007/702 is dependent on 021? > > > > > > > Yes, it's a dependency. But this case doesn't directly > > depend on interfaces of PSARC/2008/021. So we don't list. > > > > Because LSARC/2007/702 have to putback until 021 is ready, > > apparently this case wait until 702 and 021 are ready. > > > > Thanks, > > -Simon > > > From Irene.Huang@sun.com Wed Apr 23 03:25:46 2008 Received: from sunmail5.uk.sun.com (sunmail5.UK.Sun.COM [129.156.85.165]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m3NAPjxJ027128 for ; Wed, 23 Apr 2008 03:25:45 -0700 (PDT) Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11]) by sunmail5.uk.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id m3NAPdZX003630 for <@sunmail2sca.sfbay.sun.com:lsarc-ext@sun.com>; Wed, 23 Apr 2008 11:25:44 +0100 (BST) Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0JZR00A03WYVOL00@brm-avmta-1.central.sun.com> for lsarc-ext@sun.com (ORCPT lsarc-ext@sun.com); Wed, 23 Apr 2008 04:25:43 -0600 (MDT) Received: from sineb-mail-1.sun.com ([192.18.19.6]) by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0JZR00JDWWYUJ180@brm-avmta-1.central.sun.com> for lsarc-ext@sun.com (ORCPT lsarc-ext@sun.com); Wed, 23 Apr 2008 04:25:43 -0600 (MDT) Received: from fe-apac-06.sun.com (fe-apac-06.sun.com [192.18.19.177] (may be forged)) by sineb-mail-1.sun.com (8.13.6+Sun/8.12.9) with ESMTP id m3NAPums026119 for ; Wed, 23 Apr 2008 10:25:56 +0000 (GMT) Received: from conversion-daemon.mail-apac.sun.com by mail-apac.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) id <0JZR00B01WTKDT00@mail-apac.sun.com> (original mail from Irene.Huang@Sun.COM) for lsarc-ext@sun.com (ORCPT lsarc-ext@sun.com); Wed, 23 Apr 2008 18:24:54 +0800 (SGT) Received: from [129.156.235.198] by mail-apac.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) with ESMTPSA id <0JZR00BGPWXDRGPR@mail-apac.sun.com>; Wed, 23 Apr 2008 18:24:52 +0800 (SGT) Date: Wed, 23 Apr 2008 18:25:36 +0000 From: Irene Huang Subject: Re: GNOME shutdown dialog [LSARC/2008/262 FastTrack timeout 04/23/2008] In-reply-to: <1208928578.103642.48.camel@olympic> Sender: Irene.Huang@sun.com To: "simon.zheng@sun.com" Cc: Gary Winiger , lsarc-ext@sun.com Message-id: <1208975136.929.29.camel@localhost> MIME-version: 1.0 X-Mailer: Evolution 2.12.2 Content-type: text/plain Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200804221818.m3MIIwu9020884@marduk.eng.sun.com> <1208928578.103642.48.camel@olympic> Status: RO Content-Length: 966 May I close this case as approved now? It sounds (to me) like that if the GUI always run in login-user context which is no different from a CLI process run from a terminal emulator, then there's auditing issues to be concerned. Thanks --Irene On Wed, 2008-04-23 at 13:29 +0800, simon.zheng@sun.com wrote: > Gary, > > On Tue, 2008-04-22 at 11:18 -0700, Gary Winiger wrote: > > > 3. Auditing: hald should be the right place to implement auditing > > > For details for answers, please see the mails from Simon. > > > > The important point for audit relative to this case is that > > the GUI runs with the logined in users complete context. > > VIZ, the process calling DBUS context is no different from > > a CLI process run from a terminal emulator. > > Yes. Here GUI always run in login-user context. > > -Simon > > > If I've misread Xiu-Rong's reply and the preceeding isn't cprrect, > > we need to discuss how to make it correct. > > > > Gary.. > From Irene.Huang@sun.com Wed Apr 23 06:48:57 2008 Received: from sunmail2sca.sfbay.sun.com (sunmail2sca.SFBay.Sun.COM [129.145.155.234]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m3NDmvmR001431 for ; Wed, 23 Apr 2008 06:48:57 -0700 (PDT) Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11]) by sunmail2sca.sfbay.