LinuxQuestions.org
Welcome to the most active Linux Forum on the web.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Bodhi
User Name
Password
Bodhi This forum is for the discussion of Bodhi Linux.

Notices


Reply
  Search this Thread
Old 01-13-2020, 06:00 AM   #1
Kiezel
Member
 
Registered: Jan 2020
Posts: 106

Rep: Reputation: 86
Potential problem with esudo replacing pkexec


There might be a problem with Bodhi's implementation of esudo replacing pkexec.

Use case: I've installed an alternative set of update tools from a PPA, that's owned by a former member of the official Linux Mint developer team:
https://easylinuxtipsproject.blogspo...buntuplus.html

They install fine, as expected. However, soon installing updates with that alternative updater fails. I've asked the PPA developer to look into it, which he was kind enough to do.

According to him, the esudo replacement of pkexec in Bodhi, breaks on the first update to or reinstall of the policykit-1 package. Which, again according to him, can only be fixed in the distribution itself.

Could you perhaps take a look into that?

A reasonable workaround would probably be, to install a polkit authentication agent in Bodhi. Which packages do I need to apt-get for that?

Last edited by Kiezel; 01-13-2020 at 09:02 AM.
 
Old 01-13-2020, 12:24 PM   #2
Kiezel
Member
 
Registered: Jan 2020
Posts: 106

Original Poster
Rep: Reputation: 86
Update: I'm testing this:

Code:
sudo rm -v /usr/bin/pkexec
Followed by:

Code:
sudo ln -s /usr/bin/esudo /usr/bin/pkexec
...which (so far) appears to work as intended.
 
Old 01-13-2020, 04:12 PM   #3
rbtylee
Bodhi Developer
 
Registered: Jun 2018
Location: Ladson, SC US
Distribution: Bodhi
Posts: 454

Rep: Reputation: 437Reputation: 437Reputation: 437Reputation: 437Reputation: 437
You should read my post esudo changes.

eSudo's introduction in Bodhi was not something I personally did and I always removed it anyway, regardless of the fact removing it used to be a bit of a hassle. But anyway if Bodhi 5.0 is up to date and ya install and use polkit authentication agent as suggested in the above forum post ya should be good to go.
 
1 members found this post helpful.
Old 01-14-2020, 04:27 AM   #4
Kiezel
Member
 
Registered: Jan 2020
Posts: 106

Original Poster
Rep: Reputation: 86
Thanks! Will this fix be included in the next Bodhi release?
 
Old 01-14-2020, 04:52 AM   #5
rbtylee
Bodhi Developer
 
Registered: Jun 2018
Location: Ladson, SC US
Distribution: Bodhi
Posts: 454

Rep: Reputation: 437Reputation: 437Reputation: 437Reputation: 437Reputation: 437
Quote:
Originally Posted by Kiezel View Post
Thanks! Will this fix be included in the next Bodhi release?
Yes of course. Moksha,if updated to latest version, already adds policykit-1-gnome to startup on first boot. You prob didn't notice that. After installing BL 5.0 your first boot is using the old version of moksha and then unless you delete your ~/.e folder every other reboot Moksha will be using your configuration from ~/.e and will not recreate the ~/.e folder or change apps in startup.

But our next release will no longer use esudo for pkexec and will use a polkit authentication agent for pkexec as it should. Maybe in time we will provide native e/efl code for the polkit authentication agent, I would like to. I am unsure how difficult that would be and I don't want to do it and add it to the repos unless I 'get it right.' It is however in my plans and on our list of stuff to do. Considering the possible difficulty of that, that task prob falls solely on me, unless we get more capable devs willing to help.
 
1 members found this post helpful.
Old 01-14-2020, 05:36 AM   #6
Kiezel
Member
 
Registered: Jan 2020
Posts: 106

Original Poster
Rep: Reputation: 86
Good to hear!

Last edited by Kiezel; 01-14-2020 at 08:53 AM.
 
1 members found this post helpful.
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
sudo/pkexec versus sandboxes bali Linux - Security 6 09-17-2018 10:45 AM
Potential Exploit? Potential Backdoor? Strange code in '/usr/android/adb' Package: android-tools-adb slicktrail Linux - Security 1 12-05-2016 05:05 AM
Ha ha, small and limp just reinvented terminal/bash/apt/pkexec yadda,yadda! Steven_G General 5 12-24-2015 04:18 AM
Mutliple wheel users and pkexec authentication upnort Linux - Security 2 12-22-2014 01:12 PM
Crontab for pkexec as root spyzer.abhishek0 Linux - Newbie 3 07-25-2011 05:53 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Bodhi

All times are GMT -5. The time now is 07:37 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration