forked from unom/punktfunk
enricobuehlerandClaude Fable 5
8d5a9f66c9
Field report (Nobara, 0.19.2): entering Game Mode mid-stream left the monitor on and the stream mirroring at the desktop's resolution. Root cause: the DM-flavor takeover needs privilege to stop plasmalogin, the polkit rule is a docs-only manual step nobody installs, so every managed entry silently degraded to ATTACH — and with a physical display connected the attach path mirrors the box's own session at its own mode. Ship the privilege with the packages instead: a root helper (libexec/punktfunk/pf-dm-helper, verbs stop|restore) behind its own polkit action (io.unom.punktfunk.dm-helper, allow_any — the same mechanism Nobara's os-session-select uses, and the helper derives the DM unit from the display-manager.service symlink itself so callers never name a unit across the privilege boundary). The host tries the plain system-bus verbs first (root / operator rule still take precedence), then pkexec's the helper; the restore paths (idle restore + in-stream desktop-switch honor) use the same ladder so a takeover that needed the helper can always be undone by it. Packaged in rpm/deb/arch (Arch under /usr/lib/punktfunk with the policy's exec.path annotation rewritten; the host probes both layouts). Nix is left out deliberately: store paths can't match the probe, NixOS keeps the manual rule. Docs updated — the rule snippet stays as the scoped alternative. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
26 lines
1.4 KiB
XML
26 lines
1.4 KiB
XML
<?xml version="1.0" encoding="UTF-8"?>
|
|
<!DOCTYPE policyconfig PUBLIC
|
|
"-//freedesktop//DTD PolicyKit Policy Configuration 1.0//EN"
|
|
"http://www.freedesktop.org/standards/PolicyKit/1.0/policyconfig.dtd">
|
|
<policyconfig>
|
|
<vendor>Punktfunk</vendor>
|
|
<vendor_url>https://punktfunk.unom.io</vendor_url>
|
|
|
|
<!-- Stop/restore the box's display manager for a managed gamescope takeover. The helper derives
|
|
the unit from the display-manager.service symlink itself (no caller-chosen units), so this
|
|
grant is scoped to the box's own local-seat session lifecycle — the same class of operation
|
|
these distros already authorize for their session switcher (e.g. Nobara's
|
|
os-session-select, allow_any). allow_any because the host commonly runs sessionless (a
|
|
lingering user unit, no polkit agent), where interactive auth can never be answered. -->
|
|
<action id="io.unom.punktfunk.dm-helper">
|
|
<description>Stop or restore the display manager for a Punktfunk stream</description>
|
|
<message>Authentication is required to switch the display manager for a Punktfunk stream</message>
|
|
<defaults>
|
|
<allow_any>yes</allow_any>
|
|
<allow_inactive>yes</allow_inactive>
|
|
<allow_active>yes</allow_active>
|
|
</defaults>
|
|
<annotate key="org.freedesktop.policykit.exec.path">/usr/libexec/punktfunk/pf-dm-helper</annotate>
|
|
</action>
|
|
</policyconfig>
|