| View previous topic :: View next topic |
| Author |
Message |
HeXiLeD
l33t
Joined: 20 Aug 2005
Posts: 892
Location: online
|
 Posted: Fri May 01, 2009 6:51 pm Post subject: x11-libs/gksu dependencies/ cache issue [SOLVED] |
 |
|
Can anyone responsable for the following package:
| Code: | * x11-libs/gksu
Latest version available: 2.0.0
Size of files: 430 kB
Homepage: http://www.nongnu.org/gksu/
Description: A gtk+ frontend for libgksu
License: GPL-2 |
Explain why do we need to install app-admin/sudo which is a dependency of x11-libs/gksu ?
What exactly is the --->technical<--- reason for that to happen ?
Can't we just type the root password ? and obtain su ?
At least we should have a flag to allow the removal of that sudo junk which is always potential security issue.
(gentoo is all about choice... or was it ? )
| Code: | * A note on gksudo: It actually runs sudo to get it's work done
* However, by default, Gentoo's sudo wipes your environment.
* This means that gksudo will fail to run any X-based programs.
* You need to either add yourself to wheel and uncomment this line
* in your /etc/sudoers:
* Defaults:%wheel !env_reset
* Or remove the env_reset line entirely. This can cause security
* problems; if you don't trust your users, don't do this, use gksu
* instead. |
its not the first package that has app-admin/sudo as dependency. is this ubuntu now or are we too lazy to type the password?
oh and its not working properly here.
pcmanfm + gksu
| Code: | Granted permissions without asking for password
The 'pcmanfm --no-desktop '/home/user'' program was started with the privileges of
the root user without the need to ask for a password, due to your system's authentication mechanism setup.
It is possible that you are being allowed to run specific programs as user root without the need for a password,
or that the password is cached.
This is not a problem report; it's simply a notification to make sure you are aware of this.
|
/etc/sudoers
| Code: | # Defaults specification
# Runas alias specification
# User privilege specification
# root ALL=(ALL) ALL
# Uncomment to allow people in group wheel to run all commands
# %wheel ALL=(ALL) ALL
# Same thing without a password
# %wheel ALL=(ALL) NOPASSWD: ALL
# Samples
# %users ALL=/sbin/mount /cdrom,/sbin/umount /cdrom
# %users localhost=/sbin/shutdown -h now
|
And how does it cache the password?
Currently if i close all pcmanfm as a user and open it 10 minutes later i am root .
_________________
443640
My UNSOLVED TOPICS
How to ask questions
Configs & Hardware SPECIFICATIONS
Last edited by HeXiLeD on Fri Feb 24, 2012 9:20 pm; edited 1 time in total |
|
| Back to top |
|
 |
kevstar31
Guru
Joined: 22 Nov 2006
Posts: 449
Location: Ohio
|
|
| Back to top |
|
|
Hu
Watchman
Joined: 06 Mar 2007
Posts: 6828
|
| Posted: Sat May 02, 2009 3:29 am Post subject: Re: x11-libs/gksu dependencies [UNSOLVED/ONGOING] |
|
|
| HeXiLeD wrote: |
Explain why do we need to install app-admin/sudo which is a dependency of x11-libs/gksu ?
What exactly is the --->technical<--- reason for that to happen ?
Can't we just type the root password ? and obtain su ? |
According to the einfo displayed when the package completes, it has a dependency on app-admin/sudo because it is a wrapper around sudo. You can, of course, run /bin/su and type the root password to become root. You do not need to use gksu.
| HeXiLeD wrote: |
At least we should have a flag to allow the removal of that sudo junk which is always potential security issue.
(gentoo is all about choice... or was it ? ) |
Gentoo provides easy access to the choices designed in by the upstream maintainer. If the upstream maintainer designs a package without a choice, the Gentoo developers are not obligated to modify the package just to create a choice.
| HeXiLeD wrote: |
And how does it cache the password?
Currently if i close all pcmanfm asa user and open it 10 minutes later i am root . |
Since it uses sudo to do the real work, presumably gksu is not caching the password. Instead, you are experiencing the standard sudo password caching mechanism. |
|
| Back to top |
|
|
Wormo
Developer
Joined: 29 Nov 2004
Posts: 526
Location: SB County California
|
| Posted: Sat Oct 03, 2009 11:26 pm Post subject: |
|
|
| x11-misc/ktsuss might be what you were looking for: a graphical su (not sudo) |
|
| Back to top |
|
|
saboya
Tux's lil' helper
Joined: 28 Nov 2006
Posts: 148
Location: Brazil
|
| Posted: Sun Oct 04, 2009 12:05 am Post subject: |
|
|
http://www.nongnu.org/gksu/
| Quote: | | GKSu is a library that provides a Gtk+ frontend to su and sudo. It supports login shells and preserving environment when acting as a su frontend. It is useful to menu items or other graphical programs that need to ask a user's password to run another program as another user. |
How's that Gentoo's problem? Geez. |
|
| Back to top |
|
|
HeXiLeD
l33t
Joined: 20 Aug 2005
Posts: 892
Location: online
|
| Posted: Sun Oct 04, 2009 12:36 am Post subject: |
|
|
x11-misc/ktsuss seems to be a good option to have as a useflag dependency for x11-misc/pcmanfm-0.5
Currently under menu TOOL --> Open current folder as root will pull gksu or kdesu.
As for gksu we have the issue posted above and kdesu will be too much for non KDE users since it will pull more KDE dependencies.
Since pcmanfm is gtk, and ktsuss pulls no dependencies and it is a small package; it would be great to have it as another option for graphical su with pcmanfm 
examples:
Currently:
| Code: | | x11-misc/pcmanfm-0.5 USE="hal" |
Proposed:
| Code: | | x11-misc/pcmanfm-0.5 USE="hal -gksu -kdesu ktsuss" |
It would be great to have it done 
_________________
443640
My UNSOLVED TOPICS
How to ask questions
Configs & Hardware SPECIFICATIONS |
|
| Back to top |
|
|
HeXiLeD
l33t
Joined: 20 Aug 2005
Posts: 892
Location: online
|
| Posted: Fri Feb 24, 2012 9:18 pm Post subject: |
|
|
Gksu works well now with:
| Code: | [ebuild R ] x11-libs/gksu-2.0.2 USE="-doc -gnome" 0 kB
[ebuild R ] x11-misc/pcmanfm-0.9.10 USE="-debug" 553 kB |
However still pulls app-admin/sudo which can be unmerged later and still have the su working.
I will consider this Topic SOLVED and leave a suggestion to the ebuild maintainer to allow sudo dependency to be chosen by use flag since sudo isnt really needed and make cause well known security issues.
Example:
| Code: | | x11-libs/gksu-2.0.2 USE="-doc -gnome -sudo" |
_________________
443640
My UNSOLVED TOPICS
How to ask questions
Configs & Hardware SPECIFICATIONS |
|
| Back to top |
|
|
|
Portage & Programming
