Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #191429 > unrolled thread

policykit rule example.

Back to article view | Back to linux.debian.user

Contents

  policykit rule example. kjonca@poczta.onet.pl (Kamil Jońca) - 2018-01-23 13:50 +0100
    Re: policykit rule example. Brian <ad44@cityscape.co.uk> - 2018-01-23 14:20 +0100
      Re: policykit rule example. kjonca@poczta.onet.pl (Kamil Jońca) - 2018-01-23 16:50 +0100
        Re: policykit rule example. Brian <ad44@cityscape.co.uk> - 2018-01-23 17:30 +0100
          Re: policykit rule example. kjonca@poczta.onet.pl (Kamil Jońca) - 2018-01-23 20:20 +0100

#191429 — policykit rule example.

I try to use policykit.
But (maybe I use wrong key words for googling) I cannot find any
non-trivial example for pkla files (onyl JS-like ones)
Can anybot help me with this?
Simple task:
want to user kjonca be able to start/stop openvpn without asking
password.

Any hints/examples?
KJ

-- 
http://stopstopnop.pl/stop_stopnop.pl_o_nas.html
God is the tangential point between zero and infinity.
		-- Alfred Jarry

[toc] | [next] | [standalone]

#191430

On Tue 23 Jan 2018 at 13:29:35 +0100, Kamil Jońca wrote:

> 
> I try to use policykit.
> But (maybe I use wrong key words for googling) I cannot find any
> non-trivial example for pkla files (onyl JS-like ones)
> Can anybot help me with this?
> Simple task:
> want to user kjonca be able to start/stop openvpn without asking
> password.
> 
> Any hints/examples?

https://lists.debian.org/search.html

Search debian-user with "pkla".

-- 
Brian.

[toc] | [prev] | [next] | [standalone]

#191435

Brian <ad44@cityscape.co.uk> writes:

> On Tue 23 Jan 2018 at 13:29:35 +0100, Kamil Jońca wrote:
>
>> 
[...]

>> 
>> Any hints/examples?
>
> https://lists.debian.org/search.html
>
> Search debian-user with "pkla".

Thread "Embarrassing security bug in systemd"
(https://lists.debian.org/debian-user/2017/12/msg00172.html) looks most
promising, but even there is no documentation but rather reference to
distribution config files.
So there is nothing more comprehensive?

I am even  does not know how to check if my rules work. :)
(when define sudo rules  for "do_something' I always can "sudo
do_something" to check)

what would be equivalent of "sudo systemctl start openvpn@xxx" in terms
of policykit command?
KJ


 
-- 
http://wolnelektury.pl/wesprzyj/teraz/
KRETYNIZM - ułomność predysponująca często do wampiryzmu
	(J.Collin de Plancy "Słownik wiedzy tajemnej")

[toc] | [prev] | [next] | [standalone]

#191437

On Tue 23 Jan 2018 at 16:28:57 +0100, Kamil Jońca wrote:

> Brian <ad44@cityscape.co.uk> writes:
> 
> > On Tue 23 Jan 2018 at 13:29:35 +0100, Kamil Jońca wrote:
> >
> >> 
> [...]
> 
> >> 
> >> Any hints/examples?
> >
> > https://lists.debian.org/search.html
> >
> > Search debian-user with "pkla".
> 
> Thread "Embarrassing security bug in systemd"
> (https://lists.debian.org/debian-user/2017/12/msg00172.html) looks most
> promising, but even there is no documentation but rather reference to
> distribution config files.
> So there is nothing more comprehensive?
> 
> I am even  does not know how to check if my rules work. :)
> (when define sudo rules  for "do_something' I always can "sudo
> do_something" to check)
> 
> what would be equivalent of "sudo systemctl start openvpn@xxx" in terms
> of policykit command?

Is

https://lists.debian.org/debian-user/2015/10/msg00641.html

more suitable for your task?

-- 
Brian.

[toc] | [prev] | [next] | [standalone]

#191440

Brian <ad44@cityscape.co.uk> writes:

> Is
>
> https://lists.debian.org/debian-user/2015/10/msg00641.html
>
> more suitable for your task?

It is possible, although:
1. openvpn has to be run as root (routing and network interfaces) I do
not know if I can define proper systemd unit.

2. I want to learn something about policykit.

KJ

-- 
http://wolnelektury.pl/wesprzyj/teraz/

[toc] | [prev] | [standalone]

Back to top | Article view | linux.debian.user

csiph-web