@lanodan I agree with this, especially regarding Polkit! I'd like to point though that the second option doesn't require setuid. By "system-wide", I mean running the daemon as root or as a dedicated user with necessary permissions, so the daemon would expose its D-Bus API on the system bus and access would just be restricted to a certain group. The setuid thing is another option that's closer to "as the user" but avoids assigning permissions directly.
Notices by Affe Null (affe_null@mt.abscue.de)
-
Embed this notice
Affe Null (affe_null@mt.abscue.de)'s status on Sunday, 20-Aug-2023 05:09:12 JST Affe Null -
Embed this notice
Affe Null (affe_null@mt.abscue.de)'s status on Sunday, 06-Aug-2023 20:36:38 JST Affe Null I got #bananui 🍌 , the GUI for #LinuxMobile on feature phones, to work together with #wroomd on a #Nokia2780 with #postmarketOS. It's now almost possible to use it as an actual phone! 📞
UI source code: https://git.abscue.de/obp/bananui/shell
WIP pmaports fork: https://gitlab.com/affenull2345/pmaports/-/tree/nokia-weeknd (currently missing audio for voice calls and kernel packaging)