GNOME panel and sudo
poptones
dlist at ubuntuforums.org
Mon Jul 18 16:13:45 CDT 2005
Vincent Untz Wrote:
> Hi,
>
> Le lundi 18 juillet 2005 Ã* 18:46 +0000, Olafur Arason a écrit :
> > We allready have that if you are in admin group then you have sudo,
> > so we don't need to worry about that. I think this is global so this
> > would not require any extra effort.
> > The why 640 question: root is owner of the file so you have to use
> > sudo to edit the .desktop file, the group would be admin so you can
> > see the file if you are in that group and if your not then you can't
> > read it so it doesn't show up in the menu. So this would solve this
> > problem and it's done in a unix way. admin isn't a user it's a group
> > so admin wouldn't be the owner and the would be no reason why
> > distibutions would have to have that user. The .desktop files are in
> > /usr/applications and /etc is full of diffrent groups owning diffrent
> > things.
>
> The problem is this: the "sudo in menus" problem is not ubuntu-specific
> and there are some work to add some things about it in the menu spec
> [1]. I don't think people will be okay to add "you need the 'admin'
> group" to the spec (I might be wrong, though). This is okay for Ubuntu,
> but it might not be okay for other distributions.
>
> As for 640... Why not 644, then?
>
> [1] http://freedesktop.org/wiki/Standards_2fmenu_2dspec
>
> > Olafur Arason
> >
> > On 7/18/05, Vincent Untz <vincent at vuntz.net> wrote:
> > > On Mon, July 18, 2005 3:27, Olafur Arason said:
> > > > What is wrong with giving the changing the group on these
> .desktop files
> > > > to admin and changing the permissons to 640. This works as
> expected and
> > > > doesn't involve a security risk or a parser.
> > >
> > > I guess the problem here is that we want to have this in a spec.
> And I'm
> > > not sure adding "You must use the 'admin' user as owner of the
> files" to the
> > > spec will be accepted, since it forces distribution to have an
> 'admin' user.
> > >
> > > And why would it be 640? I see absolutely no reason to make the
> files
> > > unreadable by the users (or we should do it for most files in /etc
> to be
> > > consistent...)
> > >
> > > Vincent
> > >
> > > --
> > > Les gens heureux ne sont pas pressés.
> > >
> >
> Vincent
>
> --
> Les gens heureux ne sont pas pressés.
>
>
> --
> ubuntu-devel mailing list
> ubuntu-devel at lists.ubuntu.com
> http://lists.ubuntu.com/mailman/listinfo/ubuntu-devel
Don't you have to be in "wheel" to use sudo? Why not make wheel the
owner of those menu entires?
Or better still make it an ubuntu feature; just create an "ubuntumenu"
group and sudo priviledge users are part of that group to enable the
selective menus. It would then be totally and conveniently up to the
admin to decide.
--
poptones
More information about the ubuntu-devel
mailing list