[Bug 987774] New: zypper allow normal user to run lp lu
http://bugzilla.opensuse.org/show_bug.cgi?id=987774 Bug ID: 987774 Summary: zypper allow normal user to run lp lu Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.1 Hardware: x86-64 OS: openSUSE 12.1 Status: NEW Severity: Normal Priority: P5 - None Component: libzypp Assignee: zypp-maintainers@forge.provo.novell.com Reporter: techno2055@yandex.com QA Contact: qa-bugs@suse.de Found By: --- Blocker: --- hi, as a normal user i attemped to run: #zypper lp and it didn't complain-about/ask-for root privilege unlike: #zypper in my_package.rpm
Root privileges are required for installing or uninstalling packages.
which caused zypper failing to mount the repos i have:
Failed to mount /SOURCE/source/iso/openSUSE-Leap-42.1-DVD-x86_64.iso on /var/tmp/AP_0xBPi6XB: Mounting media failed (mount: only root can use "--options" option) Abort, retry, ignore? [a/r/i/? shows all options] (a):
my zypper version is 1.12.40 i think you shouldn't be able to start zypper lp/lu without root -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=987774 http://bugzilla.opensuse.org/show_bug.cgi?id=987774#c1 --- Comment #1 from techno2055 techno2055xxx <techno2055@yandex.com> --- *** Bug 987775 has been marked as a duplicate of this bug. *** -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=987774 techno2055 techno2055xxx <techno2055@yandex.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Summary|zypper allow normal user to |zypper is allowing normal |run lp lu |user to run lp lu -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=987774 http://bugzilla.opensuse.org/show_bug.cgi?id=987774#c2 Andreas Stieger <astieger@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |astieger@suse.com --- Comment #2 from Andreas Stieger <astieger@suse.com> --- zypper lp/lu are read-only operations, so non-root users are fine to run it. What they cannot do is refresh repositories and - apparently - mount repos. In my view the bug is INVALID as filed: There is no problem with normal users running zypper. The bug would only be valid if it relates to the problem that a user cannot perform a mount, and a solution/message would need to be found for that. -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=987774 http://bugzilla.opensuse.org/show_bug.cgi?id=987774#c3 Michael Andres <ma@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |INVALID --- Comment #3 from Michael Andres <ma@suse.com> --- Whether you actually need root privilege to access the repositories very much depends on your configuration. If your repos were refreshed at least once (as root), repo metadadta are already cached on disk and there is no urgent need to actually access the media. If you use 'zypper --no-refresh ...', zypper will use the cached metadata on disk and not try to access the media. Without '--no-refresh' zypper will check, whether the cached metadata are still up-to-date, if the repo has 'autorefresh' turned on (use 'zypper lp' to check). This will indeed try to access the media and might fail, if your system does not allow this as non-root user. But this is intended. If you are using an 'immutable' mounted media (like this .iso), you can turn off 'autorefresh' for it (zypper mr -R <REPO>). Whenever you replace the .iso file by a new version, you need to refresh the repo once as root to update the disk cache (zypper ref -f <REPO>). With 'autorefresh' turned off, 'zypper lp/lu' should not try to access the media (provided the metadata are cached on disk). (If this does not resolve your problem, reopen the bug, run as user 'ZYPP_LOGFILE=/tmp/myzypper.log zypper lu' and attach the log file) -- You are receiving this mail because: You are on the CC list for the bug.
participants (1)
-
bugzilla_noreply＠novell.com