[opensuse-factory] Policykit dependency
Hello, gnome-packagekit misses a dependecy on a Policykit authentication agent. Rather than adding a dependency on polkit-gnome, would it make sense for all three Policykit authentication agent implementations (polkit-gnome, polkit-kde-1, lxpolkit) to provide something like polkit-agent which dependent packages could require instead? -- Guido Berhoerster -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-factory+help@opensuse.org
Guido Berhoerster write:
Hello,
gnome-packagekit misses a dependecy on a Policykit authentication agent. Rather than adding a dependency on polkit-gnome, would it make sense for all three Policykit authentication agent implementations (polkit-gnome, polkit-kde-1, lxpolkit) to provide something like polkit-agent which dependent packages could require instead?
Hi It makes sense for me, as each agent just need to implement interface which can anything use. So you need any agent, not specific one. Pepa -- Josef Reidinger Appliance Toolkit team maintainer of perl-Bootloader, yast2-bootloader and parts of webyast and SLMS -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-factory+help@opensuse.org
Le mardi 30 novembre 2010, à 14:55 +0100, Guido Berhoerster a écrit :
Hello,
gnome-packagekit misses a dependecy on a Policykit authentication agent. Rather than adding a dependency on polkit-gnome, would it make sense for all three Policykit authentication agent implementations (polkit-gnome, polkit-kde-1, lxpolkit) to provide something like polkit-agent which dependent packages could require instead?
Technically speaking, gnome-packagekit doesn't depend on a polkit auth agent. That's really PackageKit itself. You can call PackageKit methods that will require such authentication from any app, or even from the command line. Also, I'm unsure we want all services providing polkit methods to require an auth agent; we certainly will forget about some cases. I'd argue the auth agent should be provided by the desktop and therefore, the issue is a missing dependency somewhere else. Which desktop were you using? Vincent -- Les gens heureux ne sont pas pressés. -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-factory+help@opensuse.org
* Vincent Untz <vuntz@opensuse.org> [2010-11-30 15:56]:
Le mardi 30 novembre 2010, à 14:55 +0100, Guido Berhoerster a écrit :
Hello,
gnome-packagekit misses a dependecy on a Policykit authentication agent. Rather than adding a dependency on polkit-gnome, would it make sense for all three Policykit authentication agent implementations (polkit-gnome, polkit-kde-1, lxpolkit) to provide something like polkit-agent which dependent packages could require instead?
Technically speaking, gnome-packagekit doesn't depend on a polkit auth agent. That's really PackageKit itself. You can call PackageKit methods that will require such authentication from any app, or even from the command line.
Also, I'm unsure we want all services providing polkit methods to require an auth agent; we certainly will forget about some cases.
I would find it cleaner, particularly regarding the gpk updater which is pretty useless without a polkit auth agent.
I'd argue the auth agent should be provided by the desktop and therefore, the issue is a missing dependency somewhere else. Which desktop were you using?
The XFCE default pattern does not specify polkit-gnome but uses gpk. -- Guido Berhoerster -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-factory+help@opensuse.org
Le mardi 30 novembre 2010, à 16:04 +0100, Guido Berhoerster a écrit :
* Vincent Untz <vuntz@opensuse.org> [2010-11-30 15:56]:
Le mardi 30 novembre 2010, à 14:55 +0100, Guido Berhoerster a écrit :
Hello,
gnome-packagekit misses a dependecy on a Policykit authentication agent. Rather than adding a dependency on polkit-gnome, would it make sense for all three Policykit authentication agent implementations (polkit-gnome, polkit-kde-1, lxpolkit) to provide something like polkit-agent which dependent packages could require instead?
Technically speaking, gnome-packagekit doesn't depend on a polkit auth agent. That's really PackageKit itself. You can call PackageKit methods that will require such authentication from any app, or even from the command line.
Also, I'm unsure we want all services providing polkit methods to require an auth agent; we certainly will forget about some cases.
I would find it cleaner, particularly regarding the gpk updater which is pretty useless without a polkit auth agent.
But again, this is just for gpk. What about all the other apps using polkit services? They don't require a polkit agent directly either.
I'd argue the auth agent should be provided by the desktop and therefore, the issue is a missing dependency somewhere else. Which desktop were you using?
The XFCE default pattern does not specify polkit-gnome but uses gpk.
So we can fix the XFCE pattern. Or we can add a Supplements to polkit-gnome to make it automatically installed for XFCE. Vincent -- Les gens heureux ne sont pas pressés. -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-factory+help@opensuse.org
* Vincent Untz <vuntz@opensuse.org> [2010-11-30 17:25]:
But again, this is just for gpk. What about all the other apps using polkit services? They don't require a polkit agent directly either.
IMHO they should, or at least recommend.
I'd argue the auth agent should be provided by the desktop and therefore, the issue is a missing dependency somewhere else. Which desktop were you using?
