kdesu dolphin as root not possible [SOLVED-again]

[fedeliallalinea]

The patch not work, emerge show this output. It was the same that dolphin:

It seems not a patch for kate-18.04.3, because now code is

Code: Select all

...
#ifndef Q_OS_WIN
#include <unistd.h>
#endif
#include <iostream>


int main(int argc, char **argv)
{
#ifndef Q_OS_WIN
    /**
     * Check whether we are running as root
     **/
    if (getuid() == 0) {
        std::cout << "Executing Kate as root is not possible. To edit files as root use:" << std::endl;
        std::cout << "SUDO_EDITOR=kate sudoedit <file>" << std::endl;
        return 0;
    }
#endif
...

[proteusx]

@natrix
Please post your complete build log.

@fedeliallalinea
The patches I posted will fail unless the portage patches have been applied first.

[PrSo]

Sorry for interrupting, and thank you proteusx for those patches.

On my system I had to make some modification of posted patches since offsets in dolphin's and kate's "main.cpp" files does not match.

Here it goes:

dolphin without modification of "root enable" warning:

Code: Select all

--- a/src/main.cpp	2018-08-06 07:12:38.040074724 +0200
+++ b/src/main.cpp	2018-08-06 07:25:21.936760319 +0200
@@ -42,19 +42,6 @@
 
 extern "C" Q_DECL_EXPORT int kdemain(int argc, char **argv)
 {
-#ifndef Q_OS_WIN
-    // Prohibit using sudo or kdesu (but allow using the root user directly)
-    if (getuid() == 0) {
-        if (!qEnvironmentVariableIsEmpty("SUDO_USER")) {
-            std::cout << "Executing Dolphin with sudo is not possible due to unfixable security vulnerabilities." << std::endl;
-            return EXIT_FAILURE;
-        } else if (!qEnvironmentVariableIsEmpty("KDESU_USER")) {
-            std::cout << "Executing Dolphin with kdesu is not possible due to unfixable security vulnerabilities." << std::endl;
-            return EXIT_FAILURE;
-        }
-    }
-#endif
-
     QApplication app(argc, argv);
     app.setAttribute(Qt::AA_UseHighDpiPixmaps, true);
     app.setWindowIcon(QIcon::fromTheme(QStringLiteral("system-file-manager"), app.windowIcon()));

and kate:

Code: Select all

--- a/kate/main.cpp	2018-08-06 08:14:55.563340125 +0200
+++ b/kate/main.cpp	2018-08-06 08:20:27.573348320 +0200
@@ -60,18 +60,6 @@
 
 int main(int argc, char **argv)
 {
-#ifndef Q_OS_WIN
-    // Prohibit using sudo or kdesu (but allow using the root user directly)
-    if (getuid() == 0) {
-        if (!qEnvironmentVariableIsEmpty("SUDO_USER")) {
-            std::cout << "Executing Kate with sudo is not possible due to unfixable security vulnerabilities." << std::endl;
-            return EXIT_FAILURE;
-        } else if (!qEnvironmentVariableIsEmpty("KDESU_USER")) {
-            std::cout << "Executing Kate with kdesu is not possible due to unfixable security vulnerabilities." << std::endl;
-            return EXIT_FAILURE;
-        }
-    }
-#endif
     /**
      * init resources from our static lib
      */

I have paced them accordingly in "/etc/portage/patches/kde-apps/dolphin" and "/etc/portage/patches/kde-apps/kate".

Both compile just fine, and executing dolphin and kate through kdesu works.

I hope this helps, and thank you once again proteusx.

