Comment 35 for bug 250506

On Sun, 2008-08-31 at 17:28 +0000, Alex Mayorga Adame wrote:
> @James, maybe you might want to take a look into their code, or maybe
> they're not doing "what we want". BTW "what we want" is that not every
> user is allowed to shutdown the host or what?

Yeah, it's not desirable to have any user be able to shutdown the
system.

I've just had a look at fast-user-switch-applet, thanks for the tip.
It also uses GDM, but at least has a simple authentication check
which should ensure that only local console users can shut down
the system. This would be better than the gnome-session way of
doing it, but still lacking I think.

The problem is that using something like policykit/consolekit
solves this quite nicely, but it's not really the right
place for the functionality, and leads to a circular build
dependency, which is a pain.

One solution could be to pull the code out of consolekit in
to a "ShutdownKit" package, and then patch all the other
packages to use its dbus path instead.

I'm not the person to decide all of this though, I was just
investigating the current state to see what our options were.

Thanks,

James