Re: Bug#426452: user-setup: Should allow preseeding to avoid adding initial user into local device groups

[Petter Reinholdtsen <pere@hungry.com>]

[Christian Perrier]
> However, the mention you make about pam_foreground is new to me. Where
> does this module come from?
>
> It seems that it could be the one module that is OK to give access to
> local devices to "the person who's sitting in front of the machine".
>
> Which package does it belong to?

The package is libpam-foreground, and it come from Ubuntu, which was
implementing an idea from RedHat.

And yes, it provides a back-channel to let hal/dbus know which users
are in front of the machine.

I spoke about this during debconf, and there seem to be work going on
in the hal/dbus community to provide a daemon to track this
information instead of relying on pam.  I am not sure how far they
got, and believe it is best to use the pam_foreground system until a
useful replacement show up.

Happy hacking,
-- 
Petter Reinholdtsen