[Bug 24280] Re: [Theme Manager] No installation option for system wide themes, difference is not communicated in the user interface
Since the user has root access anyway, allowing to use the user's theme is not a problem. There are certainly many other holes like this in GTK, and the only way to avoid them is to not run GTK applications as root, ever. For one, the application does apply the users theme settings, it just searches for the theme in the wrong place. If you want this kind of security the application should *not* use the user's settings. However, there is one more problem. If you su to an user other than root the ~/.themes might not be accessible. Anybody doing that must do it manually, though. So they should also know how to make their theme available. ** Summary changed: - [Theme Manager] No installation option for system wide themes, difference is not communicated in the user interface + applications run through gksu cannot use themes in ~/.themes -- applications run through gksu cannot use themes in ~/.themes https://bugs.launchpad.net/bugs/24280 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a subscriber of a duplicate bug. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 24280] Re: [Theme Manager] No installation option for system wide themes, difference is not communicated in the user interface
** Changed in: gksu (Ubuntu) Sourcepackagename: gnome-control-center = gksu -- [Theme Manager] No installation option for system wide themes, difference is not communicated in the user interface https://bugs.launchpad.net/bugs/24280 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a subscriber of a duplicate bug. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 24280] Re: [Theme Manager] No installation option for system wide themes, difference is not communicated in the user interface
But is this easily fixed, or is this more of an architectual problem? If its an architectual problem and the obvious solutions lead to security issues, the most obvious hack would be to enable a graphical way to install themes system-wide. There is a graphical tool called gnome-art. It seems to be unmaintained though. Perhaps some of the code there can merge with the appearance applet in the future. A simple show filter that lets us choose between 'installed', 'available' could do the trick. Another more ubuntu-way approach would be, to make the add button open up add/remove and add the 100 most popular themes to the ubuntu repositories automatically using some script. That last solution would make the most sense, because some of these themes depend on gtk-engines not installed by default. It would be the same sort of solution as has been implemented within firefox. With that scenarion, all we would need is a 'install more themes' button in the appearance window. Off course the themes should get some sort of .desktop files to make them available in add/remove -- [Theme Manager] No installation option for system wide themes, difference is not communicated in the user interface https://bugs.launchpad.net/bugs/24280 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a subscriber of a duplicate bug. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 24280] Re: [Theme Manager] No installation option for system wide themes, difference is not communicated in the user interface
ideally the user interfaces should not run as an another user. gksu could user the user theme if required though -- [Theme Manager] No installation option for system wide themes, difference is not communicated in the user interface https://bugs.launchpad.net/bugs/24280 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a subscriber of a duplicate bug. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 24280] Re: [Theme Manager] No installation option for system wide themes, difference is not communicated in the user interface
Are there any security issues with using the users theme in an program running as root? If not, it doesn't seem like it would be too hard to do. (Although I don't really know the specifics of how that works) Considering that to even get to that point the user has to have admin access, and that once the program is running any of the user's other applications could probably find a way to interact with the root application anyway, it doesn't seem so bad to me. -- [Theme Manager] No installation option for system wide themes, difference is not communicated in the user interface https://bugs.launchpad.net/bugs/24280 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a subscriber of a duplicate bug. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 24280] Re: [Theme Manager] No installation option for system wide themes, difference is not communicated in the user interface
running user interfaces when not required is usually not a good idea and theme installation is an user feature and should not impact on the system configuration, if an administrator wants to add a theme he knows how to do that and doesn't need this tools -- [Theme Manager] No installation option for system wide themes, difference is not communicated in the user interface https://bugs.launchpad.net/bugs/24280 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a subscriber of a duplicate bug. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 24280] Re: [Theme Manager] No installation option for system wide themes, difference is not communicated in the user interface
I'm not really sure if you're agreeing with me or not.. I agree that a user installing a theme shouldn't impact the system configuration, that's why I was saying that gksu should just allow the root application to use the users theme. (i.e. the one in ~/.themes) -- [Theme Manager] No installation option for system wide themes, difference is not communicated in the user interface https://bugs.launchpad.net/bugs/24280 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a subscriber of a duplicate bug. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 24280] Re: [Theme Manager] No installation option for system wide themes, difference is not communicated in the user interface
I think the updated description to this bug confuses the issue. The problem is *not* that users can only install themes locally, the problem is that when a user installed theme is used the administration applications fall back to the default GTK theme (because they cannot find the user installed theme, obviously). This is a problem because: 1- Un-themed GTK is unattractive to all but the most eclectic tastes. 2- It is not the expected behavior to people who don't understand how themes work. Admittedly, this problem can be avoided. After all, if you can run administrator apps then you probably have the permission necessary to install themes globally. However, doing so requires knowledge in areas where knowledge shouldn't really be required (you shouldn't have to understand how GTK and GNOME work to use a system for Postfix, LDAP and Apache administration without undue confusion). In my mind the easiest solution is to tell GTK to use the Human theme as a fallback if the requested user theme cannot be found. At least that way, the user will see a familiar theme in front of them. I don't think allowing root applications to scan user directories for themes is a wise idea and I suspect the patch would never make it past the relevant maintainers. -- [Theme Manager] No installation option for system wide themes, difference is not communicated in the user interface https://bugs.launchpad.net/bugs/24280 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a subscriber of a duplicate bug. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 24280] Re: [Theme Manager] No installation option for system wide themes, difference is not communicated in the user interface
I am surprised that after two years this bug has still not been fixed. Has anyone even started trying to fix it? Have the developers even discussed the problem? The bug is very visible, every user that installs a custom theme will see it when they use synaptic or any gksu app. -- [Theme Manager] No installation option for system wide themes, difference is not communicated in the user interface https://bugs.launchpad.net/bugs/24280 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug contact for gnome-control-center in ubuntu. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 24280] Re: [Theme Manager] No installation option for system wide themes, difference is not communicated in the user interface
Perhaps its all very difficult to explain for everyone. Last try: Tolan, sudo does NOT change the theme. GTK just can't find the theme because it isn't looking in the right directories. Because the theme is installed in the users' home directory, not in /usr/share/themes. GTK should just use the 'home' environment value (which is correct, as you point out) -- [Theme Manager] No installation option for system wide themes, difference is not communicated in the user interface https://bugs.launchpad.net/bugs/24280 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a subscriber of a duplicate bug. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 24280] Re: [Theme Manager] No installation option for system wide themes, difference is not communicated in the user interface
Perhaps you could try not assuming everyone is an idiot. I never said sudo changed the theme, my point was that *from the point of view of the user*, code run through sudo, such as GTK, should act as though it is being run by the session user, not the current GID/UID, for all things except permissions. The purpose of sudo is usually to gain the permissions of another user, not to 'be' that user. So yes GTK should not set the theme based on UID/GID. -- [Theme Manager] No installation option for system wide themes, difference is not communicated in the user interface https://bugs.launchpad.net/bugs/24280 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a subscriber of a duplicate bug. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 24280] Re: [Theme Manager] No installation option for system wide themes, difference is not communicated in the user interface
Themes should be applied per session or login user not per uid. The person sat in front of the keyboard can reasonably expect to see the theme they set whether they are using a normal application or an application run through a privilege escalation tool. Sudo should you to do things with the root user's privileges, it should not 'make' you the root user. For example the following: sudo ls ~ Lists my user's home directory, not that of root. -- [Theme Manager] No installation option for system wide themes, difference is not communicated in the user interface https://bugs.launchpad.net/bugs/24280 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a subscriber of a duplicate bug. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
