Re: Proposed F19 Feature: Usermode Migration

2013-02-12 Thread Miloslav Trmač
Hello, On Mon, Feb 11, 2013 at 11:50 PM, Kevin Kofler wrote: > Jaroslav Reznik wrote: >> These days, most privileged system operations are already controlled by >> polkit, a well-established (I'll just briefly note how much polkit has changed since then...) >> For directly executed tools, polkit

Re: Proposed F19 Feature: Usermode Migration

2013-02-12 Thread Miloslav Trmač
On Mon, Feb 11, 2013 at 11:33 PM, Kevin Kofler wrote: > Matthew Miller wrote: >> Is it possible to configure utilities with the equivalent of UGROUPS=wheel >> without per-application javascript policy? Currently, we do this with >> /etc/security/console.apps/config-util. >> >> As I understand it,

Re: Proposed F19 Feature: Usermode Migration

2013-02-11 Thread Kevin Kofler
I wrote: > I don't see why this misfeature was accepted for F18. It is entirely > useless under this form. We need a feature to actually use PolicyKit the > way it was intended, phasing out usermode, consolehelper, kdesu and pkexec > all at once wherever it is possible. (Of course, if the feature t

Re: Proposed F19 Feature: Usermode Migration

2013-02-11 Thread Kevin Kofler
Jaroslav Reznik wrote: > = Features/UsermodeMigration = > https://fedoraproject.org/wiki/Features/UsermodeMigration > > Feature owner(s): Harald Hoyer , Kay Sievers > , Bill Nottingham > > Access control of privileged operations for ordinary users should be > handled exclusively by a centrally m

Re: Proposed F19 Feature: Usermode Migration

2013-02-11 Thread Kevin Kofler
Matthew Miller wrote: > Is it possible to configure utilities with the equivalent of UGROUPS=wheel > without per-application javascript policy? Currently, we do this with > /etc/security/console.apps/config-util. > > As I understand it, the javascript policy mechanism is not supposed to be > used

Re: Proposed F19 Feature: Usermode Migration

2013-02-11 Thread Matthew Miller
On Mon, Feb 11, 2013 at 01:27:07PM +, Jaroslav Reznik wrote: > Usermode/consolehelper should be phased out and be replaced entirely by > polkit. Is it possible to configure utilities with the equivalent of UGROUPS=wheel without per-application javascript policy? Currently, we do this with /e