Thunar/volman and HAL/DBUS

[Benedikt Meurer]

Nikolas Arend wrote:
> Hi,
> 
> sorry if this is slightly off-topic, but I think there is some expertise on this list with respect to HAL/DBUS issues (Benedikt?) and I'm kinda stuck. I updated my Suse 10.1 system to udev-104, hal-0.5.8.1 and dbus-0.62, trying to preserve the configuration and not mess up anything. Obviously I didn't manage to get it all right.
> After installing Thunar 0.8.0, exo 0.3.2 and thunar-volman I get the following error when trying to mount any removable (in the case USB-) device:
> 
> A security policy in place prevents this sender from sending this message to this recipient, see message bus configuration file (rejected message had interface "org.freedesktop.Hal.Device.Volume" member "Mount" error name "(unset)" destination "org.freedesktop.Hal").
> 
> I guess it's a save assumption that it's not a Thunar issue, but something with the HAL/DBUS configuration which I wasn't able to sort out. Attached below are the hal.conf and PolicyKit.conf from /etc/dbus-1/system.d/.
> 
> Any help on this is much appreciated.
> 
>   <!-- Allow anyone to invoke methods on the Manager and Device interfaces -->
>   <policy context="default">
>     <allow send_interface="org.freedesktop.Hal.Manager"/>
>     <allow send_interface="org.freedesktop.Hal.Device"/>
>     <allow receive_interface="org.freedesktop.Hal.Manager"
>            receive_sender="org.freedesktop.Hal"/>
>     <allow receive_interface="org.freedesktop.Hal.Device"
>            receive_sender="org.freedesktop.Hal"/>
> 
>     <allow send_interface="org.freedesktop.Hal.Device.SystemPowerManagement"/>
>     <allow send_interface="org.freedesktop.Hal.Device.LaptopPanel"/>
>     <allow send_interface="org.freedesktop.Hal.Device.Volume"/>
>     <allow send_interface="org.freedesktop.Hal.Device.Volume.Crypto"/>
>     <allow receive_interface="org.freedesktop.Hal.Device.SystemPowerManagement"
>            receive_sender="org.freedesktop.Hal"/>
>     <allow receive_interface="org.freedesktop.Hal.Device.LaptopPanel"
>            receive_sender="org.freedesktop.Hal"/>
>     <allow receive_interface="org.freedesktop.Hal.Device.Volume"
>            receive_sender="org.freedesktop.Hal"/>
>     <allow receive_interface="org.freedesktop.Hal.Device.Volume.Crypto"
>            receive_sender="org.freedesktop.Hal"/>
>   </policy>
> 
>   <!-- Default policy for the exported interfaces -->
>   <policy context="default">
>     <deny send_interface="org.freedesktop.Hal.Device.SystemPowerManagement"/>
>     <deny send_interface="org.freedesktop.Hal.Device.VideoAdapterPM"/>
>     <deny send_interface="org.freedesktop.Hal.Device.LaptopPanel"/>
>     <deny send_interface="org.freedesktop.Hal.Device.Volume"/>
>     <deny send_interface="org.freedesktop.Hal.Device.Volume.Crypto"/>
>   </policy>
> 
>   <!-- This will not work if pam_console support is not enabled -->
>   <policy at_console="true">
>     <allow send_interface="org.freedesktop.Hal.Device.SystemPowerManagement"/>
>     <allow send_interface="org.freedesktop.Hal.Device.LaptopPanel"/>
>     <allow send_interface="org.freedesktop.Hal.Device.Volume"/>
>     <allow send_interface="org.freedesktop.Hal.Device.Volume.Crypto"/>
>   </policy>
> 
>   <!-- You can change this to a more suitable user, or make per-group -->
>   <policy user="0">
>     <allow send_interface="org.freedesktop.Hal.Device.SystemPowerManagement"/>
>     <allow send_interface="org.freedesktop.Hal.Device.VideoAdapterPM"/>
>     <allow send_interface="org.freedesktop.Hal.Device.LaptopPanel"/>
>     <allow send_interface="org.freedesktop.Hal.Device.Volume"/>
>     <allow send_interface="org.freedesktop.Hal.Device.Volume.Crypto"/>
>   </policy>

This allows root and pam_console-authenticated users to use the volumes.
Make sure pam_console is setup properly.

Benedikt