at_console="true" (or similar) in a DBus policy file uses pam_console to
try to limit sending of messages to a DBus service.
This is an old relic from before polkit. Many distros that don't
implement it, or implement it completely differently. Last time I heard,
kdbus won't support it.
NetworkManager has removed at_console from their policy [0] and I've
filed some bugs against firewalld [1], setroubleshoot [2], abrt [3] to
remove it from the relevant DBus policy files.
Is there a good way to grep across the whole of Fedora to see which
other packages have at_console in their /etc/dbus-1/*/* policy?
Cheers,
Stef
[0]
https://bugzilla.redhat.com/show_bug.cgi?id=979416
[1]
https://bugzilla.redhat.com/show_bug.cgi?id=1094745
[2]
https://bugzilla.redhat.com/show_bug.cgi?id=1094752
[3]
https://github.com/abrt/abrt/pull/816