[yast-devel] Re: Help needed on how to run shell script as "root" in WebYaST webservice

newer
[yast-devel] WebYaST status call -...

older
[yast-devel] Webyast - How to show...

Klaus Kaempf

11 Feb 2010 11 Feb '10

09:37

Hi WebYaSTies, YaST/Web/Development/Tutorial on the openSUSE Wiki is outdated (I just created bnc#579012 to get this fixed) to get this question answered * Hai Shi [Feb 11. 2010 03:22]:

...

Do you have any document that I can follow to achieve this: running a shell script as "root" in WebYaST webservice?

Maybe its a good idea to create a set of 'common' D-Bus services for such scenarios ? Klaus --- SUSE LINUX Products GmbH, GF: Markus Rex, HRB 16746 (AG Nürnberg) -- To unsubscribe, e-mail: yast-devel+unsubscribe@opensuse.org For additional commands, e-mail: yast-devel+help@opensuse.org

Show replies by date

Hai Shi

17 Feb 17 Feb

18:53

New subject: [yast-devel] Re: Help needed on how to run shell script as "root" in WebYaST webservice

Hi, Does anybody have update on this issue? Thanks, Hai

...

...
...
Klaus Kaempf 2/11/2010 4:37 AM >>> Hi WebYaSTies,

YaST/Web/Development/Tutorial on the openSUSE Wiki is outdated (I just created bnc#579012 to get this fixed) to get this question answered * Hai Shi [Feb 11. 2010 03:22]:

...

Do you have any document that I can follow to achieve this: running a shell script as "root" in WebYaST webservice?

Maybe its a good idea to create a set of 'common' D-Bus services for such scenarios ? Klaus --- SUSE LINUX Products GmbH, GF: Markus Rex, HRB 16746 (AG Nürnberg)

Ladislav Slezak

19:23

New subject: [yast-devel] Re: Help needed on how to run shell script as "root" in WebYaST webservice

On 17.2.2010 19:53, Hai Shi wrote:

...

Hi, Does anybody have update on this issue?

Sorry, no update, but AFAIK Jiří (jsrain) is working on a generic vendor module. BTW PolicyKit supports so called annotaions see http://hal.freedesktop.org/docs/PolicyKit/polkit-conf.html#conf-declaring-ac... That's exactly what we need here. -- Best Regards Ladislav Slezák Yast Developer ------------------------------------------------------------------------ SUSE LINUX, s.r.o. e-mail: lslezak@suse.cz Lihovarská 1060/12 tel: +420 284 028 960 190 00 Prague 9 fax: +420 284 028 951 Czech Republic http://www.suse.cz/ -- To unsubscribe, e-mail: yast-devel+unsubscribe@opensuse.org For additional commands, e-mail: yast-devel+help@opensuse.org

Jiri Srain

18 Feb 18 Feb

08:50

New subject: [yast-devel] Re: Help needed on how to run shell script as "root" in WebYaST webservice

Dne středa 17 Únor 2010 20:23:52 Ladislav Slezak napsal(a):

...

On 17.2.2010 19:53, Hai Shi wrote:

...
Hi, Does anybody have update on this issue?

Sorry, no update, but AFAIK Jiří (jsrain) is working on a generic vendor module.

BTW PolicyKit supports so called annotaions see http://hal.freedesktop.org/docs/PolicyKit/polkit-conf.html#conf-declaring-a ctions-annotations

That's exactly what we need here.

I'm working on (mostly documenting and providing a tempate) general D-Bus service which can be then used by WebYaST. I expect to upload first version (partly skeleton of the documentation) later today to the openSUSE wiki. Jiri -- Regards, Jiri Srain YaST Team Leader --------------------------------------------------------------------- SUSE LINUX, s.r.o. e-mail: jsrain@suse.cz Lihovarska 1060/12 tel: +420 284 084 659 190 00 Praha 9 fax: +420 284 084 001 Czech Republic http://www.suse.cz -- To unsubscribe, e-mail: yast-devel+unsubscribe@opensuse.org For additional commands, e-mail: yast-devel+help@opensuse.org

Jiri Srain

12:53

New subject: [yast-devel] Re: Help needed on how to run shell script as "root" in WebYaST webservice

Dne čtvrtek 18 Únor 2010 09:50:42 Jiri Srain napsal(a):

...

Dne středa 17 Únor 2010 20:23:52 Ladislav Slezak napsal(a):

...
On 17.2.2010 19:53, Hai Shi wrote:

...
Hi, Does anybody have update on this issue?

Sorry, no update, but AFAIK Jiří (jsrain) is working on a generic vendor module.

BTW PolicyKit supports so called annotaions see http://hal.freedesktop.org/docs/PolicyKit/polkit-conf.html#conf-declaring -a ctions-annotations

That's exactly what we need here.

I'm working on (mostly documenting and providing a tempate) general D-Bus service which can be then used by WebYaST. I expect to upload first version (partly skeleton of the documentation) later today to the openSUSE wiki.

Have a look here: http://en.opensuse.org/YaST/Web/Development/Tutorial#Standalone_D-Bus_servic... at the tutorial. It describes how to create a generic D-Bus service with an example how to make it run a command (which is passed through the interface, which is not really secure). Hope you can use it. In case of any questions, please, get back to me so that I improve the documentation (or improve it yourself - it's a wiki :-) ). Be aware that this is the first dump I put to wiki and I intend to continue updating it. Of course, any feedback is welcome. Jiri -- Regards, Jiri Srain YaST Team Leader --------------------------------------------------------------------- SUSE LINUX, s.r.o. e-mail: jsrain@suse.cz Lihovarska 1060/12 tel: +420 284 084 659 190 00 Praha 9 fax: +420 284 084 001 Czech Republic http://www.suse.cz -- To unsubscribe, e-mail: yast-devel+unsubscribe@opensuse.org For additional commands, e-mail: yast-devel+help@opensuse.org

Ladislav Slezak

22 Feb 22 Feb

19:30

New subject: [yast-devel] Re: Help needed on how to run shell script as "root" in WebYaST webservice

On 18.2.2010 13:53, Jiri Srain wrote: [...]

...

Have a look here:

http://en.opensuse.org/YaST/Web/Development/Tutorial#Standalone_D-Bus_servic...

at the tutorial. It describes how to create a generic D-Bus service with an example how to make it run a command (which is passed through the interface, which is not really secure). Hope you can use it.

Right now I am porting yast2-dbus-server from PolicyKit to polkit (the successor of PolicyKit, actually it's a major redesign of PolicyKit with incompatible API change) and I found that polkit package already contains a generic wrapper for running scripts as root (or as any other user). So you need only to create a *.policy file for the script and that's it. No need to create a dedicated DBus service. See 'man pkexec'. Unfortunately polkit is not available in SLE11, so this is probably valid only for SLE12... -- Best Regards Ladislav Slezák Yast Developer ------------------------------------------------------------------------ SUSE LINUX, s.r.o. e-mail: lslezak@suse.cz Lihovarská 1060/12 tel: +420 284 028 960 190 00 Prague 9 fax: +420 284 028 951 Czech Republic http://www.suse.cz/ -- To unsubscribe, e-mail: yast-devel+unsubscribe@opensuse.org For additional commands, e-mail: yast-devel+help@opensuse.org

5178

Age (days ago)

5189

Last active (days ago)

List overview

Download

5 comments

4 participants

participants (4)

Hai Shi
Jiri Srain
Klaus Kaempf
Ladislav Slezak