Re: Running GParted and Synaptic without entering password

2018-05-16 Thread Joe
On Tue, 15 May 2018 18:27:20 + Glenn English wrote: > When I've logged in as a mortal to my XFCE GUI, I can just type, in > the terminal emulator, 'sudo gparted' and the GUI comes up and works > like I expect it to. After I quit gparted, there's some stuff it's > written on the screen (I've n

Re: Running GParted and Synaptic without entering password

2018-05-16 Thread Richard Owlett
On 05/16/2018 12:36 AM, John Crawley wrote: On 2018-05-15 22:24, Richard Owlett wrote: On 05/15/2018 12:48 AM, John Crawley (johnraff) wrote: Policykit brings its own complications, but I think it should be possible to create a .pkla file in /var/lib/polkit-1/localauthority to allow a certai

Re: Running GParted and Synaptic without entering password

2018-05-15 Thread John Crawley
On 2018-05-15 22:24, Richard Owlett wrote: On 05/15/2018 12:48 AM, John Crawley (johnraff) wrote: Policykit brings its own complications, but I think it should be possible to create a .pkla file in /var/lib/polkit-1/localauthority to allow a certain user, or group member, to perform an action

Re: Running GParted and Synaptic without entering password

2018-05-15 Thread Glenn English
When I've logged in as a mortal to my XFCE GUI, I can just type, in the terminal emulator, 'sudo gparted' and the GUI comes up and works like I expect it to. After I quit gparted, there's some stuff it's written on the screen (I've never tried to figure out what it's about). I haven't tried that w

Re: Running GParted and Synaptic without entering password

2018-05-15 Thread David Wright
On Tue 15 May 2018 at 06:20:17 (-0500), Richard Owlett wrote: > On 05/14/2018 07:40 PM, David Wright wrote: > >On Mon 14 May 2018 at 08:01:05 (-0500), Richard Owlett wrote: > > > >>Only 1 of the four machines within arm's reach are physically > >>capable of connecting to the internet. Is there a wa

Re: Running GParted and Synaptic without entering password

2018-05-15 Thread Richard Owlett
On 05/15/2018 07:37 AM, Curt wrote: On 2018-05-15, Richard Owlett wrote: To block a group, I think you'd have to use a packet filter to drop their outgoing packets. Take a look at http://ipset.netfilter.org/iptables-extensions.man.html under the heading "owner". That gives just enough inform

Re: Running GParted and Synaptic without entering password

2018-05-15 Thread Richard Owlett
On 05/15/2018 12:48 AM, John Crawley (johnraff) wrote: On 2018-05-14 16:56, Joe wrote: On Sun, 13 May 2018 14:43:55 -0500 If your micro-installation contains them, gksu and gksudo are graphical equivalents of su and sudo. I start Synaptic from a menu entry, which uses gksudo. gksu is now depre

Re: Running GParted and Synaptic without entering password

2018-05-15 Thread Curt
On 2018-05-15, Richard Owlett wrote: >> To block a group, I think you'd have to use a packet filter to >> drop their outgoing packets. Take a look at >> http://ipset.netfilter.org/iptables-extensions.man.html >> under the heading "owner". > > That gives just enough information to tantalize ;[ > W

Re: Running GParted and Synaptic without entering password

2018-05-15 Thread Richard Owlett
On 05/14/2018 07:40 PM, David Wright wrote: On Mon 14 May 2018 at 08:01:05 (-0500), Richard Owlett wrote: Only 1 of the four machines within arm's reach are physically capable of connecting to the internet. Is there a way to block internet access for members of one group - similar to how "dialo

Re: Running GParted and Synaptic without entering password

2018-05-14 Thread John Crawley (johnraff)
On 2018-05-14 16:56, Joe wrote: On Sun, 13 May 2018 14:43:55 -0500 If your micro-installation contains them, gksu and gksudo are graphical equivalents of su and sudo. I start Synaptic from a menu entry, which uses gksudo. gksu is now deprecated as insecure, https://bugs.debian.org/cgi-bin/bugre

Re: Running GParted and Synaptic without entering password

2018-05-14 Thread David Wright
On Mon 14 May 2018 at 08:01:05 (-0500), Richard Owlett wrote: > Only 1 of the four machines within arm's reach are physically > capable of connecting to the internet. Is there a way to block > internet access for members of one group - similar to how "dialout" > might have been used when connectiv

Re: Running GParted and Synaptic without entering password

2018-05-14 Thread Richard Owlett
On 05/14/2018 02:13 AM, to...@tuxteam.de wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Sun, May 13, 2018 at 02:51:49PM -0500, Richard Owlett wrote: On 05/13/2018 09:26 AM, bw wrote: On Sun, 13 May 2018, Richard Owlett wrote: The result I wish to achieve is to click on the icon f

Re: Running GParted and Synaptic without entering password

2018-05-14 Thread Richard Owlett
On 05/14/2018 02:56 AM, Joe wrote: On Sun, 13 May 2018 14:43:55 -0500 Richard Owlett wrote: Is "sudo" and cousins an appropriate tool? I would have said so. In order to make changes to a computer, both GParted and Synaptic (and aptitude, apt-get etc.) *require* root privileges. There's n