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id m3NDmurl014811 for <@sunmail2sca.sfbay.sun.com:lsarc-ext@sun.com>; Wed, 23 Apr 2008 06:48:57 -0700 (PDT) Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0JZS000136DLZL00@brm-avmta-1.central.sun.com> for lsarc-ext@sun.com (ORCPT lsarc-ext@sun.com); Wed, 23 Apr 2008 07:48:57 -0600 (MDT) Received: from sineb-mail-1.sun.com ([192.18.19.6]) by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0JZS00MV86DJMH00@brm-avmta-1.central.sun.com> for lsarc-ext@sun.com (ORCPT lsarc-ext@sun.com); Wed, 23 Apr 2008 07:48:56 -0600 (MDT) Received: from fe-apac-06.sun.com (fe-apac-06.sun.com [192.18.19.177] (may be forged)) by sineb-mail-1.sun.com (8.13.6+Sun/8.12.9) with ESMTP id m3NDnA3Y003031 for ; Wed, 23 Apr 2008 13:49:10 +0000 (GMT) Received: from conversion-daemon.mail-apac.sun.com by mail-apac.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) id <0JZS00G0168A1Z00@mail-apac.sun.com> (original mail from Irene.Huang@Sun.COM) for lsarc-ext@sun.com (ORCPT lsarc-ext@sun.com); Wed, 23 Apr 2008 21:48:07 +0800 (SGT) Received: from [129.156.235.198] by mail-apac.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) with ESMTPSA id <0JZS00BCF6C5RFVE@mail-apac.sun.com>; Wed, 23 Apr 2008 21:48:07 +0800 (SGT) Date: Wed, 23 Apr 2008 21:48:52 +0000 From: Irene Huang Subject: Re: GNOME shutdown dialog [LSARC/2008/262 FastTrack timeout 04/23/2008] In-reply-to: <1208975136.929.29.camel@localhost> Sender: Irene.Huang@sun.com To: "simon.zheng@sun.com" Cc: Gary Winiger , lsarc-ext@sun.com Message-id: <1208987332.929.48.camel@localhost> MIME-version: 1.0 X-Mailer: Evolution 2.12.2 Content-type: text/plain Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200804221818.m3MIIwu9020884@marduk.eng.sun.com> <1208928578.103642.48.camel@olympic> <1208975136.929.29.camel@localhost> Status: RO Content-Length: 1151 On Wed, 2008-04-23 at 18:25 +0000, Irene Huang wrote: > May I close this case as approved now? > It sounds (to me) like that if the GUI always run in login-user context > which is no different from a CLI process run from a terminal emulator, > then there's auditing issues to be concerned. Sorry, I meant, there's no auditing issues to be concerned. --Irene > > Thanks > --Irene > On Wed, 2008-04-23 at 13:29 +0800, simon.zheng@sun.com wrote: > > Gary, > > > > On Tue, 2008-04-22 at 11:18 -0700, Gary Winiger wrote: > > > > 3. Auditing: hald should be the right place to implement auditing > > > > For details for answers, please see the mails from Simon. > > > > > > The important point for audit relative to this case is that > > > the GUI runs with the logined in users complete context. > > > VIZ, the process calling DBUS context is no different from > > > a CLI process run from a terminal emulator. > > > > Yes. Here GUI always run in login-user context. > > > > -Simon > > > > > If I've misread Xiu-Rong's reply and the preceeding isn't cprrect, > > > we need to discuss how to make it correct. > > > > > > Gary.. > > > From gww@eng.sun.com Wed Apr 23 07:44:30 2008 Received: from sunmail3mpk.sfbay.sun.com (sunmail3mpk.SFBay.Sun.COM [129.146.11.52]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m3NEiUAO003212 for ; Wed, 23 Apr 2008 07:44:30 -0700 (PDT) Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11]) by sunmail3mpk.sfbay.