mirror of
https://gitlab.uni-freiburg.de/opensourcevdi/spice-gtk
synced 2026-01-08 13:23:54 +00:00
2161b5464f
spice-client needs to be able to open the device nodes under /dev/bus/usb to be able to redirect a usb device to the guest. Normally opening these nodes is only allowed by root. This patch adds a suid root helper which asks policykit if it is ok to grant raw usb device access, and if policykit says it is ok, opens up the acl so that the spice-client can open the device node. As soon as spice-client closes the stdin of the helper, the helper removes the extra rights. This ensures that the acl gets put back to normal even if the spice client crashes. Normally the spice-client closes stdin directly after opening the device node. Signed-off-by: Hans de Goede <hdegoede@redhat.com>
38 lines
798 B
Makefile
38 lines
798 B
Makefile
NULL=
|
|
|
|
# TODO: not sure if we want to do that
|
|
#desktopdir = $(datadir)/applications
|
|
#desktop_in_files = spicy.desktop.in
|
|
#desktop_DATA = $(desktop_in_files:.desktop.in=.desktop)
|
|
#@INTLTOOL_DESKTOP_RULE@
|
|
#
|
|
#MIMEFILES = spice-mime.xml.in
|
|
#mimedir = $(datadir)/mime/packages
|
|
#mime_DATA = spice-mime.xml
|
|
#@INTLTOOL_XML_RULE@
|
|
|
|
EXTRA_DIST = \
|
|
spicy.nsis \
|
|
spice-mime.xml.in spicy.desktop.in \
|
|
spice-protocol.vapi \
|
|
gtkrc \
|
|
$(desktop_in_files) \
|
|
org.spice-space.lowlevelusbaccess.policy \
|
|
$(NULL)
|
|
|
|
CLEANFILES = \
|
|
$(desktop_DATA) \
|
|
$(NULL)
|
|
|
|
DISTCLEANFILES = \
|
|
$(desktop_DATA) \
|
|
$(NULL)
|
|
|
|
vapidir = $(VAPIDIR)
|
|
vapi_DATA = spice-protocol.vapi
|
|
|
|
policydir = $(POLICYDIR)
|
|
policy_DATA = org.spice-space.lowlevelusbaccess.policy
|
|
|
|
-include $(top_srcdir)/git.mk
|