[ale] Give superuser to gui apps.

[Jim Kinney]

On Fri, 2015-08-28 at 13:53 -0400, DJ-Pfulio wrote:On 08/28/2015 01:36
PM, DJ-Pfulio wrote:



On ubuntu, either wheel or sudo are the group to be in to have sudo
escalation.  Of course, you can use any group you like or just specify
1
account, without a group in the sudoers file.

Oh - and there is one exception for sudoedit - that is when editing the
sudoers files ... use visudo for that. If you use a non-GUI editor,
using sudo is fine - sudo vi file.txt   It is the GUI tools that seem
to
screw things up by saving settings/creating setting files when not
asked
to do so.  I've seen one system where someone was following a script
and
at their first login, before running any other program did a sudo gedit
/etc/some-file-here    and all their GUI settings were locked since
root
owned ~/.conf from theig/ . It was bad.I need to dig more into how rhel gui sudo works. I think it uses
PolicyKit. The places where I see it used are when downloading a custom
RPM for installation (yes. from a trusted site) and it asks for a
password to install it. The gui config manager will also ask for a
password when unlocking printing config and network settings. And when
doing system updates from the gui notifier.
> _______________________________________________
> Ale mailing list
> Ale at ale.org
> http://mail.ale.org/mailman/listinfo/ale
> See JOBS, ANNOUNCE and SCHOOLS lists at
> http://mail.ale.org/mailman/listinfo
-- 
James P. Kinney III

Every time you stop a school, you will have to build a jail. What you
gain at one end you lose at the other. It's like feeding a dog on his
own tail. It won't fatten the dog.
- Speech 11/23/1900 Mark Twain

http://heretothereideas.blogspot.com/

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.ale.org/pipermail/ale/attachments/20150828/434c81f9/attachment.html>