Don't use at_console in DBus policy files

[Richard W.M. Jones]

On Tue, May 06, 2014 at 02:29:38PM +0200, Stef Walter wrote:
> Is there a good way to grep across the whole of Fedora to see which
> other packages have at_console in their /etc/dbus-1/*/* policy?

Here is one way to do this:

  repoquery --whatprovides '/etc/dbus-1/*/*'

The above command will list all the RPMs in your version of Fedora
that contain a file matching that pattern (not just ones containing
at_console).  Note you must use quotes around the wildcard.  To
download them, do:

  cd /tmp
  mkdir test
  cd test
  wget `repoquery --location --whatprovides '/etc/dbus-1/*/*'`

Now you can unpack those and examine them:

  for f in *.rpm; do rpm2cpio $f | cpio -id; done
  grep at_console etc/dbus-1/*/*

To match the filename back to the original package, use something
like this:

$ repoquery --whatprovides /etc/dbus-1/system.d/FirewallD.conf
firewalld-0:0.3.9.3-1.fc20.noarch
firewalld-0:0.3.8-1.fc20.noarch

HTH,

Rich.

-- 
Richard Jones, Virtualization Group, Red Hat http://people.redhat.com/~rjones
Read my programming and virtualization blog: http://rwmj.wordpress.com
virt-builder quickly builds VMs from scratch
http://libguestfs.org/virt-builder.1.html