Red Hat Bugzilla – Bug 493906
S-c-tools cleanup: port to PolicyKit
Last modified: 2016-08-10 10:54:10 EDT
Description of problem:
It's not a good approach to let system config tool runn
under superuser account - it's a security risk. Instead
each tools which needs users privileges should be divided
to two parts - one which serves as privileged backend
running on demand and user interface that can ask for
privileged action over message bus (and ask password if
needed). Once action is approved by PolicyKit, it can be
Every tool should be ported to use PolicyKit.
Steps to Reproduce
System config tool has to be run under superuser account.
System config tool is not runned under superuser account
and asks for privileged access.
Look at https://fedorahosted.org/python-slip/
Fedora 18 and Rawhide will soon get a version which uses pkexec instead of consolehelper. While this isn't the real deal, at least it'll help us get rid of usermode.
Closing, as per comment #1.