https://bugzilla.novell.com/show_bug.cgi?id=812504 https://bugzilla.novell.com/show_bug.cgi?id=812504#c1 Marcus Meissner changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |meissner@suse.com Depends on| |798885 --- Comment #1 from Marcus Meissner 2013-03-29 17:11:14 UTC --- security audit is pending. bug 798885 polkit-default-privs change needs to go via above bug first. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=812504 https://bugzilla.novell.com/show_bug.cgi?id=812504#c Bug 812504 depends on bug 798885, which changed state. Bug 798885 Summary: AUDIT-0: PackageKit: The latest update for PackageKit installs polkit files in order to enable offline updates (executed by systemd) http://bugzilla.novell.com/show_bug.cgi?id=798885 What |Old Value |New Value ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution| |FIXED -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=812504 https://bugzilla.novell.com/show_bug.cgi?id=812504#c3 --- Comment #3 from Frederic Crozat 2013-04-03 14:02:39 UTC --- (In reply to comment #2)

Can you please enlighten us also to how this feature works?

How does the user interact with it?

Details are described in http://freedesktop.org/wiki/Software/systemd/SystemUpdates and http://gitorious.org/packagekit/packagekit/blobs/master/contrib/systemd-upda... Please note that with 12.3, we lost automatic install of maintenance update, since upstream has removed it, in favor to this new scheme. Note: we might need to improve a bit our plymouth theme, I haven't checked this part. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=812504 https://bugzilla.novell.com/show_bug.cgi?id=812504#c5 --- Comment #5 from Frederic Crozat 2013-04-03 14:21:58 UTC --- (In reply to comment #4)

So the polkit rights are still for the user to initiate the offline updates, right?

yes, exactly (which is why, it should be yes only for "active" user and I guess, only on "standard" restriction, not "high" restriction). -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=812504 https://bugzilla.novell.com/show_bug.cgi?id=812504#c7 --- Comment #7 from Frederic Crozat 2013-04-03 15:05:06 UTC --- (In reply to comment #6)

This would also need to be limited to "patch updates" only to avoid having regular users being abloe to downgrade packages.

Isn't it already the case with PackageKit default settings ? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=812504 https://bugzilla.novell.com/show_bug.cgi?id=812504#c9 --- Comment #9 from Frederic Crozat 2013-04-03 15:26:16 UTC --- (In reply to comment #8)

No, we needed to fix the PackageKit zypp backend to do so... :(

Hmm, anyway, my proposed packages aren't enabling this new offline update mode by default (nor auto-download). It is to make sure the feature is available for people who need it for 12.3 (even if it has some caveat).. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.