[wrc1944]

FWIW, the /etc/portage/patches/kde-apps/kate/kate-18.04-root.patch works fine here.
Applies OK for me:

Code: Select all

>>> Emerging (1 of 1) kde-apps/kate-18.04.3::gentoo
 * kate-18.04.3.tar.xz BLAKE2B SHA512 size ;-) ...                                                                                                             [ ok ]
>>> Unpacking source...
>>> Unpacking kate-18.04.3.tar.xz to /var/tmp/portage/kde-apps/kate-18.04.3/work
>>> Source unpacked in /var/tmp/portage/kde-apps/kate-18.04.3/work
>>> Preparing source in /var/tmp/portage/kde-apps/kate-18.04.3/work/kate-18.04.3 ...
 * Applying kate-18.04.3-root-user.patch ...                                                                                                                   [ ok ]
 * Applying kate-18.04-root.patch ...
patch unexpectedly ends in middle of line                                                                                                                      [ ok ]
 * User patches applied

The line "patch unexpectedly ends in middle of line" was also in the dolphin patch, but seems to make no difference, as both still work perfectly. Dolphin & kate open as root, and run normally.

[natrix]

PrSo: the patch to Kate work fine!

proteusx and PrSo:
A very useful contribution.
Thank you!!

[jhon987]

What about a patch for kwrie-18.18?

[proteusx]

kwrite-18-root.patch

Code: Select all

--- a/kwrite/main.cpp
+++ b/kwrite/main.cpp
@@ -42,25 +42,8 @@
 
 #include "../urlinfo.h"
 
-#ifndef Q_OS_WIN
-#include <unistd.h>
-#endif
-#include <iostream>
-
 extern "C" Q_DECL_EXPORT int main(int argc, char **argv)
 {
-#ifndef Q_OS_WIN
-    // Prohibit using sudo or kdesu (but allow using the root user directly)
-    if (getuid() == 0) {
-        if (!qEnvironmentVariableIsEmpty("SUDO_USER")) {
-            std::cout << "Executing Kate with sudo is not possible due to unfixable security vulnerabilities." << std::endl;
-            return EXIT_FAILURE;
-        } else if (!qEnvironmentVariableIsEmpty("KDESU_USER")) {
-            std::cout << "Executing Kate with kdesu is not possible due to unfixable security vulnerabilities." << std::endl;
-            return EXIT_FAILURE;
-        }
-    }
-#endif
     /**
      * Create application first
      * Enforce application name even if the executable is renamed

[jhon987]

kwrite-18-root.patch

Code: Select all

--- a/kwrite/main.cpp
+++ b/kwrite/main.cpp
@@ -42,25 +42,8 @@
 
 #include "../urlinfo.h"
 
-#ifndef Q_OS_WIN
-#include <unistd.h>
-#endif
-#include <iostream>
-
 extern "C" Q_DECL_EXPORT int main(int argc, char **argv)
 {
-#ifndef Q_OS_WIN
-    // Prohibit using sudo or kdesu (but allow using the root user directly)
-    if (getuid() == 0) {
-        if (!qEnvironmentVariableIsEmpty("SUDO_USER")) {
-            std::cout << "Executing Kate with sudo is not possible due to unfixable security vulnerabilities." << std::endl;
-            return EXIT_FAILURE;
-        } else if (!qEnvironmentVariableIsEmpty("KDESU_USER")) {
-            std::cout << "Executing Kate with kdesu is not possible due to unfixable security vulnerabilities." << std::endl;
-            return EXIT_FAILURE;
-        }
-    }
-#endif
     /**
      * Create application first
      * Enforce application name even if the executable is renamed

Thank you very much proteusx, it works just as expected!

[nordicruler]

Any working patch for dolphin-18.12.2?

[proteusx]

Code: Select all

kdesu dolphin &

still works for dolphin-18.12.2, if patched as per above.

[nordicruler]

Code: Select all

kdesu dolphin &

still works for dolphin-18.12.2, if patched as per above.

I already tried a few times and its not working.

