[Bug 560178] accountsservice - D-Bus interfaces for querying and manipulating user account information

[bugzilla at redhat.com]

Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug.


https://bugzilla.redhat.com/show_bug.cgi?id=560178

--- Comment #1 from Matthias Clasen <mclasen at redhat.com> 2010-01-30 16:09:20 EST ---
It is worth pointing out that the package installs an activated dbus system bus
service that runs as root and provides an api to change your own and other
users account information, as well as gdm login screen configuration. These
functions are protected by PolicyKit privileges:

org.freedesktop.accounts.change-own-user-data - for changing your own user
name, photo, email address and similar 'ancillary information'. Core data like
your home directory, account type and uid is protected by the
user-administration privilege below:

org.freedesktop.accounts.user-administration - for changing any users user
data.

org.freedesktop.accounts.set-login-option - for changing gdm login screen
configuration.

The service stores 'ancillary information' (ie everything that doesn't go into
/etc/passwd) in /var/lib/AccountsService.

-- 
Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.