Install package without admin rights?

[Martin Kho]

Hi,

In Fedora 19 RC2 I installed the rekonq browser using apper. Is it a new 
default that I can do this as a normal user (not being root or user with 
admin permissions)?

Thanks,

Martin Kho

apper-0.8.1-0.3.20130511.fc19.x86_64
PackageKit-0.8.9-6.fc19.x86_64

[Rex Dieter]

On 06/27/2013 07:07 AM, Martin Kho wrote:
> Hi,
>
> In Fedora 19 RC2 I installed the rekonq browser using apper. Is it a new
> default that I can do this as a normal user (not being root or user with
> admin permissions)?

https://admin.fedoraproject.org/updates/FEDORA-2013-11181/PackageKit-0.8.9-5...

claims that was fixed.

rpm -q PackageKit
?

-- rex

[Rex Dieter]

On 06/27/2013 07:49 AM, Rex Dieter wrote:
> On 06/27/2013 07:07 AM, Martin Kho wrote:
> > Hi,
> >
> > In Fedora 19 RC2 I installed the rekonq browser using apper. Is it a new
> > default that I can do this as a normal user (not being root or user with
> > admin permissions)?
>
> https://admin.fedoraproject.org/updates/FEDORA-2013-11181/PackageKit-0.8.9-5...
> claims that was fixed.

The policy is outlined here,
https://bugzilla.redhat.com/show_bug.cgi?id=975214
(from: https://fedorahosted.org/fesco/ticket/1115#comment:20 )

It would appear that local admin users should be able to do what you 
describe.

-- rex

[Martin Kho]

On Thursday 27 June 2013 07:52:26 Rex Dieter wrote:
> On 06/27/2013 07:49 AM, Rex Dieter wrote:
> > On 06/27/2013 07:07 AM, Martin Kho wrote:
> > > Hi,
> > >
> > > In Fedora 19 RC2 I installed the rekonq browser using apper. Is it a new
> > > default that I can do this as a normal user (not being root or user with
> > > admin permissions)?
> >
> > https://admin.fedoraproject.org/updates/FEDORA-2013-11181/PackageKit-0.8.9
> > -5.fc19 claims that was fixed.
>
> The policy is outlined here,
> https://bugzilla.redhat.com/show_bug.cgi?id=975214
> (from: https://fedorahosted.org/fesco/ticket/1115#comment:20 )
>
> It would appear that local admin users should be able to do what you
> describe.

Hi Rex,

Thanks for your answer. I see:
"* With the update, an admin user can 'pkcon install' a package without 
authentication (though it may have been cached from the 'pkcon remove')."

So yes, it seems that an admin user can install everything without entering 
his/her password.

PackageKit-0.8.9-6.fc19.x86_64 (in the Live KDE

Martin Kho
> -- rex
> _______________________________________________
> kde mailing list
> [e-mail]
> https://admin.fedoraproject.org/mailman/listinfo/kde
> New to KDE4? - get help from http://userbase.kde.org

[Martin Kho]

On Thursday 27 June 2013 16:29:22 Martin Kho wrote:
> On Thursday 27 June 2013 07:52:26 Rex Dieter wrote:
> > On 06/27/2013 07:49 AM, Rex Dieter wrote:
> > > On 06/27/2013 07:07 AM, Martin Kho wrote:
> > > > Hi,
> > > >
> > > > In Fedora 19 RC2 I installed the rekonq browser using apper. Is it a
> > > > new
> > > > default that I can do this as a normal user (not being root or user
> > > > with
> > > > admin permissions)?
> > >
> > > https://admin.fedoraproject.org/updates/FEDORA-2013-11181/PackageKit-0.8
> > > .9
> > > -5.fc19 claims that was fixed.
> >
> > The policy is outlined here,
> > https://bugzilla.redhat.com/show_bug.cgi?id=975214
> > (from: https://fedorahosted.org/fesco/ticket/1115#comment:20 )
> >
> > It would appear that local admin users should be able to do what you
> > describe.
>
> Hi Rex,
>
> Thanks for your answer. I see:
> "* With the update, an admin user can 'pkcon install' a package without
> authentication (though it may have been cached from the 'pkcon remove')."
>
> So yes, it seems that an admin user can install everything without entering
> his/her password.
>
> PackageKit-0.8.9-6.fc19.x86_64 (in the Live KDE

Hi again,

I suppose, this rule is of interest:

/usr/share/polkit-1/rules.d/org.freedesktop.packagekit.rules

polkit.addRule(function(action, subject) {
    if (action.id == "org.freedesktop.packagekit.package-install" &&
        subject.active == true && subject.local == true &&
        subject.isInGroup("wheel")) {
            return polkit.Result.YES;
    }
});

Martin Kho
> Martin Kho
> > -- rex
> > _______________________________________________
> > kde mailing list
> > [e-mail]
> > https://admin.fedoraproject.org/mailman/listinfo/kde
> > New to KDE4? - get help from http://userbase.kde.org
>
> kde mailing list
> [e-mail]
> https://admin.fedoraproject.org/mailman/listinfo/kde
> New to KDE4? - get help from http://userbase.kde.org