Project

General

Profile

Bug #12209

amnesia user should not be in the audio group

Added by cypherpunks 8 months ago. Updated 5 months ago.

Status:
Resolved
Priority:
Normal
Assignee:
-
Category:
-
Target version:
Start date:
02/03/2017
Due date:
% Done:

100%

QA Check:
Pass
Feature Branch:
feature/12209-dont-add-amnesia-to-the-audio-group
Type of work:
Code
Blueprint:
Easy:
Affected tool:

Description

The amnesia user should not be in the audio group. ConsoleKit automatically uses ACLs to give logged in users access to /dev/snd/, so amnesia should not need to have access directly.

See https://www.freedesktop.org/wiki/Software/PulseAudio/Documentation/User/PerfectSetup/ and https://wiki.ubuntu.com/Audio/TheAudioGroup (which also applies to Debian).

Associated revisions

Revision c5dd1714 (diff)
Added by intrigeri 8 months ago

Don't add the live user to the "audio" group (refs: #12209).

This should not be needed on a modern Linux desktop system anymore.

Revision f073d047
Added by anonym 6 months ago

Merge remote-tracking branch 'origin/feature/12209-dont-add-amnesia-to-the-audio-group' into devel

Fix-committed: #12209

History

#1 Updated by emmapeel 8 months ago

  • Status changed from New to Confirmed

I change the status ticket to confirmed after reading both links provider by user.

Acording to https://www.freedesktop.org/wiki/Software/PulseAudio/Documentation/User/PerfectSetup/ we should not need to add amnesia to the audio group.

Other users logged in could use the audio card, including the microphone, but I am not sure it has security implications as the other user is 'pulse'.

#2 Updated by intrigeri 8 months ago

  • Status changed from Confirmed to In Progress
  • Assignee set to intrigeri
  • Target version set to Tails_2.12
  • % Done changed from 0 to 10
  • Feature Branch set to feature/12209-dont-add-amnesia-to-the-audio-group

Acording to https://www.freedesktop.org/wiki/Software/PulseAudio/Documentation/User/PerfectSetup/ we should not need to add amnesia to the audio group.

Right. Note that this piece of doc is obsolete, as ConsoleKit was replaced with systemd-logind, but the basic idea remains valid :)

#3 Updated by intrigeri 7 months ago

Jenkins seems happy about this branch (only unrelated issues) but I'm not sure if it actually exercises anything sound-related. So I'll test a few use cases by hand.

#4 Updated by intrigeri 7 months ago

  • Subject changed from amnesia user is in the audio group to amnesia user should not be in the audio group
  • Assignee changed from intrigeri to anonym
  • % Done changed from 10 to 50
  • QA Check set to Ready for QA

Totem and Tor Browser can play sound.

#5 Updated by anonym 6 months ago

  • Status changed from In Progress to Fix committed
  • % Done changed from 50 to 100
  • QA Check changed from Ready for QA to Pass

#6 Updated by anonym 6 months ago

  • Assignee deleted (anonym)

#7 Updated by anonym 5 months ago

  • Status changed from Fix committed to Resolved

Also available in: Atom PDF