Attachment 940600 Details for Bug 1145813 – update to polkit (pkexec) for authentication

[patch] update to polkit (pkexec) for authentication

0002-update-to-polkit-for-root-authentication.patch (text/plain), 3.29 KB, created by Gene Czarcinski on 2014-09-23 20:18:23 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Gene Czarcinski

Created: 2014-09-23 20:18:23 UTC

Size: 3.29 KB

patch

obsolete

>From 18e9c80a396bbdcef943a2a8d027fd4167d37a29 Mon Sep 17 00:00:00 2001
>From: Gene Czarcinski <gczarcinski@ec.rr.com>
>Date: Tue, 23 Sep 2014 11:52:45 -0400
>Subject: [PATCH 2/4] update to polkit for root authentication
>Content-Type: text/plain; charset="utf-8"
>Content-Transfer-Encoding: 8bit
>
>Replace the use of consolehelper which prompted for root's password
>to using polkit's pkexec so that a wheel user is prompted for
>their own password.
>---
> data/liveusb-creator.desktop                        |  2 +-
> liveusb-creator.console                             |  5 -----
> liveusb-creator.pam                                 |  5 -----
> liveusb-creator_polkit                              |  6 ++++++
> org.fedoraproject.pkexec.run-liveusb-creator.policy | 19 +++++++++++++++++++
> 5 files changed, 26 insertions(+), 11 deletions(-)
> delete mode 100644 liveusb-creator.console
> delete mode 100644 liveusb-creator.pam
> create mode 100755 liveusb-creator_polkit
> create mode 100644 org.fedoraproject.pkexec.run-liveusb-creator.policy
>
>diff --git a/data/liveusb-creator.desktop b/data/liveusb-creator.desktop
>index feb51de..8be04c0 100644
>--- a/data/liveusb-creator.desktop
>+++ b/data/liveusb-creator.desktop
>@@ -4,7 +4,7 @@ Encoding=UTF-8
> Name=Fedora LiveUSB Creator
> Comment=Write Fedora images to a USB device
> Icon=fedorausb.png
>-Exec=liveusb-creator
>+Exec=liveusb-creator_polkit
> Terminal=false
> Categories=System;
> StartupNotify=true
>diff --git a/liveusb-creator.console b/liveusb-creator.console
>deleted file mode 100644
>index 52b46e0..0000000
>--- a/liveusb-creator.console
>+++ /dev/null
>@@ -1,5 +0,0 @@
>-USER=root
>-PROGRAM=/usr/sbin/liveusb-creator
>-SESSION=true
>-FALLBACK=true
>-
>diff --git a/liveusb-creator.pam b/liveusb-creator.pam
>deleted file mode 100644
>index df41b4c..0000000
>--- a/liveusb-creator.pam
>+++ /dev/null
>@@ -1,5 +0,0 @@
>-#%PAM-1.0
>-auth            include         config-util
>-account         include         config-util
>-session         include         config-util
>-
>diff --git a/liveusb-creator_polkit b/liveusb-creator_polkit
>new file mode 100755
>index 0000000..6be9f73
>--- /dev/null
>+++ b/liveusb-creator_polkit
>@@ -0,0 +1,6 @@
>+#!/bin/bash
>+if [ $(which pkexec) ]; then
>+	pkexec --disable-internal-agent "/usr/sbin/liveusb-creator" "$@"
>+else
>+	/usr/sbin/liveusb-creator "$@"
>+fi
>diff --git a/org.fedoraproject.pkexec.run-liveusb-creator.policy b/org.fedoraproject.pkexec.run-liveusb-creator.policy
>new file mode 100644
>index 0000000..4796a86
>--- /dev/null
>+++ b/org.fedoraproject.pkexec.run-liveusb-creator.policy
>@@ -0,0 +1,19 @@
>+<?xml version="1.0" encoding="UTF-8"?>
>+<!DOCTYPE policyconfig PUBLIC
>+ "-//freedesktop//DTD PolicyKit Policy Configuration 1.0//EN"
>+ "http://www.freedesktop.org/standards/PolicyKit/1/policyconfig.dtd">
>+<policyconfig>
>+
>+  <action id="org.fedoraproject.pkexec.run-liveusb-creator">
>+    <description>Run the liveusb-creator program</description>
>+    <message>Authentication is required to run the liveusb-creator</message>
>+    <defaults>
>+      <allow_any>auth_admin</allow_any>
>+      <allow_inactive>auth_admin</allow_inactive>
>+      <allow_active>auth_admin</allow_active>
>+    </defaults>
>+    <annotate key="org.freedesktop.policykit.exec.path">/usr/sbin/liveusb-creator</annotate>
>+    <annotate key="org.freedesktop.policykit.exec.allow_gui">true</annotate>
>+  </action>
>+
>+</policyconfig>
>-- 
>1.9.3
>

Actions: View | Diff

Attachments on bug 1145813: 940599 | 940600 | 940601 | 940602