Re: Running GParted and Synaptic without entering password

2018-05-14 Thread tomas
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Mon, May 14, 2018 at 08:56:47AM +0100, Joe wrote: > On Sun, 13 May 2018 14:43:55 -0500 > Richard Owlett wrote: > > > > > > Is "sudo" and cousins an appropriate tool? [...] > If your micro-installation contains them, gksu and gksudo are graphic

Re: Running GParted and Synaptic without entering password

2018-05-14 Thread Joe
On Sun, 13 May 2018 14:43:55 -0500 Richard Owlett wrote: > > Is "sudo" and cousins an appropriate tool? > > I would have said so. In order to make changes to a computer, both GParted and Synaptic (and aptitude, apt-get etc.) *require* root privileges. There's no way around that. The point abo

Re: Running GParted and Synaptic without entering password

2018-05-14 Thread tomas
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Sun, May 13, 2018 at 02:51:49PM -0500, Richard Owlett wrote: > On 05/13/2018 09:26 AM, bw wrote: > > > > > >On Sun, 13 May 2018, Richard Owlett wrote: > > > >> > >>The result I wish to achieve is to click on the icon for either GParted or > >>Synapt

Re: Running GParted and Synaptic without entering password

2018-05-13 Thread tomas
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Mon, May 14, 2018 at 05:52:55PM +1200, Richard Hector wrote: [...] > Running a browser as root? Same as above, but worse. Well, the cryptocurrency miner might have the chance to run faster then ;-) Cheers - -- t -BEGIN PGP SIGNATURE- Ver

Re: Running GParted and Synaptic without entering password

2018-05-13 Thread Richard Hector
On 14/05/18 07:44, Richard Owlett wrote: > On 05/13/2018 09:09 AM, to...@tuxteam.de wrote: >> -BEGIN PGP SIGNED MESSAGE- >> Hash: SHA1 >> >> On Sun, May 13, 2018 at 08:18:26AM -0500, Richard Owlett wrote: >>> The underlying problem is not understanding what I read concerning >>> sudo &/or /

Re: Running GParted and Synaptic without entering password

2018-05-13 Thread David Wright
On Sun 13 May 2018 at 14:44:14 (-0500), Richard Owlett wrote: > On 05/13/2018 09:09 AM, to...@tuxteam.de wrote: > >-BEGIN PGP SIGNED MESSAGE- > >Hash: SHA1 > > > >On Sun, May 13, 2018 at 08:18:26AM -0500, Richard Owlett wrote: > >>The underlying problem is not understanding what I read conc

Re: Running GParted and Synaptic without entering password

2018-05-13 Thread Brian
On Sun 13 May 2018 at 08:18:26 -0500, Richard Owlett wrote: > The underlying problem is not understanding what I read concerning sudo &/or > /etc/sudoers (*INCLUDING* man pages). > > Only *ONE* individual has physical access to my _personal_ machine. Not an unusual view. Generally advanced by pe

Re: Running GParted and Synaptic without entering password

2018-05-13 Thread Richard Owlett
On 05/13/2018 09:26 AM, bw wrote: On Sun, 13 May 2018, Richard Owlett wrote: The result I wish to achieve is to click on the icon for either GParted or Synaptic *WITHOUT* being asked for a password (either root's or user's). I've found vague hints that adding a line to my local /etc/sudoers

Re: Running GParted and Synaptic without entering password

2018-05-13 Thread Richard Owlett
On 05/13/2018 09:09 AM, to...@tuxteam.de wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Sun, May 13, 2018 at 08:18:26AM -0500, Richard Owlett wrote: The underlying problem is not understanding what I read concerning sudo &/or /etc/sudoers (*INCLUDING* man pages). Only *ONE* individual

Re: Running GParted and Synaptic without entering password

2018-05-13 Thread Richard Owlett
On 05/13/2018 09:12 AM, tv.deb...@googlemail.com wrote: On 13/05/2018 18:48, Richard Owlett wrote: The underlying problem is not understanding what I read concerning sudo &/or /etc/sudoers (*INCLUDING* man pages). Only *ONE* individual has physical access to my _personal_ machine. Therefore, a

Re: Running GParted and Synaptic without entering password

2018-05-13 Thread bw
On Sun, 13 May 2018, Richard Owlett wrote: > > The result I wish to achieve is to click on the icon for either GParted or > Synaptic *WITHOUT* being asked for a password (either root's or user's). > > I've found vague hints that adding a line to my local /etc/sudoers file > such as > richar

Re: Running GParted and Synaptic without entering password

2018-05-13 Thread tv.deb...@googlemail.com
On 13/05/2018 18:48, Richard Owlett wrote: The underlying problem is not understanding what I read concerning sudo &/or /etc/sudoers (*INCLUDING* man pages). Only *ONE* individual has physical access to my _personal_ machine. Therefore, any distinction between 'richard' and 'root' is inherently

Re: Running GParted and Synaptic without entering password

2018-05-13 Thread tomas
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Sun, May 13, 2018 at 08:18:26AM -0500, Richard Owlett wrote: > The underlying problem is not understanding what I read concerning > sudo &/or /etc/sudoers (*INCLUDING* man pages). > > Only *ONE* individual has physical access to my _personal_ machi

Running GParted and Synaptic without entering password

2018-05-13 Thread Richard Owlett
The underlying problem is not understanding what I read concerning sudo &/or /etc/sudoers (*INCLUDING* man pages). Only *ONE* individual has physical access to my _personal_ machine. Therefore, any distinction between 'richard' and 'root' is inherently artificial. The result I wish to achieve