Bug #12209

amnesia user should not be in the audio group

Added by cypherpunks 2017-02-03 07:35:43 . Updated 2017-04-19 17:25:12 .

Status:
Resolved
Priority:
Normal
Assignee:
Category:
Target version:
Start date:
2017-02-03
Due date:
% Done:

100%

Feature Branch:
feature/12209-dont-add-amnesia-to-the-audio-group
Type of work:
Code
Blueprint:

Starter:
Affected tool:
Deliverable for:

Description

The amnesia user should not be in the audio group. ConsoleKit automatically uses ACLs to give logged in users access to /dev/snd/, so amnesia should not need to have access directly.

See https://www.freedesktop.org/wiki/Software/PulseAudio/Documentation/User/PerfectSetup/ and https://wiki.ubuntu.com/Audio/TheAudioGroup (which also applies to Debian).


Subtasks


History

#1 Updated by emmapeel 2017-02-07 15:22:00

  • Status changed from New to Confirmed

I change the status ticket to confirmed after reading both links provider by user.

Acording to https://www.freedesktop.org/wiki/Software/PulseAudio/Documentation/User/PerfectSetup/ we should not need to add amnesia to the audio group.

Other users logged in could use the audio card, including the microphone, but I am not sure it has security implications as the other user is ‘pulse’.

#2 Updated by intrigeri 2017-02-08 11:25:39

  • Status changed from Confirmed to In Progress
  • Assignee set to intrigeri
  • Target version set to Tails_2.12
  • % Done changed from 0 to 10
  • Feature Branch set to feature/12209-dont-add-amnesia-to-the-audio-group

> Acording to https://www.freedesktop.org/wiki/Software/PulseAudio/Documentation/User/PerfectSetup/ we should not need to add amnesia to the audio group.

Right. Note that this piece of doc is obsolete, as ConsoleKit was replaced with systemd-logind, but the basic idea remains valid :)

#3 Updated by intrigeri 2017-02-09 16:23:10

Jenkins seems happy about this branch (only unrelated issues) but I’m not sure if it actually exercises anything sound-related. So I’ll test a few use cases by hand.

#4 Updated by intrigeri 2017-02-10 14:15:27

  • Subject changed from amnesia user is in the audio group to amnesia user should not be in the audio group
  • Assignee changed from intrigeri to anonym
  • % Done changed from 10 to 50
  • QA Check set to Ready for QA

Totem and Tor Browser can play sound.

#5 Updated by anonym 2017-04-03 18:12:42

  • Status changed from In Progress to Fix committed
  • % Done changed from 50 to 100
  • QA Check changed from Ready for QA to Pass

#6 Updated by anonym 2017-04-03 18:19:22

  • Assignee deleted (anonym)

#7 Updated by anonym 2017-04-19 17:25:12

  • Status changed from Fix committed to Resolved