firewalld and root password
I am running OpenSuSE 15.3 x64 and am struggling with setting up Firewalld. At the moment I have lots of questions and will probably ask more questions in different threads in the near future. Right now I would like to ask why does Firewalld-config keep badgering me for the root password while I am trying to work with it, and how do I get it to stop. I have set it up in the Application Menu to run as the root user, and I expect it to ask me for the root password initially once, after starting up. But this constant badgering me to keep entering the root password, after different operations (for example changing the view from Temporary to Permanent, changing the zone I want to work with, adding a Rich rule, or a Direct Configuration rule, etc., ) is ridiculous and very annoying. Once is enough! Marc, and as always, thanks in advance for your helpful suggestions! -- *"The Truth is out there" - Spooky* *_ _ . . . . . . _ _ . _ _ _ _ . . . . _ . . . . _ _ . _ _ _ . . . . _ _ . _ . . _ . _ _ _ _ . _ . _ . _ . _ . * Computers: the final frontier. These are the voyages of the user Marc. His mission: to explore strange new hardware. To seek out new software and new applications. To boldly go where no Marc has gone before! (/This email is digitally signed and the OpenPGP electronic signature is added as an attachment. If you know how, you can use my public key to prove this email indeed came from me and has not been modified in transit. My public key, which can be used for sending encrypted email to me also, can be found at - https://keys.openpgp.org/search?q=marc@marcchamberlin.com or just ask me for it and I will send it to you as an attachment. If you don't understand all this geek speak, no worries, just ignore this explanation and ignore the OpenPGP signature key attached to this email (it will look like gibberish if you open it) and/or ask me to explain it further if you like./)
On 2022-09-17 01:02, Marc Chamberlin wrote:
I am running OpenSuSE 15.3 x64 and am struggling with setting up Firewalld. At the moment I have lots of questions and will probably ask more questions in different threads in the near future. Right now I would like to ask why does Firewalld-config
I don't see any command named Firewalld-config or firewalld-config. I can not reproduce. -- Cheers / Saludos, Carlos E. R. (from 15.3 x86_64 at Telcontar)
On 2022-09-16 18:47, Carlos E. R. wrote:
On 2022-09-17 01:02, Marc Chamberlin wrote:
I am running OpenSuSE 15.3 x64 and am struggling with setting up Firewalld. At the moment I have lots of questions and will probably ask more questions in different threads in the near future. Right now I would like to ask why does Firewalld-config
I don't see any command named Firewalld-config or firewalld-config. I can not reproduce.
# rpm -ql firewall-config /usr/bin/firewall-config /usr/share/applications/firewall-config.desktop /usr/share/firewalld /usr/share/firewalld/firewall-config.glade /usr/share/firewalld/gtk3_chooserbutton.py /usr/share/firewalld/gtk3_niceexpander.py /usr/share/glib-2.0/schemas/org.fedoraproject.FirewallConfig.gschema.xml /usr/share/icons/hicolor/16x16/apps/firewall-config.png /usr/share/icons/hicolor/22x22/apps/firewall-config.png /usr/share/icons/hicolor/24x24/apps/firewall-config.png /usr/share/icons/hicolor/32x32/apps/firewall-config.png /usr/share/icons/hicolor/48x48/apps/firewall-config.png /usr/share/icons/hicolor/scalable/apps/firewall-config.svg /usr/share/man/man1/firewall-config.1.gz /usr/share/metainfo /usr/share/metainfo/firewall-config.appdata.xml It's a recommended install if you switch your system from susefirewall2 to firewalld. The launcher goes in Application Launcher/System.
