Changes to polkit-desktop-policy

[Matthias Clasen]

Recently,

we noticed that firstboot now has a checkbox to give admin privileges to
the first user. It does so by adding the user to the wheel group, which
unfortunately, doesn't do much [1] for PolicyKit, which was using a
different group to identify the Administrator role.

To fix this disconnect, David, Bill and I decided that we should change
the PolicyKit policy that we ship to use the wheel group for this
purpose as well. At the same time, we are dropping the
not-really-implemented concept of 'Supervised' user. It can come back
when we have a working, integrated solution for parental controls.

So, very soon, in F15, we will have only administrators (who are in the
wheel group), and regular users (who are not). The desktop_admin_r and
desktop_user_r groups will no longer be created or used. The changes to
the PolicyKit desktop policy can be seen here: [2].

Just thought I should mention this here in case anybody else was doing
anything with the desktop_admin_r or desktop_user_r groups and related
PolicyKit permissions.

Matthias


[1] https://bugzilla.redhat.com/show_bug.cgi?id=688363
[2]
http://pkgs.fedoraproject.org/gitweb/?p=polkit.git;a=commitdiff;h=9fa422d5441f0d06e0b1d992cc3c270bc2c35c70