https://bugs.kde.org/show_bug.cgi?id=259678
--- Comment #6 from FabiB <plusf...@gmail.com> --- My position is: use polkit, not sudo*** (In reply to Andrius Štikonas from comment #4) > It might indeed be difficult to implement and I fear it might be annoying to > users. i dont think so... it would make things better for users.. 1. with polkit. first thing users would have is a native interface. Right now i use a heavily costomized design for my Plasma setup. When i start an app with (kde)su(do) it will use the "root"-user design so it dont matches my style wich is bad 2. with "always" root is still possible to open a WEBBROWSER AS ROOT! -> Check filesystem > new window opens > click on "open in external browser" and for me it opens firefox as root ... that is a big fat securitything that shouldnt be possible https://bugs.kde.org/show_bug.cgi?id=274053 3. polkit is more modern, maintained and a freedesktop standard. So nobody has to check if "does this distro support kdesu or kdesudo or gksu or gksudo or maybe nothing?" 4. it would start faster since it dont need to create a root environment (fontconfigs, pulsesetup and blah like this for user root) > Partitionmanager needs root privileges very often, e.g. it needs them > when it scans devices on startup. So it will ask for root password during > startup anyway. No Problem with that > But it will also have to ask for password for a lot of other > operations, e.g. mounting/unmounting, etc... So I'm not sure how useful this > would be but of course I'm open to comments. polkit can remember authentifications for a single app for a few minutes. to do so you policyfile needs to have <defaults> <allow_any>auth_admin_keep</allow_any> <allow_inactive>auth_admin_keep</allow_inactive> <allow_active>auth_admin_keep</allow_active> </defaults> auth_admin_keep - Like auth_admin but the authorization is kept for a brief period (e.g. five minutes). https://www.freedesktop.org/software/polkit/docs/latest/polkit.8.html the good thing is also to have more control what to run as root and what not... *** +kdesu, kdesudo -- You are receiving this mail because: You are watching all bug changes.
