Page 2 of 2 FirstFirst 12
Results 11 to 17 of 17

Thread: PolicyKit, for the Love of God

  1. #11
    Join Date
    Oct 2011
    Location
    Wales (Calon Lan...)
    Posts
    4

    Default Re: PolicyKit, for the Love of God

    otherwise it may get over looked over and over in their mad rush
    to meet the next release date


    Interesting observation. I did the grind on polkit in OS11.3. The /etc/polkit-default-privs.local (.standard and .restrictive files) seemed to have been draft versions for 11.3 AND in 11.4 they are frankly a little messy (Almost thrown together - "That'll do!").

    On the deprecation of HAL - I understood that upstream development of OS11.4 had led to the elimination of HAL from the dependencies - but it is possible that they decided to leave the changes until OS12.1 (GIMP is still possibly dependent on HAL).

    What I cannot fathom is the change of paths for pkla files between 11.3 and 11.4. Just not logical for such fundamental permission management files...

    Will be interested to see what cleaning up has been done in 12.1.

    Mike

  2. #12
    Join Date
    Jun 2008
    Location
    Earth - Denmark
    Posts
    10,730

    Default Re: PolicyKit, for the Love of God

    On 11/01/2011 05:56 PM, LleMikeByw wrote:
    > Will be interested to see what cleaning up has been done in 12.1.


    you can catch a release candidate 1 now and have a look:
    http://software.opensuse.org/developer/

    who knows, if you put in the bug soon it might even get fixed (if it is
    not already)...but, time is running quickly!

    --
    DD
    openSUSE®, the "German Automobiles" of operating systems

  3. #13
    Join Date
    Feb 2009
    Location
    Spain
    Posts
    25,547

    Default Re: PolicyKit, for the Love of God

    On 2011-11-01 17:56, LleMikeByw wrote:
    > is possible that they decided to leave the changes until OS12.1 (GIMP is
    > still possibly dependent on HAL).


    And kde3. Remember that it is still provided.

    --
    Cheers / Saludos,

    Carlos E. R.
    (from 11.4 x86_64 "Celadon" at Telcontar)

  4. #14
    Join Date
    Oct 2011
    Location
    Wales (Calon Lan...)
    Posts
    4

    Default Re: PolicyKit, for the Love of God

    I can understand why some people would hold on to KDE3 - but I took the plunge on KDE4 and the Plasma Dashboard some time ago. KDE4 is powerful but I expect a normal user would have real problems with creating an ideal desktop for themselves.

    I do not intend to go down the Gnome route ever (too restrictive). With KDE, my 70yr-old mother is using 128pixel icons on her KDE4 desktop (I don't think this is easily possible on gnome).

    But I've digressed from polkit - so I'll stop there.

    Mike

  5. #15
    Join Date
    Feb 2009
    Location
    Spain
    Posts
    25,547

    Default Re: PolicyKit, for the Love of God

    On 2011-11-01 21:36, LleMikeByw wrote:
    >
    > I can understand why some people would hold on to KDE3 - but I took the
    > plunge on KDE4 and the Plasma Dashboard some time ago. KDE4 is powerful
    > but I expect a normal user would have real problems with creating an
    > ideal desktop for themselves.


    I don't intend to go the route of the kde3 vs kde4 argument. I'm only
    mentioning the fact that kde3 is still provided (via community effort) and
    that, if I'm not mistaken, it uses hal. It is also necesary for things like
    some virtualization engines (vmware, I think). There are many components
    that still need HAL.

    --
    Cheers / Saludos,

    Carlos E. R.
    (from 11.4 x86_64 "Celadon" at Telcontar)

  6. #16
    Join Date
    Oct 2011
    Location
    Wales (Calon Lan...)
    Posts
    4

    Default Re: PolicyKit, for the Love of God

    Carlos,

    I understood entirely your earlier comment and appreciate the need to support legacy options - hence the presence of HAL in 11.4.
    We continued to keep a team on Windows 2000 well into the XP era simply because one application (from some 5/6) had not been updated to function with XP... but that was in the dark, dark days - and I don't want to go back there
    As for virtualisation - I've been a fan of VirtualBox in recent times but since the takeover (the other one) I've been considering QEMU instead (or Xen - not so nice). I'm just waiting for that day when VB becomes the subject of a patent discussion... potentially... I expect...
    Mike

  7. #17

    Default Re: PolicyKit, for the Love of God

    Mike,

    Quote Originally Posted by LleMikeByw View Post
    In case anybody else happens upon this page basically you have to do this:
    0) Not that if you change security setting from EASY to SECURE you will change the standard polkit setting to RESTRICTIVE(hence USB doesn't work for standard users...)
    1) Policies are controlled by polkit-default-privs.local (It over-rides .standard and .restrictive) in /etc. I copy .standard to .local and edit that file.
    2) To get the new policies accepted you have to issue the following command as root:
    /sbin/set_polkit_default_privs
    3) This changes the various settings for All users:Inactive_User:Active_User (The Active_User is the user logged in)
    4) In OpenSuSE 11.4 you can check each of these settings by looking at pkla files in /var/lib/polkit-1/localauthority/10-vendor.d (Which are the actual settings tested when an action is performed).
    5) It's possible to get a list of available actions using: pkaction
    Thank you for a helpful reply, especially items 1-4.

    My latest polkit/PolicyKit woes were satisfactorily dealt with in another post, with the kind assistance of deano_ferrari, but due to the nature of some of the machines I look after, polkit/PolicyKit issues are bound to creep up from time to time and your post will be a useful reference and my first port of call (and hopefully anyone else's who find themselves in the miserable situation of having to deal with polkit/PolicyKit).

Page 2 of 2 FirstFirst 12

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •