[libvirt] [PATCH 0/3] Add capability for text based polkit authentication for virsh

John Ferlan jferlan at redhat.com
Wed Feb 10 19:46:33 UTC 2016


https://bugzilla.redhat.com/show_bug.cgi?id=872166

As an alternative to commit id 'e94979e90' which allows polkit
authentication by adding users to the 'libvirt' group, add the
ability to start and utilize a text based authentication agent
for virsh.

At the very least patch 1 will suffice part of the issue listed
in the bz - the opaque error message related to "some agent".

For patch 2, it was far easier to utilize what polkit provides
in pkttyagent and pkcheck utilities, than adding some code which
requires POLKIT_AGENT_I_KNOW_API_IS_SUBJECT_TO_CHANGE being
#defined for compilation.

I chose 'pkauth' to mean polkit authentication - figured it was
a workable shorthand, but if there's better suggestions those
can be considered.

John Ferlan (3):
  polkit: Adjust message when action-id isn't found
  util: Introduce API's for Polkit text authentication
  virsh: Add support for text based polkit authentication

 src/libvirt_private.syms |   3 ++
 src/util/virpolkit.c     | 104 +++++++++++++++++++++++++++++++++++++++++++++--
 src/util/virpolkit.h     |   7 ++++
 tests/virpolkittest.c    |   3 +-
 tools/virsh.c            |  22 ++++++++--
 tools/virsh.h            |   2 +
 tools/virsh.pod          |  10 +++++
 tools/vsh.h              |   1 +
 8 files changed, 144 insertions(+), 8 deletions(-)

-- 
2.5.0




More information about the libvir-list mailing list