Bug 493906

Summary:	S-c-tools cleanup: port to PolicyKit
Product:	[Fedora] Fedora	Reporter:	Roman Rakus <rrakus>
Component:	system-config-date	Assignee:	Nils Philippsen <nphilipp>
Status:	CLOSED CURRENTRELEASE	QA Contact:	Fedora Extras Quality Assurance <extras-qa>
Severity:	medium	Docs Contact:
Priority:	low
Version:	rawhide	CC:	jreznik, nphilipp, rnovacek, tsmetana
Target Milestone:	---	Keywords:	FutureFeature
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Enhancement
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2016-08-10 14:54:10 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	493597

Description Roman Rakus 2009-04-03 10:12:22 UTC

Description of problem:
It's not a good approach to let system config tool runn
under superuser account - it's a security risk. Instead
each tools which needs users privileges should be divided
to two parts - one which serves as privileged backend
running on demand and user interface that can ask for
privileged action over message bus (and ask password if 
needed). Once action is approved by PolicyKit, it can be
processed.

Every tool should be ported to use PolicyKit.

How reproducible:
Steps to Reproduce

Actual results:
System config tool has to be run under superuser account.

Expected results
System config tool is not runned under superuser account
and asks for privileged access. 

Additional info
Look at https://fedorahosted.org/python-slip/

Comment 1 Nils Philippsen 2012-10-22 12:37:05 UTC

Fedora 18 and Rawhide will soon get a version which uses pkexec instead of consolehelper. While this isn't the real deal, at least it'll help us get rid of usermode.

Comment 3 Nils Philippsen 2016-08-10 14:54:10 UTC

Closing, as per comment #1.