The XFCE default pattern does not specify polkit-gnome but uses gpk.
So we can fix the XFCE pattern. Or we can add a Supplements to polkit-gnome to make it automatically installed for XFCE.
Well, that's the quick-n-dirty solution, I'll include that in the larger XFCE pattern modification I've planned. -- Guido Berhoerster -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-factory+help@opensuse.org
Le mardi 30 novembre 2010, à 18:35 +0100, Guido Berhoerster a écrit :
* Vincent Untz <vuntz@opensuse.org> [2010-11-30 17:25]:
But again, this is just for gpk. What about all the other apps using polkit services? They don't require a polkit agent directly either.
IMHO they should, or at least recommend.
Again, I disagree: this implies knowing that the service you are using will use polkit for authentication. There is absolutely *no* dependency on polkit in gnome-packagekit. Look at the code. The dependency would be in PackageKit. And then we can really just say "if you have polkit installed, you should have a polkit-agent installed too", so we can simply move the dependency to polkit. Vincent -- Les gens heureux ne sont pas pressés. -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-factory+help@opensuse.org
* Vincent Untz <vuntz@opensuse.org> [2010-12-01 09:37]:
Le mardi 30 novembre 2010, à 18:35 +0100, Guido Berhoerster a écrit :
* Vincent Untz <vuntz@opensuse.org> [2010-11-30 17:25]:
But again, this is just for gpk. What about all the other apps using polkit services? They don't require a polkit agent directly either.
IMHO they should, or at least recommend.
Again, I disagree: this implies knowing that the service you are using will use polkit for authentication. There is absolutely *no* dependency on polkit in gnome-packagekit. Look at the code.
The dependency would be in PackageKit. And then we can really just say "if you have polkit installed, you should have a polkit-agent installed too", so we can simply move the dependency to polkit.
OK, that makes sense, would a recommends dependency be justified? -- Guido Berhoerster -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-factory+help@opensuse.org
Le mercredi 01 décembre 2010, à 11:30 +0100, Guido Berhoerster a écrit :
* Vincent Untz <vuntz@opensuse.org> [2010-12-01 09:37]:
Le mardi 30 novembre 2010, à 18:35 +0100, Guido Berhoerster a écrit :
* Vincent Untz <vuntz@opensuse.org> [2010-11-30 17:25]:
But again, this is just for gpk. What about all the other apps using polkit services? They don't require a polkit agent directly either.
IMHO they should, or at least recommend.
Again, I disagree: this implies knowing that the service you are using will use polkit for authentication. There is absolutely *no* dependency on polkit in gnome-packagekit. Look at the code.
The dependency would be in PackageKit. And then we can really just say "if you have polkit installed, you should have a polkit-agent installed too", so we can simply move the dependency to polkit.
OK, that makes sense, would a recommends dependency be justified?
Makes sense to me. So let's do the virtual provides you proposed earlier in polkit-gnome & friends, and a recommends on this virtual provides. I wonder: is polkit installed on a server install, with no X? It'd be a shame to have X installed because of this. Cheers, Vincent -- Les gens heureux ne sont pas pressés. -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-factory+help@opensuse.org
Vincent Untz write:
Le mercredi 01 décembre 2010, à 11:30 +0100, Guido Berhoerster a écrit :
* Vincent Untz <vuntz@opensuse.org> [2010-12-01 09:37]:
Le mardi 30 novembre 2010, à 18:35 +0100, Guido Berhoerster a écrit :
* Vincent Untz <vuntz@opensuse.org> [2010-11-30 17:25]:
But again, this is just for gpk. What about all the other apps using polkit services? They don't require a polkit agent directly either.
IMHO they should, or at least recommend.
Again, I disagree: this implies knowing that the service you are using will use polkit for authentication. There is absolutely *no* dependency on polkit in gnome-packagekit. Look at the code.
The dependency would be in PackageKit. And then we can really just say "if you have polkit installed, you should have a polkit-agent installed too", so we can simply move the dependency to polkit.
OK, that makes sense, would a recommends dependency be justified?
Makes sense to me. So let's do the virtual provides you proposed earlier in polkit-gnome & friends, and a recommends on this virtual provides.
I wonder: is polkit installed on a server install, with no X? It'd be a shame to have X installed because of this.
Yes, it is. PolicyKit e.g. Webyast which don't need X and use policyKit mainly as two state permission tool, which say grant or deny. So it doesn't need any agent. ( if authorization is required it is considered as denied). Josef
Cheers,
Vincent
-- Josef Reidinger Appliance Toolkit team maintainer of perl-Bootloader, yast2-bootloader and parts of webyast and SLMS -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-factory+help@opensuse.org
participants (3)
-
Guido Berhoerster -
Josef Reidinger -
Vincent Untz