Bug #12209

amnesia user should not be in the audio group

Added by cypherpunks 6 months ago. Updated 3 months ago.

Status:ResolvedStart date:02/03/2017
Priority:NormalDue date:
Assignee:-% Done:

100%

Category:-
Target version:Tails_2.12
QA Check:Pass Blueprint:
Feature Branch:feature/12209-dont-add-amnesia-to-the-audio-group Easy:
Type of work:Code Affected tool:

Description

The amnesia user should not be in the audio group. ConsoleKit automatically uses ACLs to give logged in users access to /dev/snd/, so amnesia should not need to have access directly.

See https://www.freedesktop.org/wiki/Software/PulseAudio/Documentation/User/PerfectSetup/ and https://wiki.ubuntu.com/Audio/TheAudioGroup (which also applies to Debian).

Associated revisions

Revision c5dd1714
Added by intrigeri 6 months ago

Don't add the live user to the "audio" group (refs: #12209).

This should not be needed on a modern Linux desktop system anymore.

Revision f073d047
Added by anonym 4 months ago

Merge remote-tracking branch 'origin/feature/12209-dont-add-amnesia-to-the-audio-group' into devel

Fix-committed: #12209

History

#1 Updated by emmapeel 6 months ago

  • Status changed from New to Confirmed

I change the status ticket to confirmed after reading both links provider by user.

Acording to https://www.freedesktop.org/wiki/Software/PulseAudio/Documentation/User/PerfectSetup/ we should not need to add amnesia to the audio group.

Other users logged in could use the audio card, including the microphone, but I am not sure it has security implications as the other user is 'pulse'.

#2 Updated by intrigeri 6 months ago

  • Status changed from Confirmed to In Progress
  • Assignee set to intrigeri
  • Target version set to Tails_2.12
  • % Done changed from 0 to 10
  • Feature Branch set to feature/12209-dont-add-amnesia-to-the-audio-group

Acording to https://www.freedesktop.org/wiki/Software/PulseAudio/Documentation/User/PerfectSetup/ we should not need to add amnesia to the audio group.

Right. Note that this piece of doc is obsolete, as ConsoleKit was replaced with systemd-logind, but the basic idea remains valid :)

#3 Updated by intrigeri 6 months ago

Jenkins seems happy about this branch (only unrelated issues) but I'm not sure if it actually exercises anything sound-related. So I'll test a few use cases by hand.

#4 Updated by intrigeri 5 months ago

  • Subject changed from amnesia user is in the audio group to amnesia user should not be in the audio group
  • Assignee changed from intrigeri to anonym
  • % Done changed from 10 to 50
  • QA Check set to Ready for QA

Totem and Tor Browser can play sound.

#5 Updated by anonym 4 months ago

  • Status changed from In Progress to Fix committed
  • % Done changed from 50 to 100
  • QA Check changed from Ready for QA to Pass

#6 Updated by anonym 4 months ago

  • Assignee deleted (anonym)

#7 Updated by anonym 3 months ago

  • Status changed from Fix committed to Resolved

Also available in: Atom PDF