Mátyás Selmeci wrote:
> This may be a long shot, but I am interested in repackaging some
> RPMs (for example, some of the Globus packages in EPEL, as well as
> grid software that my group builds) such that the software in them
> may be installed by unprivileged users, or into a non-standard
> location such as an NFS share. I'd like to use existing RPMs,
> preferably binaries, as a starting point to avoid duplicating work.
> (Naturally a lot of post-install scripting would be needed to fix
> binaries such that they'd work with the path they were installed
> into).
For the "unprivileged users" part, it is possible for the admin to give out
the org.freedesktop.packagekit.package-install PolicyKit permission, then
users can install (but not remove) trusted packages (packages signed with
GPG keys already known to the system) systemwide using gnome-packagekit or
Apper. But of course, there are drawbacks to that, which is why it's not the
default (in fact, it had been the default for a short moment in Fedora 12
and got dropped due to user uproar), and so admins will generally not enable
that, unfortunately. :-( In addition, it also only works for third-party
repositories if the admin imported the key for them, and at that point he
might as well install the packages, too. (There's also an
org.freedesktop.packagekit.package-install-untrusted permission, but as an
admin, you'd have to be insane to give that permission to your users, it's
essentially the same as giving them root access, because they can craft any
package running any arbitrary code and install it with that permission.) So
in your case, it's not all that helpful, unfortunately. But I still wanted
to point out the possibility.
Kevin Kofler
--
devel mailing list
devel@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/devel
