]> git.ipfire.org Git - thirdparty/systemd.git/commit
homed: Allow user to change parts of their record
authorAdrian Vovk <adrianvovk@gmail.com>
Fri, 2 Feb 2024 03:53:09 +0000 (22:53 -0500)
committerLuca Boccassi <luca.boccassi@gmail.com>
Fri, 1 Nov 2024 10:41:46 +0000 (10:41 +0000)
commita192250eda1e5cc1f8fc799cf9b85d37e7fa0519
treeb73e12ea8a4f47b0fa46409b029a6bbb805afc68
parentad03f2d5f0d7f87b775357e5a2727dbcbc973fce
homed: Allow user to change parts of their record

This allows an unprivileged user that is active at the console to change
the fields that are in the selfModifiable allowlists (introduced in a
previous commit) without authenticating as a system administrator.

Administrators can disable this behavior per-user by setting the
relevant selfModifiable allowlists, or system-wide by changing the
policy of the org.freedesktop.home1.update-home-by-owner Polkit action.
src/home/homed-home-bus.c
src/home/homed-home-bus.h
src/home/homed-home.c
src/home/org.freedesktop.home1.policy
src/shared/user-record.c
src/shared/user-record.h