Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #256839

Re: How: Require root password instead of user password for GUI programs

Show all headers | View raw

On Thu, 2023-04-06 at 11:04 -0400, Jeffrey Walton wrote:
> On Thu, Apr 6, 2023 at 8:36 AM B.M. <b-misc@gmx.ch> wrote:
> > 
> > I configured my system such that some users are in group sudo, but
> > they are
> > asked for the root password instead of just their user password by
> > creating a
> > file within /etc/sudoers.d/ with the line:
> > 
> >  Defaults rootpw
> > 
> > This is working just fine, but for graphical applications it
> > doesn't work: e.g.
> > to start synaptic I get a password prompt requiring my user
> > password, not the
> > root password.
> > 
> > How can I configure my system such that entering the root password
> > is also
> > required in these cases?
> > 
> > (Maybe there is something with polkit, but I couldn't figure out
> > myself...)
> 
> May be helpful:
> https://askubuntu.com/questions/1199006/how-to-let-polkit-request-root-password-instead-users-password
> 
> And possibly
> https://askubuntu.com/questions/1246661/defaults-rootpw-for-the-gui-password-prompt
> 
> Jeff

Thank you for your ideas.

In fact it seems that these solutions are a bit outdated - I found out
that the following is needed, as documented in the Arch Wiki.

PolicyKit got replaced by polkit (at least in current Debian Testing),
and the "old" solution with setting AdminIdentities doesn't work
anymore. Instead one has to add a file /etc/polkit-1/rules.d/50-
default.rules as follows:

polkit.addAdminRule(function(action, subject) {
    return ["unix-user:0"];
});

in order to require root credentials for admin tasks (if sudo is
installed).

I hope someone finds this useful.

Best,
Bernd

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

How: Require root password instead of user password for GUI programs "B.M." <b-misc@gmx.ch> - 2023-04-06 14:40 +0200
  Re: How: Require root password instead of user password for GUI programs Jeffrey Walton <noloader@gmail.com> - 2023-04-06 17:10 +0200
    Re: How: Require root password instead of user password for GUI  programs Joe <joe@jretrading.com> - 2023-04-06 17:30 +0200
    Re: How: Require root password instead of user password for GUI  programs "B.M." <b-misc@gmx.ch> - 2023-04-07 18:40 +0200
      Re: How: Require root password instead of user password for GUI  programs <tomas@tuxteam.de> - 2023-04-07 21:20 +0200
        Re: How: Require root password instead of user password for GUI  programs Brian <ad44@cityscape.co.uk> - 2023-04-08 00:40 +0200
          Re: How: Require root password instead of user password for GUI  programs <tomas@tuxteam.de> - 2023-04-08 07:40 +0200

csiph-web