homed: open up home dir Acquire operation to unpriv clients

Apparently unpriv clients expect to be able to auth via PAM. Kinda
sucks. But it is what it is. Hence open this up.

This shouldn't be too bad in effect since clients after all need to
provide security creds for unlocking the home dir, in order to misuse
this.

Fixes: #15072

diff --git a/src/home/homed-manager-bus.c b/src/home/homed-manager-bus.c
index 1b8ec0c7386f8ba4ffc8eed462c8c9a76820e374..6306e12d394abc511e3805dd8af0f7676ac2eee6 100644 (file)
--- a/src/home/homed-manager-bus.c
+++ b/src/home/homed-manager-bus.c
@@ -789,7 +789,7 @@ static const sd_bus_vtable manager_vtable[] = {
                                  "h",
                                  SD_BUS_PARAM(send_fd),
                                  method_acquire_home,
-                                 SD_BUS_VTABLE_SENSITIVE),
+                                 SD_BUS_VTABLE_UNPRIVILEGED|SD_BUS_VTABLE_SENSITIVE),
         SD_BUS_METHOD_WITH_NAMES("RefHome",
                                  "sb",
                                  SD_BUS_PARAM(user_name)