On Wed, 2008-08-20 at 12:21 +0100, Anne Wilson wrote:
> On Wednesday 20 August 2008 12:05:34 Gilboa Davara wrote:
> > Hello all,
> >
> > Can anyone please point me to a good sudo GUI front-end? (Password
> > dialog box).
> > While I'm using KDE 4.1, I don't mind using a gtk box.
> >
> > I tried using kdesu with or w/o the kdesurc - but it doesn't seem to
> > work.
> >
> '/bin/su -' does work, though in some cases you will need to add $u (or is
> it %U?). I like a root konsole profile, so I used it there, with a different
> display colour for clarity :-)

I might have mis-represented my request:
I'm using sudo to give users selective rights over certain services.
However, sudo requires a user password, once in while (good thing) - and
I rather use a GUI front-end for that.

- Gilboa


--
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list

On Wed, Aug 20, 2008 at 03:22:20PM +0300, Gilboa Davara wrote:
> I might have mis-represented my request:
> I'm using sudo to give users selective rights over certain services.
> However, sudo requires a user password, once in while (good thing) - and
> I rather use a GUI front-end for that.

Which services? You may be able to use consolehelper (or even PolicyKit, for
newer things).

--
Matthew Miller mattdm@mattdm.org <http://mattdm.org/>
Boston University Linux ------> <http://linux.bu.edu/>

--
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list

On Wed, 2008-08-20 at 09:45 -0400, Matthew Miller wrote:
> On Wed, Aug 20, 2008 at 03:22:20PM +0300, Gilboa Davara wrote:
> > I might have mis-represented my request:
> > I'm using sudo to give users selective rights over certain services.
> > However, sudo requires a user password, once in while (good thing) - and
> > I rather use a GUI front-end for that.
>
> Which services? You may be able to use consolehelper (or even PolicyKit, for
> newer things).
>

E.g. boinc-client (among others)

- Gilboa

--
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Anne Wilson wrote:
> On Wednesday 20 August 2008 12:05:34 Gilboa Davara wrote:
>> Hello all,
>>
>> Can anyone please point me to a good sudo GUI front-end? (Password
>> dialog box).
>> While I'm using KDE 4.1, I don't mind using a gtk box.
>>
>> I tried using kdesu with or w/o the kdesurc - but it doesn't seem to
>> work.
>>
> '/bin/su -' does work, though in some cases you will need to add $u (or is
> it %U?). I like a root konsole profile, so I used it there, with a different
> display colour for clarity :-)


I have my user prompt in bright white and my root prompt in bright red.

- --


David
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (MingW32)

iEYEARECAAYFAkispTAACgkQAO0wNI1X4QE7EwCg8PYya4x4C5 uSqQvqEOKBgskz
Wd8AoO4U1h3Bx1D2A1pzpYFqHqM0290M
=EKIn
-----END PGP SIGNATURE-----

--
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list

This touches on one of my gripes about Fedora (and RHE) -- the GUI
authentication stuff is oriented towards su instead of sudo.


On Aug 20, 2008, at 8:21 PM, Anne Wilson wrote:


On Wednesday 20 August 2008 12:05:34 Gilboa Davara wrote:

Hello all,

Can anyone please point me to a good sudo GUI front-end? (Password
dialog box).
While I'm using KDE 4.1, I don't mind using a gtk box.

I tried using kdesu with or w/o the kdesurc - but it doesn't seem to
work.

'/bin/su -' does work, though in some cases you will need to add $u
(or is

it %U?).



These su dialogues requires the user to know the root password.

If the user knows the root password, the user can log in as root. If
the user picks up a keylogger and authenticates, whoever owned that
keylogger now owns the machine. If you think carelessly, you might
think that a running keylogger implies that the machine is already
pwned, but you're ignoring the non-ideal behaviors of browser
technology.


Also, there's the less tangible benefit, in that the correct use of
sudo raises the general awareness that we shouldn't surf the web
naked. (So to speak.)


--
Joel Rees

--
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list