[Ubuntu Wiki] Update of "Accessibility/Specs/SudoAdminAtspi" by ColinWatson

[Ubuntu Wiki]

Dear Wiki user,

You have subscribed to a wiki page or wiki category on "Ubuntu Wiki" for change notification.

The following page has been changed by ColinWatson:
https://wiki.ubuntu.com/Accessibility/Specs/SudoAdminAtspi

The comment on the change is:
a bit more info

------------------------------------------------------------------------------
   * As a side-effect, this means that a11y doesn't work with remote X displays (eg, LTSP)
   * The real fix for this is too complicated for us.
   * However, we think we can make it work by patching the at-spi bridge lookup to use SUDO_USER.  This is a grievous hack but doesn't make anything any worse.
+  * ColinWatson: I've investigated orbit2's setup code and found that it uses `g_get_user_name` to find its `/tmp/orbit-*` directory which on Unix picks the username out of `getpwuid`; it should therefore be sufficient to make the at-spi bridge lookup temporarily drop privileges while connecting to the bridge, which means we don't have to mess with orbit2 itself. I volunteer to produce a patch for LukeYelavich to test.
  
   * Another problem is that the display-grabbing of gksu prevents the use of a11y tools with the gksu interface (eg, on-screen keyboard).
   * There is a gconf key named ??? which can disable this display-grabbing.  This "solves" the problem in that it makes it possible to use gksu with a11y tools.