On 17.09.2022 02:02, Marc Chamberlin wrote:
I am running OpenSuSE 15.3 x64 and am struggling with setting up Firewalld. At the moment I have lots of questions and will probably ask more questions in different threads in the near future. Right now I would like to ask why does Firewalld-config keep badgering me for the
There is no such command. The very least that is expected when you are asking questions is the correct name of a program.
root password while I am trying to work with it, and how do I get it to stop. I have set it up in the Application Menu to run as the root user,
You did exactly what? While guessing the correct program name may have been relatively easy in this case, I have no idea what steps you used to make this program "run as the root user".
and I expect it to ask me for the root password initially once, after starting up. But this constant badgering me to keep entering the root password, after different operations (for example changing the view from
So you did not set it up "to run as root" and your question is not about firewalld but about "how to set up program to run as root" in your desktop environment which you never mentioned so far. When I run firewall-config as root it never asks me password to perform individual operations.
Temporary to Permanent, changing the zone I want to work with, adding a Rich rule, or a Direct Configuration rule, etc., ) is ridiculous and very annoying. Once is enough!
Open issue on https://github.com/firewalld/firewalld/issues, explain what ridiculous behavior this program has. I am sure developer will be grateful for this helpful and constructive criticism.
On 17.09.2022 02:02, Marc Chamberlin wrote:
I am running OpenSuSE 15.3 x64 and am struggling with setting up Firewalld. At the moment I have lots of questions and will probably ask more questions in different threads in the near future. Right now I would like to ask why does Firewalld-config keep badgering me for the There is no such command. The very least that is expected when you are asking questions is the correct name of a program. Thanks Andrei - yes you are correct, I mis-typed the name - firewall-config but not so badly that it was impossible to figure out what I had intended. I will try to be perfect the next time I write,
On 9/16/22 22:37, Andrei Borzenkov wrote: promise! Sometimes my fingers do get ahead of my brain, or vice-versa.
root password while I am trying to work with it, and how do I get it to stop. I have set it up in the Application Menu to run as the root user, You did exactly what? While guessing the correct program name may have been relatively easy in this case, I have no idea what steps you used to make this program "run as the root user".
and I expect it to ask me for the root password initially once, after starting up. But this constant badgering me to keep entering the root password, after different operations (for example changing the view from So you did not set it up "to run as root" and your question is not about firewalld but about "how to set up program to run as root" in your desktop environment which you never mentioned so far.
When I run firewall-config as root it never asks me password to perform individual operations. Unless the GUI's I used, as described above, are lying to me, I have no reason to believe that I didn't set up firewall-config to run under the root user. I always launch firewall-config using the GUI interface in
Again fair enough, but again I thought I had given enough info that experienced users would understand. To be precise (caveat, I don't know the proper Linux names for some of the widgets involved) I opened the Application Menu icon (the widget in the lower left part of the kicker bar with the SuSE logo on it). I then clicked on the Settings menu and opened up a sub-menu where I found the menu item with the firewall icon that launches firewall-config. I right-clicked on it and from the pop-up selected "Edit Application". That launched a pop-up dialog for the firewall-config application properties. From there I selected the "Application" tab and clicked on the "Advanced Options" button. That brings up another dialog box titled "Advanced Options for firewall-config desktop -- Plasma" In the User box I checked the "Run as a different user" checkbox and for the "Username" I entered "root" (without the quotes of course) Hope that is clear enough, and to be honest, I don't know of any other way to set, in a persistent manner, the user that an application should run under. But in the vast sea of Linux commands, I will bet there is another way. But Linux commands are often non-intuitive, difficult to grok, and relatively undiscoverable. That is why I prefer using well designed GUI's that guide me to a solution. the Applications Menus, and on launch it immediately asks me for root's password, and again, and again, and again... while I use it.
Temporary to Permanent, changing the zone I want to work with, adding a Rich rule, or a Direct Configuration rule, etc., ) is ridiculous and very annoying. Once is enough!
Open issue on https://github.com/firewalld/firewalld/issues, explain what ridiculous behavior this program has. I am sure developer will be grateful for this helpful and constructive criticism.
