On Tue, 15 May 2018 18:27:20 +
Glenn English wrote:
> When I've logged in as a mortal to my XFCE GUI, I can just type, in
> the terminal emulator, 'sudo gparted' and the GUI comes up and works
> like I expect it to. After I quit gparted, there's some stuff it's
> written on the screen (I've n
On 05/16/2018 12:36 AM, John Crawley wrote:
On 2018-05-15 22:24, Richard Owlett wrote:
On 05/15/2018 12:48 AM, John Crawley (johnraff) wrote:
Policykit brings its own complications, but I think it should be
possible to create a .pkla file in /var/lib/polkit-1/localauthority
to allow a certai
On 2018-05-15 22:24, Richard Owlett wrote:
On 05/15/2018 12:48 AM, John Crawley (johnraff) wrote:
Policykit brings its own complications, but I think it should be
possible to create a .pkla file in /var/lib/polkit-1/localauthority to
allow a certain user, or group member, to perform an action
When I've logged in as a mortal to my XFCE GUI, I can just type, in
the terminal emulator, 'sudo gparted' and the GUI comes up and works
like I expect it to. After I quit gparted, there's some stuff it's
written on the screen (I've never tried to figure out what it's
about).
I haven't tried that w
On Tue 15 May 2018 at 06:20:17 (-0500), Richard Owlett wrote:
> On 05/14/2018 07:40 PM, David Wright wrote:
> >On Mon 14 May 2018 at 08:01:05 (-0500), Richard Owlett wrote:
> >
> >>Only 1 of the four machines within arm's reach are physically
> >>capable of connecting to the internet. Is there a wa
On 05/15/2018 07:37 AM, Curt wrote:
On 2018-05-15, Richard Owlett wrote:
To block a group, I think you'd have to use a packet filter to
drop their outgoing packets. Take a look at
http://ipset.netfilter.org/iptables-extensions.man.html
under the heading "owner".
That gives just enough inform
On 05/15/2018 12:48 AM, John Crawley (johnraff) wrote:
On 2018-05-14 16:56, Joe wrote:
On Sun, 13 May 2018 14:43:55 -0500
If your micro-installation contains them, gksu and gksudo are graphical
equivalents of su and sudo. I start Synaptic from a menu entry, which
uses gksudo.
gksu is now depre
On 2018-05-15, Richard Owlett wrote:
>> To block a group, I think you'd have to use a packet filter to
>> drop their outgoing packets. Take a look at
>> http://ipset.netfilter.org/iptables-extensions.man.html
>> under the heading "owner".
>
> That gives just enough information to tantalize ;[
> W
On 05/14/2018 07:40 PM, David Wright wrote:
On Mon 14 May 2018 at 08:01:05 (-0500), Richard Owlett wrote:
Only 1 of the four machines within arm's reach are physically
capable of connecting to the internet. Is there a way to block
internet access for members of one group - similar to how "dialo
On 2018-05-14 16:56, Joe wrote:
On Sun, 13 May 2018 14:43:55 -0500
If your micro-installation contains them, gksu and gksudo are graphical
equivalents of su and sudo. I start Synaptic from a menu entry, which
uses gksudo.
gksu is now deprecated as insecure,
https://bugs.debian.org/cgi-bin/bugre
On Mon 14 May 2018 at 08:01:05 (-0500), Richard Owlett wrote:
> Only 1 of the four machines within arm's reach are physically
> capable of connecting to the internet. Is there a way to block
> internet access for members of one group - similar to how "dialout"
> might have been used when connectiv
On 05/14/2018 02:13 AM, to...@tuxteam.de wrote:
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On Sun, May 13, 2018 at 02:51:49PM -0500, Richard Owlett wrote:
On 05/13/2018 09:26 AM, bw wrote:
On Sun, 13 May 2018, Richard Owlett wrote:
The result I wish to achieve is to click on the icon f
On 05/14/2018 02:56 AM, Joe wrote:
On Sun, 13 May 2018 14:43:55 -0500
Richard Owlett wrote:
Is "sudo" and cousins an appropriate tool?
I would have said so. In order to make changes to a computer, both
GParted and Synaptic (and aptitude, apt-get etc.) *require* root
privileges. There's n
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On Mon, May 14, 2018 at 08:56:47AM +0100, Joe wrote:
> On Sun, 13 May 2018 14:43:55 -0500
> Richard Owlett wrote:
>
>
> >
> > Is "sudo" and cousins an appropriate tool?
