[Bug 812504] New: Cannot enable offline update after modifying /etc/PackageKit/PackageKit.conf
https://bugzilla.novell.com/show_bug.cgi?id=812504 https://bugzilla.novell.com/show_bug.cgi?id=812504#c0 Summary: Cannot enable offline update after modifying /etc/PackageKit/PackageKit.conf Classification: openSUSE Product: openSUSE 12.3 Version: Final Platform: Other OS/Version: Other Status: NEW Severity: Normal Priority: P5 - None Component: GNOME AssignedTo: bnc-team-gnome@forge.provo.novell.com ReportedBy: fcrozat@suse.com QAContact: qa-bugs@suse.de CC: security-team@suse.de Found By: --- Blocker: --- Even after modifying WritePreparedUpdates=true in /etc/PackageKit/PackageKit.conf, PackageKit and GNOME-Shell don't support offline updates. Several packages needed to be fixed : - PackageKit: * polkit file was referencing incorrect path for offline update helpers * drop fix-policies-opensuse.patch: auth_admin(_keep) shouldn't be required for offline update, "active user" should be sufficient. * don't use systemd macros but always enable the systemd service (it won't do anything when user don't enable Offline update in PK configuration) - gnome-shell: * fix incorrect path for offline update helper - polkit-default-privs: * change default priv for offline update helper to "active user" for standard profile Those packages are available in http://download.opensuse.org/repositories/home:/fcrozat:/branches:/openSUSE:... -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=812504 https://bugzilla.novell.com/show_bug.cgi?id=812504#c1 Marcus Meissner <meissner@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |meissner@suse.com Depends on| |798885 --- Comment #1 from Marcus Meissner <meissner@suse.com> 2013-03-29 17:11:14 UTC --- security audit is pending. bug 798885 polkit-default-privs change needs to go via above bug first. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=812504 https://bugzilla.novell.com/show_bug.cgi?id=812504#c Dominique Leuenberger <dimstar@opensuse.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |ASSIGNED CC| |dimstar@opensuse.org AssignedTo|bnc-team-gnome@forge.provo. |fcrozat@suse.com |novell.com | -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=812504 https://bugzilla.novell.com/show_bug.cgi?id=812504#c Bug 812504 depends on bug 798885, which changed state. Bug 798885 Summary: AUDIT-0: PackageKit: The latest update for PackageKit installs polkit files in order to enable offline updates (executed by systemd) http://bugzilla.novell.com/show_bug.cgi?id=798885 What |Old Value |New Value ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution| |FIXED -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=812504 https://bugzilla.novell.com/show_bug.cgi?id=812504#c2 --- Comment #2 from Marcus Meissner <meissner@suse.com> 2013-04-03 13:42:11 UTC --- Can you please enlighten us also to how this feature works? How does the user interact with it? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=812504 https://bugzilla.novell.com/show_bug.cgi?id=812504#c3 --- Comment #3 from Frederic Crozat <fcrozat@suse.com> 2013-04-03 14:02:39 UTC --- (In reply to comment #2)
Can you please enlighten us also to how this feature works?
How does the user interact with it?
Details are described in http://freedesktop.org/wiki/Software/systemd/SystemUpdates and http://gitorious.org/packagekit/packagekit/blobs/master/contrib/systemd-upda... Please note that with 12.3, we lost automatic install of maintenance update, since upstream has removed it, in favor to this new scheme. Note: we might need to improve a bit our plymouth theme, I haven't checked this part. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=812504 https://bugzilla.novell.com/show_bug.cgi?id=812504#c4 --- Comment #4 from Marcus Meissner <meissner@suse.com> 2013-04-03 14:11:59 UTC --- So the polkit rights are still for the user to initiate the offline updates, right? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=812504 https://bugzilla.novell.com/show_bug.cgi?id=812504#c5 --- Comment #5 from Frederic Crozat <fcrozat@suse.com> 2013-04-03 14:21:58 UTC --- (In reply to comment #4)
So the polkit rights are still for the user to initiate the offline updates, right?
yes, exactly (which is why, it should be yes only for "active" user and I guess, only on "standard" restriction, not "high" restriction). -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=812504 https://bugzilla.novell.com/show_bug.cgi?id=812504#c6 Marcus Meissner <meissner@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |coolo@suse.com --- Comment #6 from Marcus Meissner <meissner@suse.com> 2013-04-03 14:57:10 UTC --- This would also need to be limited to "patch updates" only to avoid having regular users being abloe to downgrade packages. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=812504 https://bugzilla.novell.com/show_bug.cgi?id=812504#c7 --- Comment #7 from Frederic Crozat <fcrozat@suse.com> 2013-04-03 15:05:06 UTC --- (In reply to comment #6)
This would also need to be limited to "patch updates" only to avoid having regular users being abloe to downgrade packages.
Isn't it already the case with PackageKit default settings ? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=812504 https://bugzilla.novell.com/show_bug.cgi?id=812504#c8 --- Comment #8 from Marcus Meissner <meissner@suse.com> 2013-04-03 15:19:29 UTC --- No, we needed to fix the PackageKit zypp backend to do so... :( -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=812504 https://bugzilla.novell.com/show_bug.cgi?id=812504#c9 --- Comment #9 from Frederic Crozat <fcrozat@suse.com> 2013-04-03 15:26:16 UTC --- (In reply to comment #8)
No, we needed to fix the PackageKit zypp backend to do so... :(
Hmm, anyway, my proposed packages aren't enabling this new offline update mode by default (nor auto-download). It is to make sure the feature is available for people who need it for 12.3 (even if it has some caveat).. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=812504 https://bugzilla.novell.com/show_bug.cgi?id=812504#c10 --- Comment #10 from Bernhard Wiedemann <bwiedemann@suse.com> 2013-04-03 18:00:31 CEST --- This is an autogenerated message for OBS integration: This bug (812504) was mentioned in https://build.opensuse.org/request/show/162489 Factory / polkit-default-privs -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
participants (1)
-
bugzilla_noreply＠novell.com