Git commit bfc16ba53a9c20a9f4a61ba46cec15fce117555e by Alexander Reinholdt. Committed on 31/07/2017 at 18:27. Pushed by areinholdt into branch '2.0'.
Add a remark regarding denied privilege escalation. (cherry picked from commit ccaecebf117f7067230d08197eee5823a4efa7e6) M +28 -2 doc/index.docbook https://commits.kde.org/smb4k/bfc16ba53a9c20a9f4a61ba46cec15fce117555e diff --git a/doc/index.docbook b/doc/index.docbook index 89cb85b..8259c4d 100644 --- a/doc/index.docbook +++ b/doc/index.docbook @@ -27,8 +27,8 @@ <holder>Alexander Reinholdt</holder> </copyright> <legalnotice>&underFDL;</legalnotice> - <date>2017-02-04</date> - <releaseinfo>&smb4k; 2.0.0</releaseinfo> + <date>2017-07-25</date> + <releaseinfo>&smb4k; 2.0.2</releaseinfo><!--FIXME change releaseinfo number--> <abstract> <para>&smb4k; is an advanced network neighborhood browser and Samba share mounting utility.</para> </abstract> @@ -1443,6 +1443,32 @@ client ipc max protocol = NT1 <para>Unfortunately, this fix for &smb4k; breaks the possibility to connect to the network neighborhood with &dolphin; and maybe also other programs.</para> </sect2> + +<!-- + Using Smb4K : Special Remarks : Remarks Regarding polkit-1 +--> + + <sect2 id="special_remarks_polkit-1"> + <title>Remarks Regarding Denied Privilege Escalation</title> + + <para>In case the mount and unmount actions fail with an <guilabel>AuthorizationDeniedError</guilabel>, your polkit-1 setup might need to be adjusted: Add a file, ⪚ named <filename>10-mounthelper.rules</filename>, to the <filename class="directory">$PREFIX/etc/polkit-1/rules.d/</filename> directory with the following content:</para> + +<programlisting>polkit.addRule(function(action, subject) { + if (action.id == "org.kde.smb4k.mounthelper.mount" && + subject.isInGroup("wheel")) { + return polkit.Result.YES; + } +}); + +polkit.addRule(function(action, subject) { + if (action.id == "org.kde.smb4k.mounthelper.unmount" && + subject.isInGroup("wheel")) { + return polkit.Result.YES; + } +});</programlisting> + + <para>This allows all users in the Unix group <emphasis>wheel</emphasis> to execute the mount and unmount action. You may adjust the group of authorized users to any group you need (⪚ <emphasis>sudo</emphasis> or <emphasis>operator</emphasis>).</para> + </sect2> <!-- Using Smb4K : Special Remarks : Remarks for FreeBSD Users