Code: Select all

>>> Unpacking source...
>>> Unpacking dolphin-18.12.2.tar.xz to /var/tmp/gentoo/portage/kde-apps/dolphin-18.12.2/work
>>> Source unpacked in /var/tmp/gentoo/portage/kde-apps/dolphin-18.12.2/work
>>> Preparing source in /var/tmp/gentoo/portage/kde-apps/dolphin-18.12.2/work/dolphin-18.12.2 ...
 * Applying dolphin-18.12.2-root.patch ...
1 out of 1 hunk FAILED -- saving rejects to file src/main.cpp.rej
 [ !! ]
 * ERROR: kde-apps/dolphin-18.12.2::gentoo failed (prepare phase):
 *   patch -p1  failed with /etc/portage/patches/kde-apps/dolphin/dolphin-18.12.2-root.patch
 * 
 * Call stack:
 *               ebuild.sh, line  124:  Called src_prepare
 *             environment, line 2647:  Called kde5_src_prepare
 *             environment, line 2104:  Called cmake-utils_src_prepare
 *             environment, line 1206:  Called default_src_prepare
 *      phase-functions.sh, line  933:  Called __eapi6_src_prepare
 *             environment, line  325:  Called eapply_user
 *             environment, line 1421:  Called eapply '/etc/portage/patches/kde-apps/dolphin/dolphin-18.12.2-root.patch'
 *             environment, line 1391:  Called _eapply_patch '/etc/portage/patches/kde-apps/dolphin/dolphin-18.12.2-root.patch'
 *             environment, line 1329:  Called __helpers_die 'patch -p1  failed with /etc/portage/patches/kde-apps/dolphin/dolphin-18.12.2-root.patch'
 *   isolated-functions.sh, line  119:  Called die
 * The specific snippet of code:
 *              die "$@"

[proteusx]

Here is the dolphin patch I use.

Code: Select all

 
--- a/src/dolphinviewcontainer.cpp
+++ b/src/dolphinviewcontainer.cpp
@@ -108,14 +108,6 @@
     m_messageWidget->setCloseButtonVisible(true);
     m_messageWidget->hide();
 
-#ifndef Q_OS_WIN
-    if (getuid() == 0) {
-
-        // We must be logged in as the root user; show a big scary warning
-        showMessage(i18n("Running Dolphin as root can be dangerous. Please be careful."), Warning);
-    }
-#endif
-
     m_view = new DolphinView(url, this);
     connect(m_view, &DolphinView::urlChanged,
             m_urlNavigator, &KUrlNavigator::setLocationUrl);
--- a/src/main.cpp
+++ b/src/main.cpp
@@ -35,26 +35,8 @@
 #include <QApplication>
 #include <QCommandLineParser>
 
-#ifndef Q_OS_WIN
-#include <unistd.h>
-#endif
-#include <iostream>
-
 extern "C" Q_DECL_EXPORT int kdemain(int argc, char **argv)
 {
-#ifndef Q_OS_WIN
-    // Prohibit using sudo or kdesu (but allow using the root user directly)
-    if (getuid() == 0) {
-        if (!qEnvironmentVariableIsEmpty("SUDO_USER")) {
-            std::cout << "Executing Dolphin with sudo is not possible due to unfixable security vulnerabilities." << std::endl;
-            return EXIT_FAILURE;
-        } else if (!qEnvironmentVariableIsEmpty("KDESU_USER")) {
-            std::cout << "Executing Dolphin with kdesu is not possible due to unfixable security vulnerabilities." << std::endl;
-            return EXIT_FAILURE;
-        }
-    }
-#endif
-
     QApplication app(argc, argv);
     app.setAttribute(Qt::AA_UseHighDpiPixmaps, true);
     app.setWindowIcon(QIcon::fromTheme(QStringLiteral("system-file-manager"), app.windowIcon()));
 

I Verified it just now with dolphin-18.12.2 and it works.

[Hu]

The exit path is triggered by the presence of the environment variable informing it that you are using it insecurely. Rather than continue patching every version, if you insist on overriding the security check, do so by creating a wrapper shell script that runs as root, removes those environment variables, then executes Dolphin.

Code: Select all

$ a=1 /bin/sh -c '/usr/bin/env' | grep '^a='
a=1
$ a=1 /bin/sh -c 'export -n a; /usr/bin/env' | grep '^a='
$ 

[nordicruler]

Still not working with this patch

Here is the dolphin patch I use.