I can do that, thanks for providing the link, I was unable to find it in the GUI for firewall-config. Actually my SOP (standard operating procedure) is to ask first on the mail lists to see if anyone else has encountered the problem I am having and/or perhaps have a solution. If I am told my problem is caused by a bug and to report it I will do so. Are you certain that this is a firewall-config bug, and not some sort of KDE/Plasma desktop/security/system related underlying problem? I have no idea how to narrow down where to report the bug, and perhaps the firewall-config developers will be the best starting point... Let me know if you still think so... As always thanks for your response. Marc C -- *"The Truth is out there" - Spooky* *_ _ . . . . . . _ _ . _ _ _ _ . . . . _ . . . . _ _ . _ _ _ . . . . _ _ . _ . . _ . _ _ _ _ . _ . _ . _ . _ . * Computers: the final frontier. These are the voyages of the user Marc. His mission: to explore strange new hardware. To seek out new software and new applications. To boldly go where no Marc has gone before! (/This email is digitally signed and the OpenPGP electronic signature is added as an attachment. If you know how, you can use my public key to prove this email indeed came from me and has not been modified in transit. My public key, which can be used for sending encrypted email to me also, can be found at - https://keys.openpgp.org/search?q=marc@marcchamberlin.com or just ask me for it and I will send it to you as an attachment. If you don't understand all this geek speak, no worries, just ignore this explanation and ignore the OpenPGP signature key attached to this email (it will look like gibberish if you open it) and/or ask me to explain it further if you like./)
On 2022-09-17 03:35, Darryl Gregorash wrote:
On 2022-09-16 18:47, Carlos E. R. wrote:
On 2022-09-17 01:02, Marc Chamberlin wrote:
I am running OpenSuSE 15.3 x64 and am struggling with setting up Firewalld. At the moment I have lots of questions and will probably ask more questions in different threads in the near future. Right now I would like to ask why does Firewalld-config
I don't see any command named Firewalld-config or firewalld-config. I can not reproduce.
# rpm -ql firewall-config /usr/bin/firewall-config
firewall-config, not firewalld-config. I was right, after all. -- Cheers / Saludos, Carlos E. R. (from 15.3 x86_64 at Telcontar)
On 2022-09-17 10:10, Marc Chamberlin wrote:
On 17.09.2022 02:02, Marc Chamberlin wrote:
I am running OpenSuSE 15.3 x64 and am struggling with setting up Firewalld. At the moment I have lots of questions and will probably ask more questions in different threads in the near future. Right now I would like to ask why does Firewalld-config keep badgering me for the There is no such command. The very least that is expected when you are asking questions is the correct name of a program. Thanks Andrei - yes you are correct, I mis-typed the name - firewall-config but not so badly that it was impossible to figure out what I had intended. I will try to be perfect the next time I write,
On 9/16/22 22:37, Andrei Borzenkov wrote: promise! Sometimes my fingers do get ahead of my brain, or vice-versa.
root password while I am trying to work with it, and how do I get it to stop. I have set it up in the Application Menu to run as the root user, You did exactly what? While guessing the correct program name may have been relatively easy in this case, I have no idea what steps you used to make this program "run as the root user".
Again fair enough, but again I thought I had given enough info that experienced users would understand. To be precise (caveat, I don't know the proper Linux names for some of the widgets involved) I opened the Application Menu icon (the widget in the lower left part of the kicker bar with the SuSE logo on it).
Of what desktop? Because what I have is whisker menu. Ok, you mention plasma further on.
I then clicked on the Settings menu and opened up a sub-menu where I found the menu item with the firewall icon that launches firewall-config. I right-clicked on it and from the pop-up selected "Edit Application". That launched a pop-up dialog for the firewall-config application properties. From there I selected the "Application" tab and clicked on the "Advanced Options" button. That brings up another dialog box titled "Advanced Options for firewall-config desktop -- Plasma" In the User box I checked the "Run as a different user" checkbox and for the "Username" I entered "root" (without the quotes of course)
Hope that is clear enough, and to be honest, I don't know of any other way to set, in a persistent manner, the user that an application should run under. But in the vast sea of Linux commands, I will bet there is another way. But Linux commands are often non-intuitive, difficult to grok, and relatively undiscoverable. That is why I prefer using well designed GUI's that guide me to a solution.
Ok, I see. Well, I never do that. And anyway, I'm not using Plasma. Instead, I open up a terminal or use one of the many terminals I have lying around, type "su -", give the password, and then call whatever program. When you start the program your way, you can in a terminal run "ps afxu|less -S", locate your program, and then read in the leftmost column the user that is actually running said program. It should be root. Notice that there will be other helper programs called just before to effect "su" that run as your user: cer | | \_ /bin/sh /usr/bin/xdg-su -c /sbin/yast2 timezone cer | | \_ /usr/bin/gnomesu -c /sbin/yast2 timezone root | | \_ /usr/lib/libgnomesu/gnomesu-pam-backend 13 12 root /sbin/yast2 timezone root | | \_ /bin/bash /sbin/yast2 timezone root | | \_ /usr/bin/ruby.ruby2.5 --encoding=utf-8 /usr/lib/YaST2/bin/y2start timezone qt -name YaST2 -icon yast root | | \_ /sbin/blkid -c /dev/null cer -- Cheers / Saludos, Carlos E. R. (from 15.3 x86_64 at Telcontar)
On 17.09.2022 11:10, Marc Chamberlin wrote: ...
root password while I am trying to work with it, and how do I get it to stop. I have set it up in the Application Menu to run as the root user, You did exactly what? While guessing the correct program name may have been relatively easy in this case, I have no idea what steps you used to make this program "run as the root user".
Again fair enough, but again I thought I had given enough info that experienced users would understand. To be precise (caveat, I don't know the proper Linux names for some of the widgets involved) I opened the Application Menu icon (the widget in the lower left part of the kicker bar with the SuSE logo on it). I then clicked on the Settings menu and opened up a sub-menu where I found the menu item with the firewall icon that launches firewall-config. I right-clicked on it and from the pop-up selected "Edit Application". That launched a pop-up dialog for the firewall-config application properties. From there I selected the "Application" tab and clicked on the "Advanced Options" button. That brings up another dialog box titled "Advanced Options for firewall-config desktop -- Plasma" In the User box I checked the "Run as a different user" checkbox and for the "Username" I entered "root" (without the quotes of course)
I only have KDE on a Tumbleweed VM and here these steps work as you probably expect - firewall-config starts via kdesu: user 2080 1323 3 15:49 ? 00:00:00 /usr/libexec/kf5/kdesu -u root -c /usr/bin/firewall-config root 2102 2099 18 15:49 ? 00:00:02 /usr/bin/python3 /usr/bin/firewall-config Check how your application is actually started.
On 9/17/22 04:38, Carlos E.R. wrote:
On 2022-09-17 10:10, Marc Chamberlin wrote:
On 17.09.2022 02:02, Marc Chamberlin wrote:
I am running OpenSuSE 15.3 x64 and am struggling with setting up Firewalld. At the moment I have lots of questions and will probably ask more questions in different threads in the near future. Right now I would like to ask why does Firewalld-config keep badgering me for the There is no such command. The very least that is expected when you are asking questions is the correct name of a program. Thanks Andrei - yes you are correct, I mis-typed the name - firewall-config but not so badly that it was impossible to figure out what I had intended. I will try to be perfect the next time I write,
On 9/16/22 22:37, Andrei Borzenkov wrote: promise! Sometimes my fingers do get ahead of my brain, or vice-versa.
root password while I am trying to work with it, and how do I get it to stop. I have set it up in the Application Menu to run as the root user, You did exactly what? While guessing the correct program name may have been relatively easy in this case, I have no idea what steps you used to make this program "run as the root user".
Again fair enough, but again I thought I had given enough info that experienced users would understand. To be precise (caveat, I don't know the proper Linux names for some of the widgets involved) I opened the Application Menu icon (the widget in the lower left part of the kicker bar with the SuSE logo on it).
