Porteus Kiosk edition and USB redirection
Posted: 14 Jun 2013, 14:12
Dear porteus users.
I'm trying to use the Porteus kiosk edition (v 2.0.4 32bit) to provide a remote desktop service using the spice protocol.
Basically a user should connect to the remote virtual machine running on top of KVM/Ovirt and open a remote-viewer session using the firefox spice-xpi plugin.
This works pretty well if I use the Porteus standard edition. The remote-viewer session starts and I can display the remote desktop. Also the usb redirection works: if I plug a USB pendrive on the Porteus client, a popup asks if I want to redirect it to the remote machine and if I say yes the drive is mounted on it.
This usb redirection fails on the kiosk edition.
As far as I know the spice-gtk package includes a suid helper script that uses PolKit to ask if a user is authorized to use the device and in such a case it modifies the ACL to allow such an operation (see http://lists.freedesktop.org/archives/s ... 07198.html).
It seems to me that this polkit operation fails on the kiosk edition, but I can't understand why since I included the in the kiosk edition the same modules (not all indeed) as the standard edition.
Probably I'm missing some other module or there is some special configuration of the kiosk edition that prevents this operation to a lower level.
Do you have some suggestions or do someone tried to do the same (or a similar) task?
I need to use the kiosk edition because the sistem is supposed to be used in this and ONLY in this way, so this is the perfect configuration.
For the sake of completeness this is the list of additional modules that I included in the kiosk so far:
acl-2.2.51-i486-1.xzm p11-kit-0.12-i486-1.xzm
attr-2.4.46-i486-1.xzm polkit-0.105-i486-3.xzm
celt051-0.5.1.3-i486-1_SBo.xzm polkit-qt-1-0.103.0-i486-1.xzm
cyrus-sasl-2.1.23-i486-4.xzm pygobject-2.28.6-i486-2.xzm
gamin-0.1.10-i486-5.xzm pygtk-2.24.0-i486-1.xzm
glib2-2.32.4-i486-1.xzm python-2.7.3-i486-2.xzm
gmp-5.0.5-i486-1.xzm spice-0.12.0-i486-1_SBo.xzm
gnutls-3.0.23-i486-1.xzm spice-gtk-0.19-i486-2_SBo-italiano.xzm
gst-plugins-base-0.10.36-i486-2.xzm spice-protocol-0.12.2-noarch-1_SBo.xzm
gstreamer-0.10.36-i486-1.xzm spice-xpi-2.8-2.fc17.i686.xzm
gtk-vnc-0.5.1-i486-2_SBo.xzm udev-182-i486-5.xzm
libatasmart-0.19-i486-1.xzm udisks-1.0.4-i486-1.xzm
libusb-1.0.9-i486-1.xzm usbredir-0.6-i486-1_SBo.xzm
libusb-compat-0.1.4-i486-1.xzm vala-0.20.0-i486-1_SBo.xzm
nettle-2.5-i486-1.xzm vim-gvim-7.3.645-i486-1.xzm
openssl-solibs-1.0.1c-i486-3.xzm virt-viewer-0.5.5-i486-1_SBo.xzm
Best Regards
Riccardo
I'm trying to use the Porteus kiosk edition (v 2.0.4 32bit) to provide a remote desktop service using the spice protocol.
Basically a user should connect to the remote virtual machine running on top of KVM/Ovirt and open a remote-viewer session using the firefox spice-xpi plugin.
This works pretty well if I use the Porteus standard edition. The remote-viewer session starts and I can display the remote desktop. Also the usb redirection works: if I plug a USB pendrive on the Porteus client, a popup asks if I want to redirect it to the remote machine and if I say yes the drive is mounted on it.
This usb redirection fails on the kiosk edition.
As far as I know the spice-gtk package includes a suid helper script that uses PolKit to ask if a user is authorized to use the device and in such a case it modifies the ACL to allow such an operation (see http://lists.freedesktop.org/archives/s ... 07198.html).
It seems to me that this polkit operation fails on the kiosk edition, but I can't understand why since I included the in the kiosk edition the same modules (not all indeed) as the standard edition.
Probably I'm missing some other module or there is some special configuration of the kiosk edition that prevents this operation to a lower level.
Do you have some suggestions or do someone tried to do the same (or a similar) task?
I need to use the kiosk edition because the sistem is supposed to be used in this and ONLY in this way, so this is the perfect configuration.
For the sake of completeness this is the list of additional modules that I included in the kiosk so far:
acl-2.2.51-i486-1.xzm p11-kit-0.12-i486-1.xzm
attr-2.4.46-i486-1.xzm polkit-0.105-i486-3.xzm
celt051-0.5.1.3-i486-1_SBo.xzm polkit-qt-1-0.103.0-i486-1.xzm
cyrus-sasl-2.1.23-i486-4.xzm pygobject-2.28.6-i486-2.xzm
gamin-0.1.10-i486-5.xzm pygtk-2.24.0-i486-1.xzm
glib2-2.32.4-i486-1.xzm python-2.7.3-i486-2.xzm
gmp-5.0.5-i486-1.xzm spice-0.12.0-i486-1_SBo.xzm
gnutls-3.0.23-i486-1.xzm spice-gtk-0.19-i486-2_SBo-italiano.xzm
gst-plugins-base-0.10.36-i486-2.xzm spice-protocol-0.12.2-noarch-1_SBo.xzm
gstreamer-0.10.36-i486-1.xzm spice-xpi-2.8-2.fc17.i686.xzm
gtk-vnc-0.5.1-i486-2_SBo.xzm udev-182-i486-5.xzm
libatasmart-0.19-i486-1.xzm udisks-1.0.4-i486-1.xzm
libusb-1.0.9-i486-1.xzm usbredir-0.6-i486-1_SBo.xzm
libusb-compat-0.1.4-i486-1.xzm vala-0.20.0-i486-1_SBo.xzm
nettle-2.5-i486-1.xzm vim-gvim-7.3.645-i486-1.xzm
openssl-solibs-1.0.1c-i486-3.xzm virt-viewer-0.5.5-i486-1_SBo.xzm
Best Regards
Riccardo