Re: s-c-p: stupid app or PolicyKit annoyance?
John Austin wrote: > cat /etc/PolicyKit/PolicyKit.conf > > > > > Hmmm, does this also bypass the authentication failure with the unpatched PolicyKit? If so, I guess that (minus your "|ja" hack ;-) ) is the better workaround to suggest to users: no patch needed, and no password prompts for root (just like in the old consolehelper world). That said, the code should still be fixed, I don't see any valid reason to blacklist root in the authentication agent. Kevin Kofler -- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
Re: s-c-p: stupid app or PolicyKit annoyance?
On Thu, 2009-06-18 at 09:05 +0100, Tim Waugh wrote: > On Wed, 2009-06-17 at 18:24 -0400, Tom Horsley wrote: > > I run system-config-printer as root, and it either hangs > > forever or tells me I'm not authorized when I want to do > > something like change printer default options. > > This is due to PolicyKit: > https://bugzilla.redhat.com/show_bug.cgi?id=447266 > > > I run system-config-printer as normal user and it asks > > me to give the root password every few seconds (for > > example, try deleting a printer, then clicking > > on New to reinstall it from scratch). > > Most operations go through PolicyKit; however, clicking on New requires > fetching the list of available devices, an operation that previous > versions of CUPS had allowed without authentication. There is no > PolicyKit action to fetch available devices provided by cups-pk-helper, > so this operation falls back to the IPP method and prompts you for a > password. > > Here's the open bug against cups-pk-helper that tracks that issue: > https://bugzilla.redhat.com/show_bug.cgi?id=506513 > > > Or does this have nothing to do with PolicyKit > > and system-config-printer is merely the most annoying > > app ever written when it comes to asking for > > root auth? > > Try removing cups-pk-helper. ;-) This will cause system-config-printer > to use IPP authentication for everything. > > Tim. > */ > > -- > fedora-list mailing list > fedora-list@redhat.com > To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list > Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines After F11 PolicyKit problems, this made me feel better ! cat /etc/PolicyKit/PolicyKit.conf John PS I only had a problem with my second install of F11 - the first was fine I thought I had carried out exactly the same procedure - obviously not ! -- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
Re: s-c-p: stupid app or PolicyKit annoyance?
On Wed, 2009-06-17 at 18:24 -0400, Tom Horsley wrote: > I run system-config-printer as root, and it either hangs > forever or tells me I'm not authorized when I want to do > something like change printer default options. This is due to PolicyKit: https://bugzilla.redhat.com/show_bug.cgi?id=447266 > I run system-config-printer as normal user and it asks > me to give the root password every few seconds (for > example, try deleting a printer, then clicking > on New to reinstall it from scratch). Most operations go through PolicyKit; however, clicking on New requires fetching the list of available devices, an operation that previous versions of CUPS had allowed without authentication. There is no PolicyKit action to fetch available devices provided by cups-pk-helper, so this operation falls back to the IPP method and prompts you for a password. Here's the open bug against cups-pk-helper that tracks that issue: https://bugzilla.redhat.com/show_bug.cgi?id=506513 > Or does this have nothing to do with PolicyKit > and system-config-printer is merely the most annoying > app ever written when it comes to asking for > root auth? Try removing cups-pk-helper. ;-) This will cause system-config-printer to use IPP authentication for everything. Tim. */ signature.asc Description: This is a digitally signed message part -- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
Re: Other annoyances [was Re: s-c-p: stupid app or PolicyKit annoyance?]
On Wed, Jun 17, 2009 at 3:20 PM, Tom Horsley wrote: > On Wed, 17 Jun 2009 15:05:40 -0800 > Kam Leo wrote: > >> F11 is full of new annoyances. Have you checked the firewall settings >> since you installed F11? > > Among the things in my checklist for new installs is completely > disabling the firewalls to start with (I am behind another firewall > with no open ports, so not a security problem), then after I have > everything mostly normal, copying the hand crafted firewall rules > from my previous install, so I never actually see the default rules :-). > >> 1. If you change SELinux to permissive mode > > I find disabled mode works much better :-). > >> 2. Pulseaudio no longer works in the F11 client under Vmware. > > Pulse screws up so many different ways, that "yum erase pulseaudio" > is still one of my first post-install tweaks, along with disabling > NetworkManager and enabling network. Unfortunately for me pulseaudio has too many dependencies. Removing it would take out 800+ packages. I guess I'll have to do a new custom install, de-select pulseaudio, and see what anaconda can do. -- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
Other annoyances [was Re: s-c-p: stupid app or PolicyKit annoyance?]
On Wed, 17 Jun 2009 15:05:40 -0800 Kam Leo wrote: > F11 is full of new annoyances. Have you checked the firewall settings > since you installed F11? Among the things in my checklist for new installs is completely disabling the firewalls to start with (I am behind another firewall with no open ports, so not a security problem), then after I have everything mostly normal, copying the hand crafted firewall rules from my previous install, so I never actually see the default rules :-). > 1. If you change SELinux to permissive mode I find disabled mode works much better :-). > 2. Pulseaudio no longer works in the F11 client under Vmware. Pulse screws up so many different ways, that "yum erase pulseaudio" is still one of my first post-install tweaks, along with disabling NetworkManager and enabling network. -- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
Re: s-c-p: stupid app or PolicyKit annoyance?
On Wed, Jun 17, 2009 at 2:24 PM, Tom Horsley wrote: > I run system-config-printer as root, and it either hangs > forever or tells me I'm not authorized when I want to do > something like change printer default options. > > I run system-config-printer as normal user and it asks > me to give the root password every few seconds (for > example, try deleting a printer, then clicking > on New to reinstall it from scratch). > > Do I have to not only be root but also tell PolicyKit > that root is allowed root access? Is there a > global way to cram that down PolicyKit's throat? > > Or does this have nothing to do with PolicyKit > and system-config-printer is merely the most annoying > app ever written when it comes to asking for > root auth? > > Or perhaps there are another dozen gnome background > clutter daemons I have to run for apps to remember > I know the root password? F11 is full of new annoyances. Have you checked the firewall settings since you installed F11? Among my peeves: 1. If you change SELinux to permissive mode to troubleshoot a problem you're constantly inundated with AVC violations notices. (Someone is really trying to drive Fedora users over to Ubuntu or OpenSUSE.) 2. Pulseaudio no longer works in the F11 client under Vmware. Removal of system-config-soundcard without a equivalent tool replacement adds salt to the wound. -- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
s-c-p: stupid app or PolicyKit annoyance?
I run system-config-printer as root, and it either hangs forever or tells me I'm not authorized when I want to do something like change printer default options. I run system-config-printer as normal user and it asks me to give the root password every few seconds (for example, try deleting a printer, then clicking on New to reinstall it from scratch). Do I have to not only be root but also tell PolicyKit that root is allowed root access? Is there a global way to cram that down PolicyKit's throat? Or does this have nothing to do with PolicyKit and system-config-printer is merely the most annoying app ever written when it comes to asking for root auth? Or perhaps there are another dozen gnome background clutter daemons I have to run for apps to remember I know the root password? -- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