Of what desktop?
Because what I have is whisker menu.
Ok, you mention plasma further on.
I then clicked on the Settings menu and opened up a sub-menu where I found the menu item with the firewall icon that launches firewall-config. I right-clicked on it and from the pop-up selected "Edit Application". That launched a pop-up dialog for the firewall-config application properties. From there I selected the "Application" tab and clicked on the "Advanced Options" button. That brings up another dialog box titled "Advanced Options for firewall-config desktop -- Plasma" In the User box I checked the "Run as a different user" checkbox and for the "Username" I entered "root" (without the quotes of course)
Hope that is clear enough, and to be honest, I don't know of any other way to set, in a persistent manner, the user that an application should run under. But in the vast sea of Linux commands, I will bet there is another way. But Linux commands are often non-intuitive, difficult to grok, and relatively undiscoverable. That is why I prefer using well designed GUI's that guide me to a solution.
Ok, I see. Well, I never do that. And anyway, I'm not using Plasma.
Instead, I open up a terminal or use one of the many terminals I have lying around, type "su -", give the password, and then call whatever program.
When you start the program your way, you can in a terminal run "ps afxu|less -S", locate your program, and then read in the leftmost column the user that is actually running said program. It should be root.
Notice that there will be other helper programs called just before to effect "su" that run as your user:
cer | | \_ /bin/sh /usr/bin/xdg-su -c /sbin/yast2 timezone cer | | \_ /usr/bin/gnomesu -c /sbin/yast2 timezone root | | \_ /usr/lib/libgnomesu/gnomesu-pam-backend 13 12 root /sbin/yast2 timezone root | | \_ /bin/bash /sbin/yast2 timezone root | | \_ /usr/bin/ruby.ruby2.5 --encoding=utf-8 /usr/lib/YaST2/bin/y2start timezone qt -name YaST2 -icon yast root | | \_ /sbin/blkid -c /dev/null cer
Thank you Carlos for your thoughts! Here is what I think is the relevant output from the ps command you suggested -
marc 26450 0.4 0.2 2246840 89328 ? Sl 10:06 0:02 \_ /usr/lib64/libexec/kf5/kdesu -u root -c /usr/bin/firewall-config root 26500 0.0 0.0 92096 6920 pts/21 Ss+ 10:07 0:00 \_ /usr/bin/su root -c /usr/lib64/libexec/kf5/kdesu_stub - root 26503 0.0 0.0 4772 1712 pts/21 S+ 10:07 0:00 \_ /usr/lib64/libexec/kf5/kdesu_stub root 26506 1.7 0.2 673492 80624 ? Ssl 10:07 0:09 \_ /usr/bin/python3 /usr/bin/firewall-config To my untrained eyes, it looks like firewall-config is running under the root user. Why it constantly nags me for the root password, and not others, is beyond my ability to grok.
Marc.. -- *"The Truth is out there" - Spooky* *_ _ . . . . . . _ _ . _ _ _ _ . . . . _ . . . . _ _ . _ _ _ . . . . _ _ . _ . . _ . _ _ _ _ . _ . _ . _ . _ . * Computers: the final frontier. These are the voyages of the user Marc. His mission: to explore strange new hardware. To seek out new software and new applications. To boldly go where no Marc has gone before! (/This email is digitally signed and the OpenPGP electronic signature is added as an attachment. If you know how, you can use my public key to prove this email indeed came from me and has not been modified in transit. My public key, which can be used for sending encrypted email to me also, can be found at - https://keys.openpgp.org/search?q=marc@marcchamberlin.com or just ask me for it and I will send it to you as an attachment. If you don't understand all this geek speak, no worries, just ignore this explanation and ignore the OpenPGP signature key attached to this email (it will look like gibberish if you open it) and/or ask me to explain it further if you like./)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Saturday, 2022-09-17 at 10:37 -0700, Marc Chamberlin wrote:
On 9/17/22 04:38, Carlos E.R. wrote:
On 2022-09-17 10:10, Marc Chamberlin wrote:
...
