Sebastian Pipping

Hi @anudeepthika, there is no way to use usbguard-dbus safely without talking to Polkit so enabling D-Bus support "rightfully" pulls in that dependency now. Regarding `--with-polkit`, it is documented as…...

PS @anudeepthika maybe I should be more explicit that I'd be happy to understand your concern and situation better, and then discuss options for improval. In particular: Is a dependency...

@anudeepthika that helps, but I still have questions, to be sure I understand the full picture and our options: - Do you need `--with-dbus` and USBGuard DBus functionality enabled in...

Hi @anudeepthika , I guess then maybe the best way forward would be to introduce a new configure option `--with(out)-dbus-security` that defaults to enabled and have that control a C++...

PS: The idea with `--without-dbus-security` naming is that making that^^ part of `--without-polkit` would do nothing to warn the user that operation with D-Bus but without talking to Polkit is...

> There is no polkit daemon running in our environment and enabling it, is making a huge impact. @anudeepthika could you elaborate what kind of impact enabling the daemon would...

> good catch. I'd bump the dependency... @muelli alright, let's start with that approach then, I guess

We should also should check with (say) d-feet if interactive auth still works with this patch in practice before merging, to be sure. I haven't done that, yet.

@benzea thanks for your input, that's definitely helpful! :+1: @muelli how should we proceed with this pull request? Should I (a) cherry-pick your commit and make a new pull request...

> > I know only little about dbus architecture and I am a bit surprised. I expected that kind of error to be produced by the broker, somehow. > >...