Code: Select all

 
--- a/src/dolphinviewcontainer.cpp
+++ b/src/dolphinviewcontainer.cpp
@@ -108,14 +108,6 @@
     m_messageWidget->setCloseButtonVisible(true);
     m_messageWidget->hide();
 
-#ifndef Q_OS_WIN
-    if (getuid() == 0) {
-
-        // We must be logged in as the root user; show a big scary warning
-        showMessage(i18n("Running Dolphin as root can be dangerous. Please be careful."), Warning);
-    }
-#endif
-
     m_view = new DolphinView(url, this);
     connect(m_view, &DolphinView::urlChanged,
             m_urlNavigator, &KUrlNavigator::setLocationUrl);
--- a/src/main.cpp
+++ b/src/main.cpp
@@ -35,26 +35,8 @@
 #include <QApplication>
 #include <QCommandLineParser>
 
-#ifndef Q_OS_WIN
-#include <unistd.h>
-#endif
-#include <iostream>
-
 extern "C" Q_DECL_EXPORT int kdemain(int argc, char **argv)
 {
-#ifndef Q_OS_WIN
-    // Prohibit using sudo or kdesu (but allow using the root user directly)
-    if (getuid() == 0) {
-        if (!qEnvironmentVariableIsEmpty("SUDO_USER")) {
-            std::cout << "Executing Dolphin with sudo is not possible due to unfixable security vulnerabilities." << std::endl;
-            return EXIT_FAILURE;
-        } else if (!qEnvironmentVariableIsEmpty("KDESU_USER")) {
-            std::cout << "Executing Dolphin with kdesu is not possible due to unfixable security vulnerabilities." << std::endl;
-            return EXIT_FAILURE;
-        }
-    }
-#endif
-
     QApplication app(argc, argv);
     app.setAttribute(Qt::AA_UseHighDpiPixmaps, true);
     app.setWindowIcon(QIcon::fromTheme(QStringLiteral("system-file-manager"), app.windowIcon()));
 

I Verified it just now with dolphin-18.12.2 and it works.

Code: Select all

>>> Unpacking source...
>>> Unpacking dolphin-18.12.2.tar.xz to /var/tmp/gentoo/portage/kde-apps/dolphin-18.12.2/work
>>> Source unpacked in /var/tmp/gentoo/portage/kde-apps/dolphin-18.12.2/work
>>> Preparing source in /var/tmp/gentoo/portage/kde-apps/dolphin-18.12.2/work/dolphin-18.12.2 ...
 * Applying dolphin-18.12.2-root.patch ...
1 out of 1 hunk FAILED -- saving rejects to file src/dolphinviewcontainer.cpp.rej
1 out of 1 hunk FAILED -- saving rejects to file src/main.cpp.rej
 [ !! ]
 * ERROR: kde-apps/dolphin-18.12.2::gentoo failed (prepare phase):
 *   patch -p1  failed with /etc/portage/patches/kde-apps/dolphin/dolphin-18.12.2-root.patch

[proteusx]

I cannot reproduce your problem.
Here the start of my build log.

Code: Select all

 * Package:    kde-apps/dolphin-18.12.2
 * Repository: gentoo
 * Maintainer: kde@gentoo.org
 * USE:        abi_x86_64 amd64 elibc_glibc handbook kernel_linux userland_GNU
 * FEATURES:   preserve-libs sandbox userpriv usersandbox
>>> Unpacking source...
>>> Unpacking dolphin-18.12.2.tar.xz to /tmp/portage/kde-apps/dolphin-18.12.2/work
>>> Source unpacked in /tmp/portage/kde-apps/dolphin-18.12.2/work
>>> Preparing source in /tmp/portage/kde-apps/dolphin-18.12.2/work/dolphin-18.12.2 ...
 * Applying dolphin-18.04-root.patch ...
 [ ok ]
 * User patches applied.
>>> Source prepared.
>>> Configuring source in /tmp/portage/kde-apps/dolphin-18.12.2/work/dolphin-18.12.2 ...
>>> Working in BUILD_DIR: "/tmp/portage/kde-apps/dolphin-18.12.2/work/dolphin-18.12.2_build"
cmake -C /tmp/portage/kde-apps/dolphin-18.12.2/work/dolphin-18.12.2_build/gentoo_common_config.cmake -G Ninja -DCMAKE_INSTALL_PREFIX=/usr -DBUILD_TESTING=OFF -DKDE_INSTALL_USE_QT_SYS_PATHS=ON -DKDE_INSTALL_DOCBUNDLEDIR=/usr/share/help -DCMAKE_DISABLE_FIND_PACKAGE_KF5Baloo=ON -DCMAKE_DISABLE_FIND_PACKAGE_KF5BalooWidgets=ON -DCMAKE_DISABLE_FIND_PACKAGE_KF5FileMetaData=ON -DCMAKE_BUILD_TYPE=Gentoo -DCMAKE_TOOLCHAIN_FILE=/tmp/portage/kde-apps/dolphin-18.12.2/work/dolphin-18.12.2_build/gentoo_toolchain.cmake  /tmp/portage/kde-apps/dolphin-18.12.2/work/dolphin-18.12.2
loading initial cache file /tmp/portage/kde-apps/dolphin-18.12.2/work/dolphin-18.12.2_build/gentoo_common_config.cmake
-- The C compiler identification is GNU 6.4.0
-- The CXX compiler identification is GNU 6.4.0
-- Check for working C compiler: /usr/bin/x86_64-pc-linux-gnu-gcc
-- Check for working C compiler: /usr/bin/x86_64-pc-linux-gnu-gcc -- works
-- Detecting C compiler ABI info
-- Detecting C compiler ABI info - done
-- ................. and so on........

Have you perhaps applied another patch before this one?

[nordicruler]

I cannot reproduce your problem.
Here the start of my build log.

Code: Select all

 * Package:    kde-apps/dolphin-18.12.2
 * Repository: gentoo
 * Maintainer: kde@gentoo.org
 * USE:        abi_x86_64 amd64 elibc_glibc handbook kernel_linux userland_GNU
 * FEATURES:   preserve-libs sandbox userpriv usersandbox
>>> Unpacking source...
>>> Unpacking dolphin-18.12.2.tar.xz to /tmp/portage/kde-apps/dolphin-18.12.2/work
>>> Source unpacked in /tmp/portage/kde-apps/dolphin-18.12.2/work
>>> Preparing source in /tmp/portage/kde-apps/dolphin-18.12.2/work/dolphin-18.12.2 ...
 * Applying dolphin-18.04-root.patch ...
 [ ok ]
 * User patches applied.
>>> Source prepared.
>>> Configuring source in /tmp/portage/kde-apps/dolphin-18.12.2/work/dolphin-18.12.2 ...
>>> Working in BUILD_DIR: "/tmp/portage/kde-apps/dolphin-18.12.2/work/dolphin-18.12.2_build"
cmake -C /tmp/portage/kde-apps/dolphin-18.12.2/work/dolphin-18.12.2_build/gentoo_common_config.cmake -G Ninja -DCMAKE_INSTALL_PREFIX=/usr -DBUILD_TESTING=OFF -DKDE_INSTALL_USE_QT_SYS_PATHS=ON -DKDE_INSTALL_DOCBUNDLEDIR=/usr/share/help -DCMAKE_DISABLE_FIND_PACKAGE_KF5Baloo=ON -DCMAKE_DISABLE_FIND_PACKAGE_KF5BalooWidgets=ON -DCMAKE_DISABLE_FIND_PACKAGE_KF5FileMetaData=ON -DCMAKE_BUILD_TYPE=Gentoo -DCMAKE_TOOLCHAIN_FILE=/tmp/portage/kde-apps/dolphin-18.12.2/work/dolphin-18.12.2_build/gentoo_toolchain.cmake  /tmp/portage/kde-apps/dolphin-18.12.2/work/dolphin-18.12.2
loading initial cache file /tmp/portage/kde-apps/dolphin-18.12.2/work/dolphin-18.12.2_build/gentoo_common_config.cmake
-- The C compiler identification is GNU 6.4.0
-- The CXX compiler identification is GNU 6.4.0
-- Check for working C compiler: /usr/bin/x86_64-pc-linux-gnu-gcc
-- Check for working C compiler: /usr/bin/x86_64-pc-linux-gnu-gcc -- works
-- Detecting C compiler ABI info
-- Detecting C compiler ABI info - done
-- ................. and so on........

