Re: Using sudo instead of root passwd for system-config tools

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Thu, Mar 10, 2005 at 08:15:40AM +0100, Thomas V. Fischer wrote:
> How do you force the use of sudo instead of the root password for launching 
> the system-config-??? Tools via the application menu?
> I believe you need to change something in the /etc/pam.d files but not sure 
> what

You could use sudo, but there's a Better Way Now.

1) put yourself in the group "wheel" with 'gpasswd wheel -a username'.
   (Or any other group, but wheel is traditional.)

2) appened the line "UGROUPS=wheel" to the appropriate files in
   /etc/security/console.apps. For example, to enable this behavior for
   system-config-users, simply add the line to 
   /etc/security/console.apps/system-config-users.

This makes the tools prompt for the root password for those not in the wheel
group, and asks for auth-as-self (a la sudo) for those who are members. If
you want non-wheel members to be completely denied with no prompt, change
USER=root to USER=<none> in the console.apps file.

The main advantage over sudo is that you get the GUI prompt when picking the
programs from the menu.

Unfortunately there's no easy way to make the change globably. An additional
tab on system-config-securitylevel that manages this might be cool.


(This requires 1.74-1 or higher -- so FC3.)

-- 
Matthew Miller           mattdm@xxxxxxxxxx        <http://www.mattdm.org/>
Boston University Linux      ------>                <http://linux.bu.edu/>


[Index of Archives]     [Current Fedora Users]     [Fedora Desktop]     [Fedora SELinux]     [Yosemite News]     [Yosemite Photos]     [KDE Users]     [Fedora Tools]     [Fedora Docs]

  Powered by Linux