Re: Changes to polkit-desktop-policy

2011-03-21 Thread Matthias Clasen
On Fri, 2011-03-18 at 13:32 +1100, Chris Smart wrote: > > I assume that this will not be changed for F14? So the desktop_admin_r > configuration will remain? There are no plans to change this in F14. -- devel mailing list devel@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/li

Re: Changes to polkit-desktop-policy

2011-03-21 Thread Miloslav Trmač
Matthew Miller píše v Čt 17. 03. 2011 v 18:44 -0400: > On Thu, Mar 17, 2011 at 03:30:23PM -0400, Bill Nottingham wrote: > > > This probably should have been a "proper" F15 feature. > > Not really disagreeing there. > > Yeah. It's something I've been agitating for since way before there _was_ a >

Re: Changes to polkit-desktop-policy

2011-03-18 Thread Kevin Kofler
Matthias Clasen wrote: > The changes to the PolicyKit desktop policy can be seen here: [2]. [snip] > [2] > http://pkgs.fedoraproject.org/gitweb/?p=polkit.git;a=commitdiff;h=9fa422d5441f0d06e0b1d992cc3c270bc2c35c70 Quoting from that file: > Action=org.gnome.clockapplet.mechanism.*;org.freedesktop.

Re: Changes to polkit-desktop-policy

2011-03-17 Thread Chris Smart
On Fri, Mar 18, 2011 at 3:21 AM, Matthias Clasen wrote: > Recently, > > we noticed that firstboot now has a checkbox to give admin privileges to > the first user. It does so by adding the user to the wheel group, which > unfortunately, doesn't do much [1] for PolicyKit, which was using a > differe

Re: Changes to polkit-desktop-policy

2011-03-17 Thread Matthew Miller
On Thu, Mar 17, 2011 at 03:30:23PM -0400, Bill Nottingham wrote: > > This probably should have been a "proper" F15 feature. > Not really disagreeing there. Yeah. It's something I've been agitating for since way before there _was_ a features process [1][2], and some of the pieces are just kind of f

Re: Changes to polkit-desktop-policy

2011-03-17 Thread Colin Walters
On Thu, Mar 17, 2011 at 2:22 PM, Chris Adams wrote: > Once upon a time, Colin Walters said: >> The point is that that in the default flow now, you get both; and >> there is no plan to change this; correct? > > If you don't have a root password, how do you log in for single-user > mode, manual fsc

Re: Changes to polkit-desktop-policy

2011-03-17 Thread Bill Nottingham
Miloslav Trmač (m...@volny.cz) said: > > It would clearly match doing so for pkexec, but would then be bizarre > > because the Fedora installer still asks you to make up a root > > password. The whole thing is really a mess without any plan for where > > things are going. > > > > Is there any pl

Re: Changes to polkit-desktop-policy

2011-03-17 Thread Nathanael D. Noblet
On 03/17/2011 12:41 PM, Miloslav Trmač wrote: > Colin Walters píše v Čt 17. 03. 2011 v 13:45 -0400: >> On Thu, Mar 17, 2011 at 1:29 PM, Daniel J Walsh wrote: >>> >>> Are we turning on the wheel group in sudo? >> >> It would clearly match doing so for pkexec, but would then be bizarre >> because th

Re: Changes to polkit-desktop-policy

2011-03-17 Thread Colin Walters
On Thu, Mar 17, 2011 at 2:22 PM, Chris Adams wrote: > Once upon a time, Colin Walters said: >> The point is that that in the default flow now, you get both; and >> there is no plan to change this; correct? > > If you don't have a root password, how do you log in for single-user > mode, manual fsc

Re: Changes to polkit-desktop-policy

2011-03-17 Thread Miloslav Trmač
Colin Walters píše v Čt 17. 03. 2011 v 13:45 -0400: > On Thu, Mar 17, 2011 at 1:29 PM, Daniel J Walsh wrote: > > > > Are we turning on the wheel group in sudo? > > It would clearly match doing so for pkexec, but would then be bizarre > because the Fedora installer still asks you to make up a roo

Re: Changes to polkit-desktop-policy

2011-03-17 Thread Chris Adams
Once upon a time, Colin Walters said: > The point is that that in the default flow now, you get both; and > there is no plan to change this; correct? If you don't have a root password, how do you log in for single-user mode, manual fsck, etc.? AFAIK those only prompt for the root password, not a

Re: Changes to polkit-desktop-policy

2011-03-17 Thread Colin Walters
On Thu, Mar 17, 2011 at 1:57 PM, Bill Nottingham wrote: > > So, it looks like the second two bits weren't properly cloned/communicated. > Design of this appears to have been 'firstboot maintainer + people CC'd on > the bug.' Okay... > Changing the root password screen wasn't mentioned as part of

Re: Changes to polkit-desktop-policy

2011-03-17 Thread Bill Nottingham
Colin Walters (walt...@verbum.org) said: > On Thu, Mar 17, 2011 at 1:29 PM, Daniel J Walsh wrote: > > > > Are we turning on the wheel group in sudo? > > It would clearly match doing so for pkexec, but would then be bizarre > because the Fedora installer still asks you to make up a root > passwor

Re: Changes to polkit-desktop-policy

2011-03-17 Thread Colin Walters
On Thu, Mar 17, 2011 at 1:29 PM, Daniel J Walsh wrote: > > Are we turning on the wheel group in sudo? It would clearly match doing so for pkexec, but would then be bizarre because the Fedora installer still asks you to make up a root password. The whole thing is really a mess without any plan fo

Re: Changes to polkit-desktop-policy

2011-03-17 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 03/17/2011 12:21 PM, Matthias Clasen wrote: > Recently, > > we noticed that firstboot now has a checkbox to give admin privileges to > the first user. It does so by adding the user to the wheel group, which > unfortunately, doesn't do much [1] for

Changes to polkit-desktop-policy

2011-03-17 Thread Matthias Clasen
Recently, we noticed that firstboot now has a checkbox to give admin privileges to the first user. It does so by adding the user to the wheel group, which unfortunately, doesn't do much [1] for PolicyKit, which was using a different group to identify the Administrator role. To fix this disconnect