fedora 21 lets me install packages without root

Lubomir Rintel lkundrak at v3.sk
Mon Oct 20 13:25:33 UTC 2014


On Mon, 2014-10-20 at 06:21 -0700, James Patterson wrote:
> On Mon, Oct 20, 2014, at 06:02 AM, Michael Catanzaro wrote:
> > On Sun, 2014-10-19 at 23:34 -0700, James Patterson wrote:
> > > I am in the wheel group, and if I type:
> > > 
> > > nethogs
> > > 
> > > then I can install nethogs without any additional authorization. This is
> > > on a freshly booted machine where sudo has not been run.
> > > 
> > > Should this be marked as a blocker?
> > > https://bugzilla.redhat.com/show_bug.cgi?id=1153005
> > > 
> > 
> > This was approved by FESCo last year. As you noticed, you're in wheel,
> > which lets you do lots of privileged things without typing any password
> > (and many other things with your own password instead of the root
> > password). If you don't want this behavior, you can just remove yourself
> > from wheel.
> 
> I'd like consistent behavior please.
> 
> Typing yum install requires a password, so should be the behaviour for
> running a command that doesn't exist causing a package to be installed.

yum is a lower-level package managing tool/API.

If you want something that works with PolicyKit to authorize the signed
package installation for members of wheel group, use PackageKit:

pkcon install xteddy

Lubo



More information about the devel mailing list