Thank you Carlos for your thoughts! Here is what I think is the relevant output from the ps command you suggested -
marc 26450 0.4 0.2 2246840 89328 ? Sl 10:06 0:02 \_ /usr/lib64/libexec/kf5/kdesu -u root -c /usr/bin/firewall-config root 26500 0.0 0.0 92096 6920 pts/21 Ss+ 10:07 0:00 \_ /usr/bin/su root -c /usr/lib64/libexec/kf5/kdesu_stub - root 26503 0.0 0.0 4772 1712 pts/21 S+ 10:07 0:00 \_ /usr/lib64/libexec/kf5/kdesu_stub root 26506 1.7 0.2 673492 80624 ? Ssl 10:07 0:09 \_ /usr/bin/python3 /usr/bin/firewall-config To my untrained eyes, it looks like firewall-config is running under the root user. Why it constantly nags me for the root password, and not others, is beyond my ability to grok.
Yes, it seems to be running correctly. Try then using it in a terminal: su - firewall-config & - -- Cheers, Carlos E. R. (from openSUSE 15.3 x86_64 at Telcontar) -----BEGIN PGP SIGNATURE----- iHoEARECADoWIQQZEb51mJKK1KpcU/W1MxgcbY1H1QUCYyYK7xwccm9iaW4ubGlz dGFzQHRlbGVmb25pY2EubmV0AAoJELUzGBxtjUfVgCAAoJTyA2cCY5/W3hoJXEyd r7ym1/GdAJ9ke5Q0Gwm+QWeNaf20BvJVRrRc+Q== =kiT7 -----END PGP SIGNATURE-----
On 9/17/22 10:59, Carlos E. R. wrote:
On Saturday, 2022-09-17 at 10:37 -0700, Marc Chamberlin wrote:
On 9/17/22 04:38, Carlos E.R. wrote:
On 2022-09-17 10:10, Marc Chamberlin wrote:
...
marc 26450 0.4 0.2 2246840 89328 ? Sl 10:06 0:02 \_ /usr/lib64/libexec/kf5/kdesu -u root -c /usr/bin/firewall-config root 26500 0.0 0.0 92096 6920 pts/21 Ss+ 10:07 0:00 \_ /usr/bin/su root -c /usr/lib64/libexec/kf5/kdesu_stub - root 26503 0.0 0.0 4772 1712 pts/21 S+ 10:07 0:00 \_ /usr/lib64/libexec/kf5/kdesu_stub root 26506 1.7 0.2 673492 80624 ? Ssl 10:07 0:09 \_ /usr/bin/python3 /usr/bin/firewall-config To my untrained eyes, it looks like firewall-config is running under
Thank you Carlos for your thoughts! Here is what I think is the relevant output from the ps command you suggested - the root user. Why it constantly nags me for the root password, and not others, is beyond my ability to grok.
Yes, it seems to be running correctly.
Try then using it in a terminal:
su - firewall-config &
Hmm that seems to work, so far no badgering me for a password every time I glance side-wise! While this may be a workaround, the question remains, why doesn't it work from the application menu, when set up to run as user root? I for one prefer well designed GUIs to command lines because GUI's can serve as a guide. Command lines require me to remember the exact spellings of the incantations (ugh, firewall-config v.s. firewalld-config for example 😛), and often a vast selection of options and parameters, formats, etc that require hours to grok, hunt, and figure out combinations that will or will not work together. I will use the command line under su - and wait for confirmation and info on where to submit a bug report, if told to do so... Marc...
