Bug #12209
amnesia user should not be in the audio group
100%
Description
The amnesia user should not be in the audio group. ConsoleKit automatically uses ACLs to give logged in users access to /dev/snd/
, so amnesia should not need to have access directly.
See https://www.freedesktop.org/wiki/Software/PulseAudio/Documentation/User/PerfectSetup/ and https://wiki.ubuntu.com/Audio/TheAudioGroup (which also applies to Debian).
Subtasks
History
#1 Updated by emmapeel 2017-02-07 15:22:00
- Status changed from New to Confirmed
I change the status ticket to confirmed after reading both links provider by user.
Acording to https://www.freedesktop.org/wiki/Software/PulseAudio/Documentation/User/PerfectSetup/ we should not need to add amnesia to the audio group.
Other users logged in could use the audio card, including the microphone, but I am not sure it has security implications as the other user is ‘pulse’.
#2 Updated by intrigeri 2017-02-08 11:25:39
- Status changed from Confirmed to In Progress
- Assignee set to intrigeri
- Target version set to Tails_2.12
- % Done changed from 0 to 10
- Feature Branch set to feature/12209-dont-add-amnesia-to-the-audio-group
> Acording to https://www.freedesktop.org/wiki/Software/PulseAudio/Documentation/User/PerfectSetup/ we should not need to add amnesia to the audio group.
Right. Note that this piece of doc is obsolete, as ConsoleKit was replaced with systemd-logind, but the basic idea remains valid :)
#3 Updated by intrigeri 2017-02-09 16:23:10
Jenkins seems happy about this branch (only unrelated issues) but I’m not sure if it actually exercises anything sound-related. So I’ll test a few use cases by hand.
#4 Updated by intrigeri 2017-02-10 14:15:27
- Subject changed from amnesia user is in the audio group to amnesia user should not be in the audio group
- Assignee changed from intrigeri to anonym
- % Done changed from 10 to 50
- QA Check set to Ready for QA
Totem and Tor Browser can play sound.
#5 Updated by anonym 2017-04-03 18:12:42
- Status changed from In Progress to Fix committed
- % Done changed from 50 to 100
- QA Check changed from Ready for QA to Pass
#6 Updated by anonym 2017-04-03 18:19:22
- Assignee deleted (
anonym)
#7 Updated by anonym 2017-04-19 17:25:12
- Status changed from Fix committed to Resolved