Welcome!
Important information
-- Required MX 15/16 Repository Changes
-- Information on torrent hosting changes
-- Information on MX15/16 GPG Keys
-- Spectre and Meltdown vulnerabilities

News
-- Introducing our new Website
-- MX Linux on social media: here

Current releases
-- MX-18.3 Point Release release info here
-- Migration Information to MX-18 here
-- antiX-17.4.1 release info here

New users
-- Please read this first, and don't forget to add system and hardware information to posts!
-- Here are the Forum Rules

Updating as a regular user

User avatar
b3ta
Forum Novice
Forum  Novice
Posts: 4
Joined: Mon Aug 20, 2018 4:34 am

Updating as a regular user

#1

Post by b3ta » Sat May 18, 2019 1:36 am

Hi,

I've been running MX for about a year and am now happy to move my wife and my father over to it as well, but there is one fly in the ointment: MX-Updater requires the root password to do any updates, and there is zero chance I'm going to give that to either — the reason I have them on Linux is to minimise their chance of tanking the system while maximising my ability to support them. This has been working fine for years.

I had a look at how you've coded it all, seeking one place I could prepend gksudo, but I'd be fighting the results of said updates, so that would be under-clever on my part.

So, with all that back story, could you come to the same conclusion as antiX and use gksudo when doing an update?

8-)
John

skidoo
Forum Guide
Forum Guide
Posts: 1417
Joined: Tue Sep 22, 2015 6:56 pm

Re: Updating as a regular user

#2

Post by skidoo » Sat May 18, 2019 3:12 am

You can quickly edit the policy on your system(s).
Visit /usr/share/polkit-1/actions/ directory and open in text editor the actions files related to mx-update.
For whichever actions you wish a user to be able to supply his/her own password, change "auth_admin" to "auth_self"

refer to the manpage for polkit to see the other available options (beyond "auth_admin" and "auth_self")
man polkit

User avatar
kmathern
Forum Veteran
Forum Veteran
Posts: 9590
Joined: Wed Jul 12, 2006 2:26 pm

Re: Updating as a regular user

#3

Post by kmathern » Sat May 18, 2019 9:22 am

You can quickly edit the policy on your system(s).
Visit /usr/share/polkit-1/actions/ directory and open in text editor the actions files related to mx-update.
For whichever actions you wish a user to be able to supply his/her own password, change "auth_admin" to "auth_self"
The sed command below will change all mx-updater authentications to "auth_self". An update to the apt-notifier package will change them back to "auth_admin" though.

Code: Select all

sudo sed -i 's auth_admin auth_self ' /usr/share/polkit-1/actions/*mx-updater*.policy


skidoo wrote:
Sat May 18, 2019 3:12 am
refer to the manpage for polkit to see the other available options (beyond "auth_admin" and "auth_self")
man polkit
Thanks, I wasn't aware of the other options. I might change the policy files for viewing the unattended-upgrades logs & dpkg logs to "yes", which would eliminate the password requests for those actions. I've never liked requiring users to have to enter a password just to view log files.

User avatar
fehlix
Forum Veteran
Forum Veteran
Posts: 3976
Joined: Wed Apr 11, 2018 5:09 pm

Re: Updating as a regular user

#4

Post by fehlix » Sat May 18, 2019 10:33 am

kmathern wrote:
Sat May 18, 2019 9:22 am
I might change the policy files for viewing the unattended-upgrades logs & dpkg logs to "yes", which would eliminate the password requests for those actions. I've never liked requiring users to have to enter a password just to view log files.
Nice idea. I tried also auth_self_keep, but seems to have no effect in resp. of remembering authentication for 5 minutes, it bahaves like auth_self, i.e. re-entering user password always required.
Gigabyte Z77M-D3H, Intel Xeon E3-1240 V2 (Quad core), 32GB RAM,
GeForce GTX 770, Samsung SSD 850 EVO 500GB, Seagate Barracuda 4TB

User avatar
asqwerth
Forum Veteran
Forum Veteran
Posts: 4584
Joined: Sun May 27, 2007 5:37 am

Re: Updating as a regular user

#5

Post by asqwerth » Sat May 18, 2019 11:02 am

section 3.2.1 of the manual on mx-updater:
An option for unattended upgrade is available in Preferences. It happens in the background, and neither add new or remove existing packages
It won't update packages where new dependencies are installed or existing packages removed, but most updates can take place without them having to do anything.

You can sort out the rest when you're free.
Desktop: Intel i5-4460, 16GB RAM, Intel integrated graphics
Clevo N130WU-based Ultrabook: Intel i7-8550U (Kaby Lake R), 16GB RAM, Intel integrated graphics (UEFI)
ASUS X42D laptop: AMD Phenom II, 6GB RAM, Mobility Radeon HD 5400

User avatar
b3ta
Forum Novice
Forum  Novice
Posts: 4
Joined: Mon Aug 20, 2018 4:34 am

Re: Updating as a regular user

#6

Post by b3ta » Sat May 18, 2019 12:39 pm

Thanks for the excellent replies.

Perhaps let a /usr/local/... version take precedence? That does of course raise the problem of how to deal with updates which introduce new functionality which the local version does not cater for: maybe a file with only the auth_ settings...?