-- Cheers, Carlos E. R. (from openSUSE 15.3 x86_64 at Telcontar)
-- *"The Truth is out there" - Spooky* *_ _ . . . . . . _ _ . _ _ _ _ . . . . _ . . . . _ _ . _ _ _ . . . . _ _ . _ . . _ . _ _ _ _ . _ . _ . _ . _ . * Computers: the final frontier. These are the voyages of the user Marc. His mission: to explore strange new hardware. To seek out new software and new applications. To boldly go where no Marc has gone before! (/This email is digitally signed and the OpenPGP electronic signature is added as an attachment. If you know how, you can use my public key to prove this email indeed came from me and has not been modified in transit. My public key, which can be used for sending encrypted email to me also, can be found at - https://keys.openpgp.org/search?q=marc@marcchamberlin.com or just ask me for it and I will send it to you as an attachment. If you don't understand all this geek speak, no worries, just ignore this explanation and ignore the OpenPGP signature key attached to this email (it will look like gibberish if you open it) and/or ask me to explain it further if you like./)
On 18.09.2022 01:18, Marc Chamberlin wrote:
Hmm that seems to work, so far no badgering me for a password every time I glance side-wise! While this may be a workaround, the question remains, why doesn't it work from the application menu, when set up to run as user root?
Do you have any other instances of firewall-config running at the same time? Does it work when you run the same kdesu command from terminal instead of via application launcher? Do you actually see kdesu prompt in the first place (because polkit prompt looks different)?
On 2022-09-18 00:18, Marc Chamberlin wrote:
On 9/17/22 10:59, Carlos E. R. wrote:
On Saturday, 2022-09-17 at 10:37 -0700, Marc Chamberlin wrote:
On 9/17/22 04:38, Carlos E.R. wrote:
On 2022-09-17 10:10, Marc Chamberlin wrote:
...
marc 26450 0.4 0.2 2246840 89328 ? Sl 10:06 0:02 \_ /usr/lib64/libexec/kf5/kdesu -u root -c /usr/bin/firewall-config root 26500 0.0 0.0 92096 6920 pts/21 Ss+ 10:07 0:00 \_ /usr/bin/su root -c /usr/lib64/libexec/kf5/kdesu_stub - root 26503 0.0 0.0 4772 1712 pts/21 S+ 10:07 0:00 \_ /usr/lib64/libexec/kf5/kdesu_stub root 26506 1.7 0.2 673492 80624 ? Ssl 10:07 0:09 \_ /usr/bin/python3 /usr/bin/firewall-config To my untrained eyes, it looks like firewall-config is running under
Thank you Carlos for your thoughts! Here is what I think is the relevant output from the ps command you suggested - the root user. Why it constantly nags me for the root password, and not others, is beyond my ability to grok.
Yes, it seems to be running correctly.
Try then using it in a terminal:
su - firewall-config &
Hmm that seems to work, so far no badgering me for a password every time I glance side-wise! While this may be a workaround, the question remains, why doesn't it work from the application menu, when set up to run as user root?
The funny thing is that kdesu call su. Initial command: /usr/lib64/libexec/kf5/kdesu -u root -c /usr/bin/firewall-config This calls: /usr/bin/su root -c /usr/lib64/libexec/kf5/kdesu_stub - then /usr/lib64/libexec/kf5/kdesu_stub then /usr/bin/python3 /usr/bin/firewall-config
I for one prefer well designed GUIs to command lines because GUI's can serve as a guide. Command lines require me to remember the exact spellings of the incantations (ugh, firewall-config v.s. firewalld-config for example 😛), and often a vast selection of options and parameters, formats, etc that require hours to grok, hunt, and figure out combinations that will or will not work together.
I understand, but over the years I see less problems using su that GUI equivalents. Now and then pops one.
I will use the command line under su - and wait for confirmation and info on where to submit a bug report, if told to do so...
Not knowing if it is a kdesu issue or firewalld issue... -- Cheers / Saludos, Carlos E. R. (from 15.3 x86_64 at Telcontar)
participants (5)
-
Andrei Borzenkov
-
Carlos E. R.
-
Carlos E.R.
-
Darryl Gregorash
-
Marc Chamberlin