Ticket #117 (new enhancement)

Opened 12 years ago

Last modified 10 years ago

debathena-workstation should notify on remote root logins

Reported by: geofft Owned by:
Priority: normal Milestone: The Distant Future
Component: -- Keywords:
Cc: Fixed in version:
Upstream bug:

Description

If I ssh to root at a remote debathena-workstation machine (or possibly a sudoer at a a remote debathena-workstation machine), a locally logged in user should be notified of this. Athena 9 did this via the "console" applet.

Change History

comment:1 Changed 11 years ago by jdreed

  • Component set to --
  • Milestone set to IAP 2010

comment:2 Changed 11 years ago by geofft

One option is to get the syslogd to libnotify the current user, but it doesn't look like there's an easy way to find the current user(s) and libnotify them. If you're root, you can play stupid tricks with /proc/*/environ and get the D-Bus address of session bus.

comment:3 Changed 11 years ago by broder

Oh man - we can do this with ConsoleKit?, too!

Incoming ssh connections will emit a org.freedesktop.ConsoleKit.Manager.SeatAdded signal from the object path /org/freedesktop/ConsoleKit/Manager

We can catch that, track down the session on that seat, and see if it's root (or maybe a user with sudo privileges? although the logic to determine that is kind of tricky)

And we can do it from a daemon that's started from /etc/X11/Xsession.d, so it'll already know what user to notify.

comment:4 Changed 11 years ago by jdreed

  • Milestone changed from Summer 2010 (Lucid Deploy) to Fall 2010

comment:5 Changed 10 years ago by jdreed

  • Priority changed from low to normal
  • Milestone changed from IAP 2011 to The Distant Future

Ugh, I don't want to create a new daemon. This is really blocking on #286.

Note: See TracTickets for help on using tickets.