[PATCH] system-wide pulseaudio and module-hal-detect DBUS policy problem

[mgrela]

Hi,

I've recently encountered a problem with running a system-wide pulseaudio daemon for my HTPC together with module-hal-detect. The issue is, that the DBUS policy for system bus is to deny all remote method calls and name ownerships except where there is a policy defined for a process. This causes pulseaudio module-hal-detect to fail when communicating with HAL:

Jun 13 13:49:49 ix dbus-daemon: Rejected send message, 1 matched rules; type="method_call", sender=":1.3" (uid=105 pid=1684 comm="/usr/bin/pulseaudio --log-target=syslog --disallow") interface="org.freedesktop.Hal.Manager" member="FindDeviceByCapability" error name="(unset)" requested_reply=0 destination="org.freedesktop.Hal" (uid=0 pid=1576 comm="/usr/sbin/hald --use-syslog --verbose=yes "))
Jun 13 13:49:49 ix pulseaudio[1684]: module-hal-detect.c: D-Bus error while parsing HAL data: org.freedesktop.DBus.Error.AccessDenied: Rejected send message, 1 matched rules; type="method_call", sender=":1.3" (uid=105 pid=1684 comm="/usr/bin/pulseaudio --log-target=syslog --disallow") interface="org.freedesktop.Hal.Manager" member="FindDeviceByCapability" error name="(unset)" requested_reply=0 destination="org.freedesktop.Hal" (uid=0 pid=1576 comm="/usr/sbin/hald --use-syslog --verbose=yes "))

Pulseaudio is also unable to bind a DBUS name for itself:

Jun 13 13:59:57 ix pulseaudio[1683]: main.c: Failed to acquire org.pulseaudio.Server: org.freedesktop.DBus.Error.AccessDenied: Connection ":1.3" is not allowed to own the service "org.pulseaudio.Server" due to security policies in the configuration file

The attached dbus policy file fixes these problems and should be put into /etc/dbus-1/system.d/

[mgrela]

Dbus policy file

[lennart]

File looks fine.

But could you make this a proper patch that also includes the necessary hooks to install this in Makefile.am?

[lennart]

Also see #606.

[mgrela]

Replying to lennart:

File looks fine. But could you make this a proper patch that also includes the necessary hooks to install this in Makefile.am?

Patch attached.

[lennart]

Applied in e8340345f6a102cd03b6676576bcd3879ead7aad

Thanks for the patch!