[...]
> If your micro-installation contains them, gksu and gksudo are graphic
On Sun, 13 May 2018 14:43:55 -0500
Richard Owlett wrote:
>
> Is "sudo" and cousins an appropriate tool?
>
>
I would have said so. In order to make changes to a computer, both
GParted and Synaptic (and aptitude, apt-get etc.) *require* root
privileges. There's no way around that. The point abo
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On Sun, May 13, 2018 at 02:51:49PM -0500, Richard Owlett wrote:
> On 05/13/2018 09:26 AM, bw wrote:
> >
> >
> >On Sun, 13 May 2018, Richard Owlett wrote:
> >
> >>
> >>The result I wish to achieve is to click on the icon for either GParted or
> >>Synapt
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On Mon, May 14, 2018 at 05:52:55PM +1200, Richard Hector wrote:
[...]
> Running a browser as root? Same as above, but worse.
Well, the cryptocurrency miner might have the chance to run
faster then ;-)
Cheers
- -- t
-BEGIN PGP SIGNATURE-
Ver
On 14/05/18 07:44, Richard Owlett wrote:
> On 05/13/2018 09:09 AM, to...@tuxteam.de wrote:
>> -BEGIN PGP SIGNED MESSAGE-
>> Hash: SHA1
>>
>> On Sun, May 13, 2018 at 08:18:26AM -0500, Richard Owlett wrote:
>>> The underlying problem is not understanding what I read concerning
>>> sudo &/or /
On Sun 13 May 2018 at 14:44:14 (-0500), Richard Owlett wrote:
> On 05/13/2018 09:09 AM, to...@tuxteam.de wrote:
> >-BEGIN PGP SIGNED MESSAGE-
> >Hash: SHA1
> >
> >On Sun, May 13, 2018 at 08:18:26AM -0500, Richard Owlett wrote:
> >>The underlying problem is not understanding what I read conc
On Sun 13 May 2018 at 08:18:26 -0500, Richard Owlett wrote:
> The underlying problem is not understanding what I read concerning sudo &/or
> /etc/sudoers (*INCLUDING* man pages).
>
> Only *ONE* individual has physical access to my _personal_ machine.
Not an unusual view. Generally advanced by pe
On 05/13/2018 09:26 AM, bw wrote:
On Sun, 13 May 2018, Richard Owlett wrote:
The result I wish to achieve is to click on the icon for either GParted or
Synaptic *WITHOUT* being asked for a password (either root's or user's).
I've found vague hints that adding a line to my local /etc/sudoers
On 05/13/2018 09:09 AM, to...@tuxteam.de wrote:
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On Sun, May 13, 2018 at 08:18:26AM -0500, Richard Owlett wrote:
The underlying problem is not understanding what I read concerning
sudo &/or /etc/sudoers (*INCLUDING* man pages).
Only *ONE* individual
On 05/13/2018 09:12 AM, tv.deb...@googlemail.com wrote:
On 13/05/2018 18:48, Richard Owlett wrote:
The underlying problem is not understanding what I read concerning
sudo &/or /etc/sudoers (*INCLUDING* man pages).
Only *ONE* individual has physical access to my _personal_ machine.
Therefore, a
On Sun, 13 May 2018, Richard Owlett wrote:
>
> The result I wish to achieve is to click on the icon for either GParted or
> Synaptic *WITHOUT* being asked for a password (either root's or user's).
>
> I've found vague hints that adding a line to my local /etc/sudoers file
> such as
> richar
On 13/05/2018 18:48, Richard Owlett wrote:
The underlying problem is not understanding what I read concerning sudo
&/or /etc/sudoers (*INCLUDING* man pages).
Only *ONE* individual has physical access to my _personal_ machine.
Therefore, any distinction between 'richard' and 'root' is inherently
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On Sun, May 13, 2018 at 08:18:26AM -0500, Richard Owlett wrote:
> The underlying problem is not understanding what I read concerning
> sudo &/or /etc/sudoers (*INCLUDING* man pages).
>
> Only *ONE* individual has physical access to my _personal_ machi
The underlying problem is not understanding what I read concerning sudo
&/or /etc/sudoers (*INCLUDING* man pages).
Only *ONE* individual has physical access to my _personal_ machine.
Therefore, any distinction between 'richard' and 'root' is inherently
artificial.
The result I wish to achieve
27 matches
Mail list logo