Bug 490881 - [Test Day] palimpsest: limited function for root user
Summary: [Test Day] palimpsest: limited function for root user
Keywords:
Status: CLOSED WONTFIX
Alias: None
Product: Fedora
Classification: Fedora
Component: gnome-disk-utility
Version: rawhide
Hardware: All
OS: Linux
low
medium
Target Milestone: ---
Assignee: David Zeuthen
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
: 490873 (view as bug list)
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2009-03-18 12:37 UTC by Ondrej Hudlicky
Modified: 2009-04-07 17:06 UTC (History)
3 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2009-04-07 17:04:39 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)

Description Ondrej Hudlicky 2009-03-18 12:37:09 UTC
Description of problem:

Running palimpsest as root provides very limited functions - not possible to: delete, edit, mount, unmount volumes. 

Version-Release number of selected component (if applicable):
DeviceKit-disks-003-6.fc11
gnome-disk-utility-02-2.fc11
PolicyKit-0.9-6.fc11 - no changes in setup

Reproducible: 
always 

Steps to Reproduce:

1. su -
2. palimpsest & 
3. click on different disks/volumes in left menu
4. run as common X user: palimpsest  &
5. compare the active options provided by palimpsest

Actual results:
root usage has much less option then running as user

Expected results:
root has same (or) more functions available

Comment 1 Matthias Clasen 2009-03-19 02:38:26 UTC
Same comment as for nautilus: This is caused by su not propagating the session bus. But palimpsest is not meant to be used in this way anyway; it uses PolicyKit to ask for privileges if needed.

Comment 2 David Zeuthen 2009-04-07 17:04:39 UTC
Matthias is right, simply don't runt palimpsest (or for that matter any desktop programs) as uid 0. See e.g. http://www.gtk.org/setuid.html and many other places why running desktop apps as uid 0 is a horrible idea. 

Also note that with the move to the new PolicyKit version in F12 by default root will be all powerful PolicyKit-wise. In the mean time, you can manually grant the root user the needed authorizations.

Comment 3 David Zeuthen 2009-04-07 17:06:00 UTC
*** Bug 490873 has been marked as a duplicate of this bug. ***


Note You need to log in before you can comment on or make changes to this bug.