diff options
| author | Sergey Trofimov <sarg@sarg.org.ru> | 2023-01-29 21:06:31 +0100 |
|---|---|---|
| committer | Andrew Tropin <andrew@trop.in> | 2023-02-13 16:50:16 +0400 |
| commit | 8d8b9a4c0c6273ce1680233ae234294f511e81b6 (patch) | |
| tree | f757920b96c79c70bddb3b61cc827eb3e5fe8fd0 /gnu/packages/patches | |
| parent | 5b1eab43f011983d9ee560d6935409b6b39706ff (diff) | |
gnu: wpa-supplicant: Add netdev group dbus policy.
The patch allows users in netdev group to control wpa-supplicant via D-Bus
interface.
* gnu/packages/admin.scm (wpa-supplicant)[source]: Add dbus policy patch.
* gnu/packages/patches/wpa-supplicant-dbus-group-policy.patch: New file.
Signed-off-by: Andrew Tropin <andrew@trop.in>
Diffstat (limited to 'gnu/packages/patches')
| -rw-r--r-- | gnu/packages/patches/wpa-supplicant-dbus-group-policy.patch | 23 |
1 files changed, 23 insertions, 0 deletions
diff --git a/gnu/packages/patches/wpa-supplicant-dbus-group-policy.patch b/gnu/packages/patches/wpa-supplicant-dbus-group-policy.patch new file mode 100644 index 0000000000..95c18dac18 --- /dev/null +++ b/gnu/packages/patches/wpa-supplicant-dbus-group-policy.patch @@ -0,0 +1,23 @@ +Borrowed from debian, allows users in netdev group to control wpa-supplicant +via D-Bus. + +Description: Debian does not use pam_console but uses group membership + to control access to D-Bus. Activating both options in the conf file + makes it work on Debian and Ubuntu. +Author: Michael Biebl <biebl@debian.org> +Bug-Debian: http://bugs.debian.org/cgi-bin/bugreport.cgi?msg=15;bug=412179 +--- +--- a/wpa_supplicant/dbus/dbus-wpa_supplicant.conf ++++ b/wpa_supplicant/dbus/dbus-wpa_supplicant.conf +@@ -14,6 +14,11 @@ + <allow send_interface="fi.w1.wpa_supplicant1"/> + <allow receive_sender="fi.w1.wpa_supplicant1" receive_type="signal"/> + </policy> ++ <policy group="netdev"> ++ <allow send_destination="fi.w1.wpa_supplicant1"/> ++ <allow send_interface="fi.w1.wpa_supplicant1"/> ++ <allow receive_sender="fi.w1.wpa_supplicant1" receive_type="signal"/> ++ </policy> + <policy context="default"> + <deny own="fi.epitest.hostap.WPASupplicant"/> + <deny send_destination="fi.epitest.hostap.WPASupplicant"/> |