On Wed, Jun 15, 2016 at 11:27 PM, Andrei Borzenkov
15.06.2016 22:51, Istvan Gabor пишет:
What I want is this: - To set up network connection as root - I want that regular users cannot edit configured network connection in any way, cannot add, remove or change existing connections - I want that regular users can start and stop connections configured by root.
Is this possible with network manager? Can I configure network manager that it wouldn't let a user add new connection at all? How?
I think that suitable polkit configuration for actions org.freedesktop.NetworkManager.settings.modify.own, org.freedesktop.NetworkManager.settings.modify.system and org.freedesktop.NetworkManager.network-control should do it. You won't be able to prevent user from explicitly editing files under /etc/NetworkManager using su/sudo, but then you cannot do it with ifup either.
To elaborate a bit. network-control already should be allowed for active users without additional authentication; modify.system is already restricted to root by default; so you only need to restrict or completely deny modify.own to prevent users from creating own connections. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org