<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"> <html> <head> <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type"> <title></title> </head> <body text="#000000" bgcolor="#ffffff"> On 06/16/2009 07:57 PM, Adam Williamson wrote: <blockquote cite="mid:1245196654.313.165.camel@adam.local.net" type="cite"> <pre wrap="">On Mon, 2009-06-15 at 12:22 -0800, Jeff Spaleta wrote: </pre> <blockquote type="cite"> <pre wrap="">On Mon, Jun 15, 2009 at 11:42 AM, Casey Dahlin<a class="moz-txt-link-rfc2396E" href="mailto:cdahlin@redhat.com"><cdahlin@redhat.com></a> wrote: </pre> <blockquote type="cite"> <pre wrap="">The ability for nautilus to prompt for credentials when the user tries to do something outside his permission level has been missing for far too long. Its annoying to implement, but I'll owe a beer to whoever finally does it. </pre> </blockquote> <pre wrap=""> I just threw that out as one example of how to think like a new admin when figuring out how to perform an administrative task for the first time would end up trying to re-login as root in order to get access to gui tools to make up for a lack of familiarity with the command line. </pre> </blockquote> <pre wrap=""> This is precisely one of the things PolicyKit solves (or will solve). The best thing about PolicyKit is that it allows apps to elevate privileges for a specific operation (or set of operations) and drop them once it no longer needs them. </pre> </blockquote> So question: my feeling is that the other part of policy kit that is important is that it puts all the access policy in one place. sudo would be in violation of this, since it has its own quite intricate file full of policy configuration. I think that an implementation of sudo should be provided that gets its configuration entirely or in part from policy kit. Right now I see this as a new program that is a drop-in sudo replacement (sudo and polkit-sudo would use the alternative system). Thoughts? I'm ready to hack it together. --CJD </body> </html>