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id m3NEiUTD017545 for <@sunmail2sca.sfbay.sun.com:lsarc-ext@sun.com>; Wed, 23 Apr 2008 07:44:30 -0700 (PDT) Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0JZS0050H8Y41N00@brm-avmta-1.central.sun.com> for lsarc-ext@sun.com (ORCPT lsarc-ext@sun.com); Wed, 23 Apr 2008 08:44:28 -0600 (MDT) Received: from dm-eng-02.sfbay.sun.com ([129.146.11.32]) by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0JZS00M9B8Y3MB40@brm-avmta-1.central.sun.com> for lsarc-ext@sun.com (ORCPT lsarc-ext@sun.com); Wed, 23 Apr 2008 08:44:27 -0600 (MDT) Received: from marduk.eng.sun.com (marduk.SFBay.Sun.COM [129.146.108.224]) by dm-eng-02.sfbay.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id m3NEiPZj055076; Wed, 23 Apr 2008 07:44:25 -0700 (PDT) Received: from marduk.eng.sun.com (localhost [127.0.0.1]) by marduk.eng.sun.com (8.13.6+Sun/8.12.11) with ESMTP id m3NEiCJR022569; Wed, 23 Apr 2008 07:44:12 -0700 (PDT) Received: (from gww@localhost) by marduk.eng.sun.com (8.13.6+Sun/8.12.11/Submit) id m3NEiCYF022568; Wed, 23 Apr 2008 07:44:12 -0700 (PDT) Date: Wed, 23 Apr 2008 07:44:12 -0700 (PDT) From: Gary Winiger Subject: Re: GNOME shutdown dialog [LSARC/2008/262 FastTrack timeout 04/23/2008] To: Simon.Zheng@sun.com, Irene.Huang@sun.com Cc: gww@eng.sun.com, lsarc-ext@sun.com Message-id: <200804231444.m3NEiCYF022568@marduk.eng.sun.com> Content-transfer-encoding: 7BIT X-Sun-Charset: US-ASCII X-PMX-Version: 5.4.1.325704 Status: RO Content-Length: 96 > May I close this case as approved now? My issues for this case have been addressed. Gary.. From Irene.Huang@sun.com Wed Apr 23 07:53:24 2008 Received: from sunmail5.uk.sun.com (sunmail5.UK.Sun.COM [129.156.85.165]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m3NErNYR003352 for ; Wed, 23 Apr 2008 07:53:24 -0700 (PDT) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by sunmail5.uk.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id m3NErJAQ023809 for <@sunmail2sca.sfbay.sun.com:lsarc-ext@sun.com>; Wed, 23 Apr 2008 15:53:22 +0100 (BST) Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0JZS000059CWAD00@nwk-avmta-1.sfbay.Sun.COM> for lsarc-ext@sun.com (ORCPT lsarc-ext@sun.com); Wed, 23 Apr 2008 07:53:20 -0700 (PDT) Received: from sineb-mail-2.sun.com ([192.18.19.7]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0JZS00N4D9CV2OC0@nwk-avmta-1.sfbay.Sun.COM> for lsarc-ext@sun.com (ORCPT lsarc-ext@sun.com); Wed, 23 Apr 2008 07:53:20 -0700 (PDT) Received: from fe-apac-05.sun.com (fe-apac-05.sun.com [192.18.19.176] (may be forged)) by sineb-mail-2.sun.com (8.13.6+Sun/8.12.9) with ESMTP id m3NErrNG007043 for ; Wed, 23 Apr 2008 14:53:53 +0000 (GMT) Received: from conversion-daemon.mail-apac.sun.com by mail-apac.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) id <0JZS0050196G3500@mail-apac.sun.com> (original mail from Irene.Huang@Sun.COM) for lsarc-ext@sun.com (ORCPT lsarc-ext@sun.com); Wed, 23 Apr 2008 22:53:10 +0800 (SGT) Received: from [129.156.235.198] by mail-apac.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) with ESMTPSA id <0JZS00M2R9CJ9U2G@mail-apac.sun.com>; Wed, 23 Apr 2008 22:53:10 +0800 (SGT) Date: Wed, 23 Apr 2008 22:53:16 +0000 From: Irene Huang Subject: Re: GNOME shutdown dialog [LSARC/2008/262 FastTrack timeout 04/23/2008] In-reply-to: <200804231444.m3NEiCYF022568@marduk.eng.sun.com> Sender: Irene.Huang@sun.com To: Gary Winiger Cc: Simon.Zheng@sun.com, lsarc-ext@sun.com Message-id: <1208991196.2206.6.camel@localhost> MIME-version: 1.0 X-Mailer: Evolution 2.12.2 Content-type: text/plain Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200804231444.m3NEiCYF022568@marduk.eng.sun.com> Status: RO Content-Length: 217 Thanks Gary Closing this case as approved. --Irene On Wed, 2008-04-23 at 07:44 -0700, Gary Winiger wrote: > > May I close this case as approved now? > > My issues for this case have been addressed. > > Gary..