1 <?xml version="1.0" encoding="UTF-8"?>
2 <node xmlns:tp="http://telepathy.freedesktop.org/wiki/DbusSpec#extensions-v0" name="/node">
8 <interface name="org.freedesktop.atspi.LoginHelper">
9 <tp:docstring xmlns="http://www.w3.org/1999/xhtml">
10 <p>@brief An interface for use by assistive technologies by which
11 they can access system information and services on a 'need to know'
12 basis while the screen is locked, during user authentication, or
13 during other sensitive operations. </p>
15 <p>This interface is intended for use by assistive technologies
16 and related user-enabling services, and by applications and
17 utilities which may wish to restrict access to certain system
18 devices and services during security-sensitive states, e.g. when
19 the screen is locked or during authentication into some secure
22 <p>Such 'applications' (for instance, screen lock dialogs and
23 security-enabled web browsers) use the ::LoginHelper client
24 interfaces, and the bonobo-activation query service, to
25 query for assistive technologies which advertise the ::LoginHelper
26 service. The client then queries these assistive technologies
27 for their device I/O requirements, via the ::getDeviceReqs call.
28 The client may then issue the advisory request ::setSafe (TRUE),
29 which requests that the ::LoginHelper -implementing service make a
30 best-effort attempt to make itself more secure (for instance,
31 an onscreen keyboard might turn off word prediction, and a
32 screenreader may turn off keyboard echo via speech). The return
33 value of ::setSafe is an advisory indication of whether this attempt
34 was successful (no specific guarantees are implied).
35 Once the 'security sensitive' state is exited, the client should
36 call ::setSafe (FALSE). </p>
38 <p>The return values from ::getDeviceReqs inform the client of which
39 services the ::LoginHelper service (e. g. assistive technology) needs
40 in order to do its job. The client may use this information to
41 loosen any restrictions on access which it may currently have in
42 place (for instance, keyboard grabs, etc.). If it does not do so,
43 the likely outcome is that the end-user will experience loss
44 of access to the system. </p>
46 <tp:struct name="WindowInfo">
47 <tp:docstring xmlns="http://www.w3.org/1999/xhtml">
48 <p>A structure containing info about toplevel X windows that
49 the ::LoginHelper instance wishes to have raised. </p>
51 <tp:member type="i" tp:name="winID">
52 <tp:docstring xmlns="http://www.w3.org/1999/xhtml">
58 <tp:enum name="DeviceReq" type="u">
59 <tp:docstring xmlns="http://www.w3.org/1999/xhtml">
62 <p>The system and device access and services which the LoginHelper-implementing
63 assistive technology requires in order to enable the user to use the system. </p>
65 <tp:enumvalue suffix="GUI_EVENTS">
67 !<: Needs access to the GUI event subsystem (e.g. Xserver)
70 <tp:enumvalue suffix="CORE_KEYBOARD" value="1">
72 !<: Needs access to the system keyboard events (read and write)
75 <tp:enumvalue suffix="CORE_POINTER" value="2">
77 !<: Needs access to the onscreen pointer (e.g. mouse pointer)
80 <tp:enumvalue suffix="EXT_INPUT" value="3">
82 !<: Reads XInput extended input devices
85 <tp:enumvalue suffix="POST_WINDOWS" value="4">
87 !<: Posts Windows, and needs for toplevel windows to be visible
90 <tp:enumvalue suffix="AUDIO_OUT" value="5">
92 !<: Writes to audio device
95 <tp:enumvalue suffix="AUDIO_IN" value="6">
97 !<: Reads from audio device
100 <tp:enumvalue suffix="NETWORK" value="7">
102 !<: Requires access to general network services, including remote access
105 <tp:enumvalue suffix="LOCALHOST" value="8">
107 !<: Requires network services hosted on LOCALHOST only
110 <tp:enumvalue suffix="SERIAL_OUT" value="9">
112 !<: Writes to a serial port
115 <tp:enumvalue suffix="SERIAL_IN" value="10">
117 !<: Reads from a serial port
121 <method name="setSafe">
125 <arg direction="in" name="safe_mode" type="b" tp:type="boolean">
127 \c TRUE if the client is requesting that 'safe mode' be initiated, \c FALSE if the client is advising that 'safe mode' may beexited, i.e. normal operation may be resumed.Request a LoginHelper to enter "safe" mode, orinform LoginHelper that "safe" mode may be exited.If \a safe_mode is \c TRUE, but the return value is \c FALSE,the requesting client may wish to deny services to the ::LoginHelper, for instance avoid raising its toplevels.The return value is purely advisory, and no guarantees are intended about what the implementing LoginHelper will do to improve security when in "safe" mode.
130 <arg direction="out" type="b" tp:type="boolean">
132 whether the ::LoginHelper is now "safe" or not.
136 <method name="getDeviceReqs">
137 <tp:docstring xmlns="http://www.w3.org/1999/xhtml">
138 <p>getDeviceReqs: </p>
140 <p>Query a ::LoginHelper for the types of
141 device I/O it requires, in order to do its job.
142 For instance, a ::LoginHelper which needs to receive keyboard
144 Accessibility_LoginHelper_CORE_KEYBOARD in this list. </p>
146 <arg direction="out" type="u" tp:type="DeviceReqList">
148 A sequence of ::LoginHelper_DeviceReq indicatingthe device I/O required in order to facilitate end-user access to the system.
152 <method name="getRaiseWindows">
153 <tp:docstring xmlns="http://www.w3.org/1999/xhtml">
154 <p>getRaiseWindows: </p>
156 <p>Get a list of window IDs that need raising on login. </p>
158 <arg direction="out" type="ai" tp:type="WindowList">
160 a sequence containing window IDS for toplevels whichneed to be raised/made visible during user authentication, inorder for the ::LoginHelper to facilitate end-user access to the system.
164 <method name="unImplemented">
165 <tp:docstring xmlns="http://www.w3.org/1999/xhtml">
169 <p>placeholders for future expansion.</p>
172 <method name="unImplemented2">
174 <method name="unImplemented3">
176 <method name="unImplemented4">