Hi,

I'm looking for a way to enable non-root users to install packages on
their local machines, but not removing/purging them.

I know that probably the proper way to achieve that is PackageKit, but I
was wondering if there is also a way to allow the use of apt-get, with
constraints for certain options.

A possible solution would be an entry like this in the /etc/sudoers:

user host=(root) NOPASSWD: /usr/bin/apt-get update
user host=(root) NOPASSWD: /usr/bin/apt-get install [[\:alpha\:]]*
user host=(root) NOPASSWD: /usr/bin/apt-get -s install [[\:alpha\:]]*

However, apt-get accepts options even after specifying the package list
and also allows to remove packages by appending a minus sign.

For example, with the above entries:

apt-get install -q <package> will fail, however, apt-get install
<package> - won't. Also, apt-get install <package>- allows the removal
of packages which we don't want.

Is there a sane way to use /etc/sudoers like above or should we
completely refrain from that and use PackageKit?

Regards,

Adrian


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/1330011138.26511.6.camel@z6

Reply via email to