:: Re: [DNG] why is polkit needed?
Page principale
Supprimer ce message
Répondre à ce message
Auteur: Tito
Date:  
À: dng
Sujet: Re: [DNG] why is polkit needed?


On 2/14/20 11:30 AM, Didier Kryn wrote:
> Le 14/02/2020 à 08:24, Tito via Dng a écrit :
>> On 2/14/20 3:37 AM, Ozi Traveller via Dng wrote:
>>> Does this help? You've probably seen this already.....
>>>
>>> https://mike632t.wordpress.com/2019/11/17/gksu-is-dead-long-live-pkexec/
>>>
>>> https://www.freedesktop.org/software/polkit/docs/0.105/pkexec.1.html
>>>
>>> On Fri, Feb 14, 2020 at 12:28 PM Gastón via Dng <dng@??? <mailto:dng@lists.dyne.org>> wrote:
>>>
>>>     On Thu, Feb 13, 2020 at 03:16:58PM -0800, tom wrote:
>>>      > On Thu, 9 Jan 2020 16:50:15 +0000
>>>      > Mark Hindley <mark@??? <mailto:mark@hindley.org.uk>> wrote:
>>>      >
>>>      > > On Thu, Jan 09, 2020 at 05:44:17PM +0100, Alessandro Vesely via Dng
>>>      > > wrote:
>>>      > > > Hi,
>>>      > > >
>>>      > > > is there a recommended GUI package browser for Devuan?
>>>      > > >
>>>      > > > After migrating, synaptic isn't installed. If I try to install it,
>>>      > > > it says it needs policykit-1.  Since the latter seems to be akin to
>>>      > > > systemd, I reply 'n'.
>>>      > >
>>>      > > I really don't think that is true. There is no direct relationship
>>>      > > between policykit-1 and systemd. And our policykit works with either
>>>      > > elogind or consolekit, so you have options.
>>>      > >
>>>      > > If you want a integrated gui desktop that allows you to do privileged
>>>      > > things like install packages, you will need policykit-1 or something
>>>      > > similar.
>>>      > >
>>>      > > Alternatively, use apt or aptitude from the commandline.
>>>      > >
>>>      > > Mark
>>>      > > _______________________________________________
>>>      > > Dng mailing list
>>>      > > Dng@??? <mailto:Dng@lists.dyne.org>
>>>      > > https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
>>>      >
>>>      > Sorry, can you explain why exactly polkit is needed here? What is wrong
>>>      > with what everyone was doing before polkit which was gksu or gksudo?
>>>      >
>>>     gksu is no longer available from Beowulf. Now, apparently, you have to
>>>     use: pkexec
>>>
>>>     I'm in touch with the GNU/EterTics developer and he's having trouble
>>>     running d-i from Live Mode on a beta version with Beowulf he's testing.
>>>
>>>     He used to launch the d-i from Live mode using this command:
>>>     `su-tu-root-X-c /usr/sbin/debian-installer-launcher`, but su-tu-root is
>>>     no longer available.
>>>
>>>     When he wants to launch the d-i from Live mode using this command:
>>>     `pkexec /usr/sbin/debian-installer-launcher` , the installer does not
>>>     start in GUI mode.
>>>
>>>     Yesterday we tried several alternatives, like this one, but without
>>>     success:
>>>
>>>     We tried running it this way:
>>>     `pkexec env DISPLAY=$DISPLAY XAUTHORITY=$XAUTHORITY
>>>     /usr/sbin/debian-installer-launcher` , with this it tries to open a
>>>     window, but closes immediately.
>>>
>>>     We couldn't get pkexec to run the d-I in GUI mode from live-version.
>>>     Nor is there much documentation about its use available.
>>>
>>>     Has anyone been through this using pkexec?
>>>
>>>
>>>
>>
>> Hi,
>> you can try with sudo I tested it with synaptic and it seems to work:
>>
>> 1) add the live-mode user to /etc/sudoers with the nopasswd directive
>>    for the needed command e.g.:
>>    live-user ALL=(ALL) NOPASSWD: /usr/sbin/synaptic
>>
>> 2) run sudo synaptic from a commandline in the live session
>>    or add it to a panel launcher (works in xfce)
>>    or edit a .desktop file
>
>
>     Hi.
>
>     AFAIR sudo does not transmit the X session. I heard years ago of something called sudox. Dunno if it is available somewhere. I dislike pkexec - just because of polkit - and used to use gksu or gksudo to run synaptic. One can also fall back to 'ssh -X root@localhost synaptic' but you must configure your ssh server to allow X sessions on root when connection is on localhost.
>
>     Didier
>


Hi,
did you try?

Ciao,
Tito