Re: updates without password?

["Mikkel L. Ellertson" <mikkel@xxxxxxxxxxxxxxxx>]

Valent Turkovic wrote:
> 2008/2/25 Mikkel L. Ellertson <mikkel@xxxxxxxxxxxxxxxx>:
> > Valent Turkovic wrote:
> >  > 2008/2/22 Mikkel L. Ellertson <mikkel@xxxxxxxxxxxxxxxx>:
> >  >> Valent Turkovic wrote:
> >  >>  > How can I configure pup so that it doesn't ask for root password every
> >  >>  > time I need to do an update?
> >  >>  >
> >  >>  One way would be to edit /etc/pam.d/pup and change it to something like:
> >  >>
> >  >>  #%PAM-1.0
> >  >>  auth            include         config-util
> >  >>  auth            sufficient      pam_console.so
> >  >>  account         include         config-util
> >  >>  session         include         config-util
> >  >>
> >  >>  I have not tested it, but it should let the "console owner" run pup
> >  >>  without a password. If it does not work, you can try exchanging the
> >  >>  two auth statements, but this is more of a security risk. (It
> >  >>  probably does not matter for a home system.)
> >  >
> >  > I wouldn't do this if it wasn't my personal home system...
> >  >
> >  > I did this and I'm waiting for updates to let you know if it works :)
> >  >
> >  > Thank you.
> >  >
> >  > Cheers,
> >  > Valent.
> >  >
> >  >
> >  Well, if I make it:
> >  #%PAM-1.0
> >
> > auth            sufficient      pam_console.so
> >  auth            include         config-util
> >
> > account         include         config-util
> >  session         include         config-util
> >
> >  I can run pup from the command line without it asking for root's
> >  password. So unless the applet is calling something different, it
> >  should work.
> >
> >
> >
> >  Mikkel
>
> This doesn't work:
>
> # cat /etc/pam.d/pup
> #%PAM-1.0
> auth            include         config-util
> auth            sufficient      pam_console.so
> account         include         config-util
> session         include         config-util
>
>
> but this works:
>
> # cat /etc/pam.d/pup
> #%PAM-1.0
> auth            sufficient      pam_console.so
> auth            include         config-util
> account         include         config-util
> session         include         config-util
>
>
> I followed the previous post that had "auth            sufficient
> pam_console.so" as a second line but it only works if you put it as
> first line, as you wrote here...
>
> Thanks!
>
> Valent.
I am glad to hear it. I was not sure if the first form would work. 
That is why I added "If it does not work, you can try exchanging the 
two auth statements" in the first message. I guess I should have 
been clearer in that message. I know just enough about how PAM does 
things to be dangerous.

Mikkel
--

  Do not meddle in the affairs of dragons,
for thou art crunchy and taste good with Ketchup!

Attachment: signature.asc
Description: OpenPGP digital signature

-- 
fedora-list mailing list
fedora-list@xxxxxxxxxx
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list