LWN.net Logo

Fedora 12 to remove unprivileged package installation

Fedora 12 to remove unprivileged package installation

Posted Nov 20, 2009 5:51 UTC (Fri) by tkil (subscriber, #1787)
In reply to: Fedora 12 to remove unprivileged package installation by drag
Parent article: Fedora 12 to remove unprivileged package installation

The thing is, it looks like the knobs that are getting exposed (regardless of whether or not there's a GUI) are the ones I want. I'm actually very fine with the old-school "you have to have root authority to do X" rules; what I want is to be able to use a sudo-like capability to show root authority using my own password, and not have to use root's.

*shrug* Not really that big of a deal, but it's something that I really like in OSX, and would like to have in Fedora. I'll look more closely at some of the options available now, to see if this capability is there and just turned off.


(Log in to post comments)

Fedora 12 to remove unprivileged package installation

Posted Nov 20, 2009 5:56 UTC (Fri) by tkil (subscriber, #1787) [Link]

Grr... stupid thinkos

The thing is, it looks like the knobs that are getting exposed (regardless of whether or not there's a GUI) are not the ones I want.

Fedora 12 to remove unprivileged package installation

Posted Nov 20, 2009 6:25 UTC (Fri) by AdamW (guest, #48457) [Link]

policykit is far more fine-grained both in terms of authentication methods and actions than _any_ previous system, including su and sudo.

with policykit you can require all sorts of types of authentication for any defined pk action, and actions are far more fine-grained (su and sudo can only make _entire processes_ run with changed privileges). authentication can be with root password, with user password, or with all sorts of other mechanisms. it's extremely powerful. so, yes, policykit would definitely allow you to do what you want if you configure it appropriately (allow any particular action with authentication via the user password).

Fedora 12 to remove unprivileged package installation

Posted Nov 20, 2009 6:40 UTC (Fri) by tkil (subscriber, #1787) [Link]

so, yes, policykit would definitely allow you to do what you want if you configure it appropriately (allow any particular action with authentication via the user password).

Spiffy! I'll definitely have to look into PK in a bit more depth than I have. Thanks for the info!

Copyright © 2013, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds