https://bugs.kde.org/show_bug.cgi?id=259678

--- Comment #28 from Alex Abakumov <abakumov.alexa...@gmail.com> ---
(In reply to Andrius Štikonas from comment #27)
> (In reply to Alex Abakumov from comment #26)
> > (In reply to Andrius Štikonas from comment #25)
> > > (In reply to Alex Abakumov from comment #24)
> > > > (In reply to Andrius Štikonas from comment #23)
> > > > > (In reply to abakumov.alexandr from comment #22)
> > > > > > (In reply to Andrius Štikonas from comment #20)
> > > > > > > The GUI of KDE Partition Manager can now run as unprivileged user.
> > > > > > > 
> > > > > > > So far code is still in kauth branches of kpmcore and 
> > > > > > > partitionmanager but
> > > > > > > it's getting to the state where testing and reviews would be 
> > > > > > > useful.
> > > > > > > Especially, security review of the helper would be appreciated as 
> > > > > > > it is used
> > > > > > > quite differently from normal KAuth helper.
> > > > > > 
> > > > > > Could you elaborate how to run without the kdesu request on app 
> > > > > > launch,
> > > > > > please?
> > > > > 
> > > > > You just run it as "partitionmanager". You'll need version 4.0 or 
> > > > > later.
> > > > 
> > > > According to its About window, I have a version of 20.12.2. But it still
> > > > requires kdesu on startup.
> > > 
> > > That's not kdesu. That's polkit. partitionmanager now runs as unprivileged
> > > user and polkit is used to start a small non-GUI daemon running as root.
> > 
> > Oh, I think I've got it. sudo password is still required on startup not for
> > the GUI process (partitionmanager), but for a daemon.
> 
> Indeed. Well, we are doing a privileged operation. It's not exactly what is
> asked in the original report but it's better than before when the whole
> application was running as root (which caused various issues with dbus,
> wayland, etc...)

Great! Most likely, the current approach is the best that could be.
It was just confusing to still see the sudo password request on startup :)
Thank you so much for the clarification!

-- 
You are receiving this mail because:
You are watching all bug changes.

Reply via email to