On 2020-07-01 11:33, Samuel Sieb wrote:
> Why do you say that?  Again, you demonstrated that it *does* work.  You just 
> want to be able to use ifup and ifdown as a user and that isn't going to 
> work, no matter what options you set. 

Right....

When it comes to Network Manager.....

If the connection has....

connection.autoconnect: yes
connection.permissions:  --

The connection will be activated at boot time and any user can up/down with 
nmcli.

[maria@f32k ~]$ nmcli connection down enp1s0 
Connection 'enp1s0' successfully deactivated (D-Bus active path: 
/org/freedesktop/NetworkManager/ActiveConnection/3)
[maria@f32k ~]$ nmcli connection up enp1s0
Connection successfully activated (D-Bus active path: 
/org/freedesktop/NetworkManager/ActiveConnection/6).

User maria is not in the wheel group.

But, if the connection has

connection.autoconnect: yes
connection.permissions: user:egreshko

Then we see this when maria tries things....

[egreshko@f32k ~]$ nmcli connection show enp1s0 | grep perm
connection.permissions:                 user:egreshko

[maria@f32k ~]$ nmcli connection show enp1s0 | grep perm
Error: enp1s0 - no such connection profile.

So, only egreshko has access to that profile.  User maria can't even list it.

Things can get a "bit" complicated/confusing if the connection is a Wifi 
connection if one picks a password
access which conflict with the connection settings.  For example, if the 
connection.permissions is blank
but the password has been saved for use by only egreshko then maria can down 
the connection but
maria won't be able to activate/up it.

I also don't use the ifup/down commands but I do seem to recall some folks 
having "issues" with that
when they also had network-scripts installed and /etc/alternatives link pointed 
to the one they weren't
expecting.



-- 
The key to getting good answers is to ask good questions.
_______________________________________________
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org

Reply via email to