[opensuse-factory] Policykit dependency
Hello, gnome-packagekit misses a dependecy on a Policykit authentication agent. Rather than adding a dependency on polkit-gnome, would it make sense for all three Policykit authentication agent implementations (polkit-gnome, polkit-kde-1, lxpolkit) to provide something like polkit-agent which dependent packages could require instead? -- Guido Berhoerster -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-factory+help@opensuse.org
Guido Berhoerster write:
Hi It makes sense for me, as each agent just need to implement interface which can anything use. So you need any agent, not specific one. Pepa -- Josef Reidinger Appliance Toolkit team maintainer of perl-Bootloader, yast2-bootloader and parts of webyast and SLMS -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-factory+help@opensuse.org
Le mardi 30 novembre 2010, à 14:55 +0100, Guido Berhoerster a écrit :
Technically speaking, gnome-packagekit doesn't depend on a polkit auth agent. That's really PackageKit itself. You can call PackageKit methods that will require such authentication from any app, or even from the command line. Also, I'm unsure we want all services providing polkit methods to require an auth agent; we certainly will forget about some cases. I'd argue the auth agent should be provided by the desktop and therefore, the issue is a missing dependency somewhere else. Which desktop were you using? Vincent -- Les gens heureux ne sont pas pressés. -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-factory+help@opensuse.org
* Vincent Untz <vuntz@opensuse.org> [2010-11-30 15:56]:
I would find it cleaner, particularly regarding the gpk updater which is pretty useless without a polkit auth agent.
The XFCE default pattern does not specify polkit-gnome but uses gpk. -- Guido Berhoerster -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-factory+help@opensuse.org
Le mardi 30 novembre 2010, à 16:04 +0100, Guido Berhoerster a écrit :
But again, this is just for gpk. What about all the other apps using polkit services? They don't require a polkit agent directly either.
So we can fix the XFCE pattern. Or we can add a Supplements to polkit-gnome to make it automatically installed for XFCE. Vincent -- Les gens heureux ne sont pas pressés. -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-factory+help@opensuse.org
* Vincent Untz <vuntz@opensuse.org> [2010-11-30 17:25]:
But again, this is just for gpk. What about all the other apps using polkit services? They don't require a polkit agent directly either.
IMHO they should, or at least recommend.
Well, that's the quick-n-dirty solution, I'll include that in the larger XFCE pattern modification I've planned. -- Guido Berhoerster -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-factory+help@opensuse.org
Le mardi 30 novembre 2010, à 18:35 +0100, Guido Berhoerster a écrit :
Again, I disagree: this implies knowing that the service you are using will use polkit for authentication. There is absolutely *no* dependency on polkit in gnome-packagekit. Look at the code. The dependency would be in PackageKit. And then we can really just say "if you have polkit installed, you should have a polkit-agent installed too", so we can simply move the dependency to polkit. Vincent -- Les gens heureux ne sont pas pressés. -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-factory+help@opensuse.org
Le mercredi 01 décembre 2010, à 11:30 +0100, Guido Berhoerster a écrit :
Makes sense to me. So let's do the virtual provides you proposed earlier in polkit-gnome & friends, and a recommends on this virtual provides. I wonder: is polkit installed on a server install, with no X? It'd be a shame to have X installed because of this. Cheers, Vincent -- Les gens heureux ne sont pas pressés. -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-factory+help@opensuse.org
Vincent Untz write:
Yes, it is. PolicyKit e.g. Webyast which don't need X and use policyKit mainly as two state permission tool, which say grant or deny. So it doesn't need any agent. ( if authorization is required it is considered as denied). Josef
Cheers,
Vincent
-- Josef Reidinger Appliance Toolkit team maintainer of perl-Bootloader, yast2-bootloader and parts of webyast and SLMS -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-factory+help@opensuse.org
Guido Berhoerster write:
Hi It makes sense for me, as each agent just need to implement interface which can anything use. So you need any agent, not specific one. Pepa -- Josef Reidinger Appliance Toolkit team maintainer of perl-Bootloader, yast2-bootloader and parts of webyast and SLMS -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-factory+help@opensuse.org
Le mardi 30 novembre 2010, à 14:55 +0100, Guido Berhoerster a écrit :
Technically speaking, gnome-packagekit doesn't depend on a polkit auth agent. That's really PackageKit itself. You can call PackageKit methods that will require such authentication from any app, or even from the command line. Also, I'm unsure we want all services providing polkit methods to require an auth agent; we certainly will forget about some cases. I'd argue the auth agent should be provided by the desktop and therefore, the issue is a missing dependency somewhere else. Which desktop were you using? Vincent -- Les gens heureux ne sont pas pressés. -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-factory+help@opensuse.org
* Vincent Untz <vuntz@opensuse.org> [2010-11-30 15:56]:
I would find it cleaner, particularly regarding the gpk updater which is pretty useless without a polkit auth agent.
The XFCE default pattern does not specify polkit-gnome but uses gpk. -- Guido Berhoerster -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-factory+help@opensuse.org
Le mardi 30 novembre 2010, à 16:04 +0100, Guido Berhoerster a écrit :
But again, this is just for gpk. What about all the other apps using polkit services? They don't require a polkit agent directly either.
So we can fix the XFCE pattern. Or we can add a Supplements to polkit-gnome to make it automatically installed for XFCE. Vincent -- Les gens heureux ne sont pas pressés. -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-factory+help@opensuse.org
* Vincent Untz <vuntz@opensuse.org> [2010-11-30 17:25]:
But again, this is just for gpk. What about all the other apps using polkit services? They don't require a polkit agent directly either.
IMHO they should, or at least recommend.
Well, that's the quick-n-dirty solution, I'll include that in the larger XFCE pattern modification I've planned. -- Guido Berhoerster -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-factory+help@opensuse.org
Le mardi 30 novembre 2010, à 18:35 +0100, Guido Berhoerster a écrit :
Again, I disagree: this implies knowing that the service you are using will use polkit for authentication. There is absolutely *no* dependency on polkit in gnome-packagekit. Look at the code. The dependency would be in PackageKit. And then we can really just say "if you have polkit installed, you should have a polkit-agent installed too", so we can simply move the dependency to polkit. Vincent -- Les gens heureux ne sont pas pressés. -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-factory+help@opensuse.org
participants (3)
-
Guido Berhoerster -
Josef Reidinger -
Vincent Untz