[Pcsclite-muscle] [PATCH] pcsc-lite & polkit: allow auth_admin

[Ludovic Rousseau]

2014-12-06 11:01 GMT+01:00 Nikos Mavrogiannopoulos <nmav at redhat.com>:
> ----- Original Message -----
>> Nikos Mavrogiannopoulos:
>>
>> > I remember I have practical issues with polkit authentication enabled,
>> > and that why it was explicitly disabled. It's been some time and I may
>> > be wrong, but you may know better whether an application (e.g. a gnome
>> > component) could potentially use a single pcscd connection for multiple
>> > requests sent in parallel. If Stanislav has, however, tested such use
>> > cases and they cause no issue I have no problem with the change.
>>
>> Well, in this case, please disable it by changing "auth_admin" to "no"
>> (my second patch in the thread).
>>
>> Yes, "auth_admin" still causes issues: Second app is waiting until you
>> authorize first waiting app. Then second app wakes, and asks for
>> password as well. And you will be asked twice. First time to obtain
>> permission to access the reader, second time to access the card.
>> This is ugly, but it is the correct behavior of "auth_admin".
>
> It is not ugly, it is a description of a best case scenario. There are
> multiple scenarios where that would break a lot of things if a user don't
> enter a password at the prompt. I'd suggest to keep that patch system
> specific.

Nikos, Stanislav, can you agree on a default configuration + code that
should be provided in the "official" pcsc-lite archive?

If yes, which configuration is it?

Thanks

-- 
 Dr. Ludovic Rousseau