@kmathern: I ended up writing almost the identical sed line as a script to run after updates: created a backup, didn't use space as delimiter, and chose to do .../org.mxlinux.pkexec* as it's a single-user machine.

Thanks again for the cogent replies. I've been enjoying being a lurker.

---

An observation: for a privacy-minded community, why is the forum even available in HTTP?

User avatar
b3ta
Forum Novice
Forum  Novice
Posts: 4
Joined: Mon Aug 20, 2018 4:34 am

Re: Updating as a regular user

#7

Post by b3ta » Sat May 18, 2019 12:57 pm

Same edit is required to /usr/share/polkit-1/actions/com.ubuntu.pkexec.synaptic.policy

skidoo
Forum Guide
Forum Guide
Posts: 1417
Joined: Tue Sep 22, 2015 6:56 pm

Re: Updating as a regular user

#8

Post by skidoo » Sat May 18, 2019 2:04 pm

com.ubuntu.pkexec.synaptic.policy
^--- that's a good point. In terminal, type
pkaction
and you may find a few additional handpicked actions that you'll want to customize.
Perhaps let a /usr/local/... version take precedence?
The possibility to do so isn't mentioned in the specs
https://www.freedesktop.org/software/po ... kit.8.html and I had the impression (per the pklocalauthority manpage) that any customizations must reside in /etc/policykit-1/
An update to the apt-notifier package will change them back to "auth_admin"
kmathern, I've only readabout customizations ~~ haven't attempted to put 'em into practice.
Here's a howto example which also mentions placement in /etc/policykit-1/
http://www.odi.ch/weblog/posting.php?posting=696
Hopefully this means that any distro-supplied (aka vendor?) custom /etc/polkit-1/rules.d/*.rules
will be preserved, not overwritten, during package updates
unless you target those known, individually-named files via a preinst//postrm packaging script.

User avatar
kmathern
Forum Veteran
Forum Veteran
Posts: 9590
Joined: Wed Jul 12, 2006 2:26 pm

Re: Updating as a regular user

#9

Post by kmathern » Sat May 18, 2019 4:56 pm

skidoo wrote:
Sat May 18, 2019 2:04 pm
kmathern, I've only readabout customizations ~~ haven't attempted to put 'em into practice.
Here's a howto example which also mentions placement in /etc/policykit-1/
http://www.odi.ch/weblog/posting.php?posting=696
Hopefully this means that any distro-supplied (aka vendor?) custom /etc/polkit-1/rules.d/*.rules
will be preserved, not overwritten, during package updates
unless you target those known, individually-named files via a preinst//postrm packaging script.

I did the customizations a little differently. I copied the org.mxlinux.pkexec.mx-updater-*.policy files I wanted to customize over to 00-org.mxlinux.pkexec.mx-updater-*.policy files and made the changes/customizations to them.

Code: Select all

$ ls -1 /usr/share/polkit-1/actions/*mx-updater*.policy
/usr/share/polkit-1/actions/00-org.mxlinux.pkexec.mx-updater-view-auto-update-dpkg-logs.policy
/usr/share/polkit-1/actions/00-org.mxlinux.pkexec.mx-updater-view-auto-update-logs.policy
/usr/share/polkit-1/actions/org.mxlinux.pkexec.mx-updater-basic-upgrade.policy
/usr/share/polkit-1/actions/org.mxlinux.pkexec.mx-updater-disable-auto-update.policy
/usr/share/polkit-1/actions/org.mxlinux.pkexec.mx-updater-enable-auto-update.policy
/usr/share/polkit-1/actions/org.mxlinux.pkexec.mx-updater-full-upgrade.policy
/usr/share/polkit-1/actions/org.mxlinux.pkexec.mx-updater-reload.policy
/usr/share/polkit-1/actions/org.mxlinux.pkexec.mx-updater-view-auto-update-dpkg-logs.policy
/usr/share/polkit-1/actions/org.mxlinux.pkexec.mx-updater-view-auto-update-logs.policy

The 00-* policy files seem to take precedence over the original ones installed with the apt-notifier package and they won't get overwritten during package updates.

User avatar
manyroads
Forum Guide
Forum Guide
Posts: 1496
Joined: Sat Jun 30, 2018 6:33 pm

Re: Updating as a regular user

#10

Post by manyroads » Sat May 18, 2019 5:42 pm

I know my solution suggestion is probably too simple to be really useful (I'm a geek and fully understand...) . But my 90+ year old dad and 64 year old sister do really fine with me having just set the update function to automatic (in MX Updater preferences). Every 5 or 6 weeks I check things and make sure they haven't done anything catastrophic. In the last year everything is smooth as glass... :eek: :number1:
"Don't believe everything you think."
Pax vobiscum,
Mark Rabideau - http://many-roads.com - Reg. Linux User #449130
MX-18.3 kernel: 5.1.5-antix.1-amd64-smp x86_6
Dell Latitude E5470
Intel i5-6300U~ 24GB RAM ~ SSD: 1TB
Coding since 1974

Post Reply

Return to “Software / Configuration”