Have you perhaps applied another patch before this one?

I recreated the patch and now its working. Both patch for kate and dolphin are working fine. Thanks.

[asturm]

kate/kwrite do not need any patching, nor be run with kdesu for editing root owned files. kauth is used to gain write permission when such files are saved.

[jhon987]

kwrite-19.04.3 has now hit Gentoo's stable branch,
the difference in the main.cpp file (from the patch perspecitve) is that instead of starting at line 42:

Code: Select all

--- a/kwrite/main.cpp
+++ b/kwrite/main.cpp
@@ -42,25 +42,8 @@
 
 #include "../urlinfo.h"
 
-#ifndef Q_OS_WIN
...

it now starts at line 43, and so I changed the patch to accommodate the file changes, like so:

Code: Select all

--- a/kwrite/main.cpp
+++ b/kwrite/main.cpp
@@ -43,25 +43,8 @@
 
 #include "../urlinfo.h"
 
-#ifndef Q_OS_WIN
...

yet the patch isn't accepted when I emerge the package.
did someone solved this issue / has patch for kwrite-19.04.3?

[asturm]

kate/kwrite can write root owned files just fine without kdesu. Please just give it a try.

[proteusx]

Updated kwrite patch:

Code: Select all

--- a/kwrite/main.cpp
+++ b/kwrite/main.cpp
@@ -50,18 +50,6 @@
 
 extern "C" Q_DECL_EXPORT int main(int argc, char **argv)
 {
-#ifndef Q_OS_WIN
-    // Prohibit using sudo or kdesu (but allow using the root user directly)
-    if (getuid() == 0) {
-        if (!qEnvironmentVariableIsEmpty("SUDO_USER")) {
-            std::cout << "Executing KWrite with sudo is not possible due to unfixable security vulnerabilities." << std::endl;
-            return EXIT_FAILURE;
-        } else if (!qEnvironmentVariableIsEmpty("KDESU_USER")) {
-            std::cout << "Executing KWrite with kdesu is not possible due to unfixable security vulnerabilities." << std::endl;
-            return EXIT_FAILURE;
-        }
-    }
-#endif
     /**
      * Create application first
      * Enforce application name even if the executable is renamed

@Asturm
Invoking unpatched kwrite from my konsole root profile (command sudo -i tmux) it does not work.

Code: Select all

# kwrite /etc/foo.conf
Executing KWrite with sudo is not possible due to unfixable security vulnerabilities.

[asturm]

You start it as user.

[jhon987]

Thanks @proteusx, once again you're saving the day!

@asturm, oh I have given it enough tries, thank you very much sir. But when I buy a PC and install software I choose on it, I prefer they would serve me instead of me serving them.
I understand there's a potential security (though not very likely) risk in using tools as root, however I don't think that the right way to mitigate it is by disallowing run as root altogether.

You know, that solution reminds me of the time I used to serve in the army, one time a soldier who crossed the road at night from base to reach the bus station at the other side, was ran over to death by a car. So what did the high command decided to do about it? in order to cover their asses they decided to issue a command that soldiers aren't allowed to cross that road at all. So now in order to get to the north of the country, a soldier must have traveled a few hours south first until he reaches a station where a bus north could be reached.

These kind of solutions, are in me view, absolutely ridicules. it's akin to throwing the baby with the bath water - just because you might have a malicious/sloppy program that could potentially take advantage of the root privileges therefore what did the developers decided to do? throw the risk (the bath water) away and at same time prevent the user from using tools (the baby) as root.

