Mailinglist Archive: opensuse-bugs (4067 mails)

< Previous Next >
[Bug 704997] Users can hibernate system as non-root

https://bugzilla.novell.com/show_bug.cgi?id=704997

https://bugzilla.novell.com/show_bug.cgi?id=704997#c9


--- Comment #9 from hou ghi <houghi@xxxxxxxxxx> 2011-08-29 18:45:05 UTC ---
(In reply to comment #8)
I suppose you need to set org.freedesktop.upower.hibernate to auth_admin. That
should be desktop neutral.

That would be best, because then GDM, XDM and others should also follow the
rules.

(In reply to comment #8)

Sensible choices are probably

auth_admin:auth_admin:auth_admin (=> require authentication always)
yes:yes:yes (=> allow anyone to perform the action)
auth_admin:auth_admin:yes (=> user on the acive console is allowed)

The last as default would be preferred as it is only in certain situations
where this will be unwanted.

The sysconfig value only exists for legacy reasons. It should be
removed and only polkit actions be used IMO. That requires kdm to
support polkit though.

Alternatively don't allow to configure individual polkit settings at all but
only allow to switch the profile (standard vs restrictive).

As long as it is easy to find and settings are consistent, from a opensuse-user
point it does not matter. YaST would be great. If it is in Security and Users
or in the /etc/sysconfig Editor does not matter.

--
Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.

< Previous Next >