Re: Enabling package installation for non-root users

2012-03-14 Thread Josselin Mouette
Le dimanche 04 mars 2012 à 01:39 +0100, David Weinehall a écrit : > On Mon, Feb 27, 2012 at 09:32:04AM +0100, Josselin Mouette wrote: > > This should clearly be a whitelist. I don’t think there’s real use for a > > blacklist, it is too dangerous. > > Wouldn't both be best? Let's say the whitelis

Re: Enabling package installation for non-root users

2012-03-03 Thread David Weinehall
On Mon, Feb 27, 2012 at 09:32:04AM +0100, Josselin Mouette wrote: > Le lundi 27 février 2012 à 05:19 +0100, Sebastian Heinlein a écrit : > > Am Donnerstag, den 23.02.2012, 18:46 +0200 schrieb Timo Juhani > > Lindfors: > > > Josselin Mouette writes: > > > > (We even have a patch to allow only a s

Re: Enabling package installation for non-root users

2012-02-27 Thread Josselin Mouette
Le lundi 27 février 2012 à 05:19 +0100, Sebastian Heinlein a écrit : > Am Donnerstag, den 23.02.2012, 18:46 +0200 schrieb Timo Juhani > Lindfors: > > Josselin Mouette writes: > > > (We even have a patch to allow only a subset of packages but it is > > > unfortunately a bit too hackish.) > > > >

Re: Enabling package installation for non-root users

2012-02-26 Thread Sebastian Heinlein
Am Donnerstag, den 23.02.2012, 18:46 +0200 schrieb Timo Juhani Lindfors: > Josselin Mouette writes: > > (We even have a patch to allow only a subset of packages but it is > > unfortunately a bit too hackish.) > > Would be really nice to have some standard sets available (think > "browser extensi

Re: Enabling package installation for non-root users

2012-02-26 Thread Philip Hands
On Thu, 23 Feb 2012 16:32:18 +0100, John Paul Adrian Glaubitz wrote: > Hi, > > I'm looking for a way to enable non-root users to install packages on > their local machines, but not removing/purging them. Well, perhaps an option (which also allows removal) is what used to be called klik, but wha

Re: Enabling package installation for non-root users

2012-02-26 Thread Timo Juhani Lindfors
Sebastian Heinlein writes: > APTDAEMON::Restrict::Users { "joe", "jane"; }; > APTDAEMON::Restrict::Tags::Allow { "interface::shell"; }; > APTDAEMON::Restrict::Tags::Deny { "interface::daemon"; }; > > Would this be of any help to you? Sounds like a great start. -- To UNSUBSCRIBE, email to debia

Re: Enabling package installation for non-root users

2012-02-26 Thread Sebastian Heinlein
Am Donnerstag, den 23.02.2012, 18:46 +0200 schrieb Timo Juhani Lindfors: > Josselin Mouette writes: > > (We even have a patch to allow only a subset of packages but it is > > unfortunately a bit too hackish.) > > Would be really nice to have some standard sets available (think > "browser extensi

Re: Enabling package installation for non-root users

2012-02-23 Thread Matthias Klumpp
2012/2/23 Josselin Mouette : > Le jeudi 23 février 2012 à 18:57 +0100, Matthias Klumpp a écrit : >> You can change the PK settings using PolicyKit. Limiting installations >> to a group of packages is not possible at time. (and not planned - >> what if a package in group X requires a package of grou

Re: Enabling package installation for non-root users

2012-02-23 Thread Josselin Mouette
Le jeudi 23 février 2012 à 18:57 +0100, Matthias Klumpp a écrit : > You can change the PK settings using PolicyKit. Limiting installations > to a group of packages is not possible at time. (and not planned - > what if a package in group X requires a package of group Y? Users > could easily work ar

Re: Enabling package installation for non-root users

2012-02-23 Thread Matthias Klumpp
2012/2/23 Timo Juhani Lindfors : > Josselin Mouette writes: >> (We even have a patch to allow only a subset of packages but it is >> unfortunately a bit too hackish.) > > Would be really nice to have some standard sets available (think > "browser extensions", "command-line tools that ship no servi

Re: Enabling package installation for non-root users

2012-02-23 Thread Timo Juhani Lindfors
Josselin Mouette writes: > (We even have a patch to allow only a subset of packages but it is > unfortunately a bit too hackish.) Would be really nice to have some standard sets available (think "browser extensions", "command-line tools that ship no services or suid binaries"). I'd certainly let

Re: Enabling package installation for non-root users

2012-02-23 Thread Josselin Mouette
Hi, Le jeudi 23 février 2012 à 16:32 +0100, John Paul Adrian Glaubitz a écrit : > I'm looking for a way to enable non-root users to install packages on > their local machines, but not removing/purging them. > > I know that probably the proper way to achieve that is PackageKit, but I > was wonder

Re: Enabling package installation for non-root users

2012-02-23 Thread Neil Williams
On Thu, 23 Feb 2012 16:32:18 +0100 John Paul Adrian Glaubitz wrote: > Hi, > > I'm looking for a way to enable non-root users to install packages on > their local machines, but not removing/purging them. At which point, you lose anyway because sometimes package installation *requires* removal of

Enabling package installation for non-root users

2012-02-23 Thread John Paul Adrian Glaubitz
Hi, I'm looking for a way to enable non-root users to install packages on their local machines, but not removing/purging them. I know that probably the proper way to achieve that is PackageKit, but I was wondering if there is also a way to allow the use of apt-get, with constraints for certain op