Re: [Pkg-utopia-maintainers] Bug#649385: policykit-1: pkexec can not open display for GUI programs

Hi there! On Mon, 21 Nov 2011 00:29:06 +0100, Luca Capello wrote: > On Sun, 20 Nov 2011 23:10:17 +0100, Josselin Mouette wrote: >> Le dimanche 20 novembre 2011 à 19:30 +0100, Luca Capello a écrit : >>> It is not about what I do or do not want, sudo != administrator, as >>> explained in /usr/share

Re: [Pkg-utopia-maintainers] Bug#649385: policykit-1: pkexec can not open display for GUI programs

On 21.11.2011 00:29, Luca Capello wrote: > Because if a user is in group 'sudo', even if there is no more sudo > package installed, PolicyKit will still grant all permissions to that > user. Which means that I do not consider using a group to grant > administrative privileges to user as abusing su

Re: [Pkg-utopia-maintainers] Bug#649385: policykit-1: pkexec can not open display for GUI programs

Hi there! On Sun, 20 Nov 2011 23:10:17 +0100, Josselin Mouette wrote: > Le dimanche 20 novembre 2011 à 19:30 +0100, Luca Capello a écrit : >> > polkit authorizations are either one-time or valid for the life time of >> > the session. >> >> Again, this is different than with gksudo (even for desk

Re: Bug#649385: policykit-1: pkexec can not open display for GUI programs

Le dimanche 20 novembre 2011 à 19:30 +0100, Luca Capello a écrit : > > polkit authorizations are either one-time or valid for the life time of > > the session. > > Again, this is different than with gksudo (even for desktop/menu files), > which is why I reported the three bugs considering what yo

Re: [Pkg-utopia-maintainers] Bug#649385: policykit-1: pkexec can not open display for GUI programs

On 20.11.2011 19:30, Luca Capello wrote: > Perfectly fine for me, but IMHO policykit is abusing sudo, given that > with /etc/polkit-1/localauthority.conf.d/51-debian-sudo.conf pkexec > grants any privilege to members in the sudo group *without* checking if > this group is actually allowed in /etc/s

Re: Bug#649385: policykit-1: pkexec can not open display for GUI programs

Hi there! I would have preferred to continue the discussions on the single bugs, so it was documented in the BTS once and for all. Cc:ing #649385, the first reported bug. On Sun, 20 Nov 2011 17:36:57 +0100, Michael Biebl wrote: > On 20.11.2011 15:44, Luca Capello wrote: > >> 1) on a up-to-date s

Re: Bug#649385: policykit-1: pkexec can not open display for GUI programs

On 20.11.2011 15:44, Luca Capello wrote: > 1) on a up-to-date sid, both from GNOME or SSH sessions and with the >user in the sudo group, pkexec always fails with "Cannot open >display:" (e.g. for gedit) or "Error: no display specified" (e.g. for >iceweasel). Both gksudo and gksu work

Bug#649385: policykit-1: pkexec can not open display for GUI programs

Package: policykit-1 Version: 0.102-1 Severity: important Usertags: pca-authentication Hi there! The discussion started at: On Thu, 03 Nov 2011 19:45:53 +0100, Michael Biebl wrote: > Am 03.11.2011 19:28, schrieb Luk Claes: >> On 11/03/20