Install package without admin rights?

[Martin Kho]

On Thursday 27 June 2013 16:29:22 Martin Kho wrote:
> On Thursday 27 June 2013 07:52:26 Rex Dieter wrote:
> > On 06/27/2013 07:49 AM, Rex Dieter wrote:
> > > On 06/27/2013 07:07 AM, Martin Kho wrote:
> > >> Hi,
> > >> 
> > >> In Fedora 19 RC2 I installed the rekonq browser using apper. Is it a
> > >> new
> > >> default that I can do this as a normal user (not being root or user
> > >> with
> > >> admin permissions)?
> > > 
> > > https://admin.fedoraproject.org/updates/FEDORA-2013-11181/PackageKit-0.8
> > > .9
> > > -5.fc19 claims that was fixed.
> > 
> > The policy is outlined here,
> > https://bugzilla.redhat.com/show_bug.cgi?id=975214
> > (from: https://fedorahosted.org/fesco/ticket/1115#comment:20 )
> > 
> > It would appear that local admin users should be able to do what you
> > describe.
> 
> Hi Rex,
> 
> Thanks for your answer. I see:
> "* With the update, an admin user can 'pkcon install' a package without
> authentication (though it may have been cached from the 'pkcon remove')."
> 
> So yes, it seems that an admin user can install everything without entering
> his/her password.
> 
> PackageKit-0.8.9-6.fc19.x86_64 (in the Live KDE
> 

Hi again,

I suppose, this rule is of interest:

/usr/share/polkit-1/rules.d/org.freedesktop.packagekit.rules

polkit.addRule(function(action, subject) {
    if (action.id == "org.freedesktop.packagekit.package-install" &&
        subject.active == true && subject.local == true &&
        subject.isInGroup("wheel")) {
            return polkit.Result.YES;
    }
});

Martin Kho


> Martin Kho
> 
> > -- rex
> > _______________________________________________
> > kde mailing list
> > kde at lists.fedoraproject.org
> > https://admin.fedoraproject.org/mailman/listinfo/kde
> > New to KDE4? - get help from http://userbase.kde.org
> 
> _______________________________________________
> kde mailing list
> kde at lists.fedoraproject.org
> https://admin.fedoraproject.org/mailman/listinfo/kde
> New to KDE4? - get help from http://userbase.kde.org