It's highly bothersome for me when some directories of mine are (understandably) possible to be accessed only with root credentials and doing it via GUI is much quicker than via command line, and so it's highly bothersome to do that via command line, as well as, when I use root dolphin to access a folder (that requires root privileges) I then need to open a non-root dolphin in order to open a file that's in there using kwrite, since the polkit prompt is only invoked via non-root user, which means I cannot do it via GUI but only via the command line - which is bothersome, annoying and totally goes against the purpose of having machines to make our lives easier.

I know it's not your fault (I believe its that KDE's martin grablin dude), but since you asked me to try...

[dalek]

jhon987,

I feel pretty much the same way. What I did, I started using a different file manager. I actually have a couple different ones installed that I can use or fall back on if needed. Dolphin isn't the only tool. I like Konqueror but think it died. That said, I think it also disabled being used as root as well.

If you want to avoid this sort of thing, just find a different tool for the job and use that. I use Krusader and it works fine, even has split views as a default. I also have PCmanFM and friends installed as well. Just find one those doesn't subscribe to the thought that making things hard for you is the only way to keep you safe. As I've posted before, maintaining a Gentoo install without root access is pretty much impossible. There is almost always some config file that has to be edited or something and generally, that requires root.

Hope that gives you some other options if you are interested. If not today, you may be later on.

[wrc1944]

I'm more concerned with dolphin. The only way I can get it working as root now after the great proteusx patches are broken once again is to place this alias in /root/.bashrc.

Code: Select all

alias kdol="export XDG_CURRENT_DESKTOP=kde && dolphin"

Then, in konsole, su to root, and type kdol, enter.

A root Dophin pops up again, with single-click opening of folders.
With just su'ing to root and typing dolphin opens it, but only with double-clicking functional, and apparently no way to set single-click.

With the original kdesu of yesteryear, it just worked with a simple kdesu dolphin, as a user. Then it was broken sometime in kde-4 IIRC, and we had to use the various patches to get root.

That was when I set up an alias "kdol="kdesu dolphin" in home/.bashrc, and just typing typing kdol in a user konsole popped up a dialog window where you entered the root password, and a full function root dolphin opened.

There, you could open as root any folder/file for editing, create/delete anything, and It was a perfect and efficient kde world. Now it just seems like a dream.

[Blind_Sniper]

I've just updated dolphin and kate without any problem and can run them as root without any aliases and exportes, just using "kdesu dolphin"
I have no idea what's wrong with patches (I do not use any patches), but building dolphin manually works still just fine:
1.

Code: Select all

ebuild /usr/portage/kde-apps/dolphin/dolphin-19.04.3.ebuild fetch

2.

Code: Select all

ebuild /usr/portage/kde-apps/dolphin/dolphin-19.04.3.ebuild unpack

3.remove from /var/tmp/portage/kde-apps/dolphin-19.04.3/work/src/main.cpp this snippet of code:

Code: Select all

#ifndef Q_OS_WIN
    // Prohibit using sudo or kdesu (but allow using the root user directly)
    if (getuid() == 0) {
        if (!qEnvironmentVariableIsEmpty("SUDO_USER")) {
            std::cout << "Executing Dolphin with sudo is not possible due to unfixable security vulnerabilities." << std::endl;
            return EXIT_FAILURE;
        } else if (!qEnvironmentVariableIsEmpty("KDESU_USER")) {
            std::cout << "Executing Dolphin with kdesu is not possible due to unfixable security vulnerabilities." << std::endl;
            return EXIT_FAILURE;
        }
    }
#endif

and save changes. (I use mcedit for it, it can be done with nano as well)
4.

Code: Select all

ebuild /usr/portage/kde-apps/dolphin/dolphin-19.04.3.ebuild compile

5.

Code: Select all

ebuild /usr/portage/kde-apps/dolphin/dolphin-19.04.3.ebuild install

6.

Code: Select all

ebuild /usr/portage/kde-apps/dolphin/dolphin-19.04.3.ebuild qmerge

I do it on every update without using any patches and it works