no /run/user folder, switching from openrc elogind to seatd

[guyuming]

i used to use openrc + elogind on my laptop.

i am trying seatd instead of elogind today.

I removed elogind USE flag from make.conf, re-emerged and started seatd according to https://wiki.gentoo.org/wiki/Seatd


but i get XDG_RUNTIME_DIR not set error when i start wayland compositor.

according to https://forums.gentoo.org/viewtopic-p-8755871.html, i need to export XDG_RUNTIME_DIR=/run/user/${id -u}

But i don't have user folder under /run.

What shall i do? create /run/user manually? what permission to set on it?

[GDH-gentoo]

Have a look at this (from seatd's author).
_________________

[guyuming]

@GDH-gentoo, thanks! the scripts works for me and i can start my DWL wayland compositor with seatd now

UPDATE: i thought it worked. but after restarting the computer, it fails again.

when i first tried the script, i added it into /etc/profile, or ~/.profile. And in a tty, sudo su and then source /etc/profile to run the script. And then i can start wayland compositor after exit sudo.


But after restarting computer, the /run/user folder disappears, and the script don't have permission to create it, i think i have to sudo to gain the permission. But how can i do it automatically when login.


I tried the PAM_RUNDIR.so, adding it into /etc/pam.d/system-login, But i did not see /run/user created.

I am using openrc, how to check whether pam modules are called?

the s-toolbox solution link need authentication and i don't have access to it

[Jimmy Jazz]

As you I'm using seatd with XDG_RUNTIME_DIR=/home/user/tmp under Xorg but not with wayland. I don't have a /run at all. So /run/user is not mandatory.
_________________
« La seule condition au triomphe du mal, c'est l'inaction des gens de bien » E.Burke

[guyuming]

i just added sudo in front of the command, and add this ~/xdg_run_user script into the script i launch the wayland compositor with. It's ok now, just that i need to input password for sudo every time i start wayland compositor from tty.


guyuming@localhost ~/personal/gentoo $ cat ~/xdg_run_user
# Configuration because seatd does not do this for wayland compositor
YOUR_USER=$(id -u)
YOUR_GROUP=$(id -g)

XDG_RUNTIME_DIR=/run/user/$YOUR_USER

## Delete existing directory, create a new one and set permissions
sudo rm -rf $XDG_RUNTIME_DIR
sudo mkdir -p $XDG_RUNTIME_DIR
sudo chown $YOUR_USER:$YOUR_GROUP $XDG_RUNTIME_DIR
sudo chmod 700 $XDG_RUNTIME_DIR

[franzf]

[sMueggli]

[Hu]

Recreating the directory could be done at boot via systemd-tmpfiles, but this seems like something that should be handled by the login session tracker.

[Anon-E-moose]

On my system, openrc I just create the directory in /tmp.

[guyuming]

thanks all!

@sMueggli, my script file to start wayland compositor permission is like follows, only i have write permission to this file, how can any other normal user inject script into it?

[sMueggli]

[guyuming]

@sMueggli

but i seldom(if not never) run firefox with sudo, if some bad guy can control my firefox remotely, how can he use firefox to break the local file permission system to do something that need root?

[sMueggli]

[guyuming]

@sMueggli, thanks,

according to your logic, any script own by my normal user account is not safe if it contains sudo, not just the script to start wayland compositor.

what if i change the owner of the scripts (dwl.sh, the script i use to start wayland compositor, and the script xdg_run_user) to root? and give my normal user only execute permission to these scripts, will this be much safer?

[guyuming]

@sMueggli,

I am also thinking of use SUID permission for the scripts that need to run with sudo, so i don't need to enter password anymore.

but i see talks on the web that says SUID is not safe, they recommend to use password-less sudo instead, that is, to add something as follows into /etc/sudoers, why?

[sMueggli]

[Acatorn]