Hey, I create a new bug for this to track the process on this a little easier since the other bug contain quite much of a mess.
First off all I got pantalaimon as system service service working.
I plan to pick this up later so I want to track my changes here and discuss any further steps.
My changes:
In pantalaimon and panctl import SystemBus() instead of SessionBus()
Provide dbus config to configure how can touch the service and how can spawn under the name.
dbus busconfig:
<!DOCTYPE busconfig PUBLIC
"-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN"
"http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
<busconfig>
<!-- Only root or user avahi can own the Pantalaimon service -->
<policy user="pantalaimon">
<allow own="org.pantalaimon1"/>
</policy>
<policy user="root">
<allow own="org.pantalaimon1"/>
</policy>
<allow send_destination="org.pantalaimon1"/>
<allow receive_sender="org.pantalaimon1"/>
</policy>
<policy user="root">
<allow send_destination="org.pantalaimon1"/>
<allow receive_sender="org.pantalaimon1"/>
</policy>
</busconfig>
systemd system service
I created this service to reduce the permissions that the system service has:
Description
Hey, I create a new bug for this to track the process on this a little easier since the other bug contain quite much of a mess.
First off all I got pantalaimon as system service service working.
I plan to pick this up later so I want to track my changes here and discuss any further steps.
My changes:
SystemBus()
instead ofSessionBus()
dbus busconfig:
systemd system service
I created this service to reduce the permissions that the system service has:
What is left
The issue is now how to determine how pantalaimon should decide on which bus it spawns.