<div dir="ltr"><div class="gmail_extra"><div class="gmail_quote">On 25 September 2015 at 19:12, Burton, Ross <span dir="ltr"><<a href="mailto:ross.burton@intel.com" target="_blank">ross.burton@intel.com</a>></span> wrote:<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div class="gmail_extra"><span class=""><div class="gmail_quote">On 25 September 2015 at 16:59, Andreas Oberritter <span dir="ltr"><<a href="mailto:obi@opendreambox.org" target="_blank">obi@opendreambox.org</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div style="overflow:hidden">Whether to add user accounts or not should be a decision made by the<br>
distro. If this setting is machine specific, which to be honest<br>
surprised me, why don't you just let the machine specific xorg video<br>
driver depend on xuser-account unconditionally? Connman really doesn't<br>
need this account.</div></blockquote></div><br></span>connman does need the account as it uses it to allow a non-root X user to actually use connman. DBus should warn if you try and set policy that uses users that entirely don't exist.</div><div class="gmail_extra"><br></div><div class="gmail_extra">I wonder if dbus lets multiple files assign policy, so the dbus rules could go into the xuser package?</div></div></blockquote><div><br></div><div>I see the patch is in master now but I'll just note here that Ross' idea here seems like a good solution (even if it makes figuring out the overall policy a little trickier for humans) and I see nothing that would prevent it from working. I just got side tracked with other D-Bus policy bugs while look at this: After I'm done with those I'll make a patch to move the xuser connman policy to the xuser recipe.</div><div><br></div><div>Jussi</div></div></div></div>