[Bug 1310092] Review Request: cryptobone - Secure Communication Under Your Control

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



https://bugzilla.redhat.com/show_bug.cgi?id=1310092



--- Comment #15 from Ralf Senderek <fedora@xxxxxxxxxxx> ---
(In reply to Richard Shaw from comment #14)
> I'm assuming the sudogetuser in %post creates an interactive prompt?
> 
> Unfortunately the guidelines strictly forbid interactive installs, it's one
> of the biggest differences between Fedora/Redhat and Debian philosophies. 
> 
> I haven't checked yet but there should be instructions on any setup required
> before running the daemon. 

I need to find a solution for this issue, because it is an essential point.

The reason why the installation is interactive at the moment is that there
can only be one single user for the cryptobone. This user must contact the
cryptobone daemon (/usr/lib/cryptobone/cryptoboned) using only a very limited
number of well-defined programs as the root user. I am using the sudo mechanism
to allow the owner of the cryptobone to execute /usr/lib/cryptobone/cbcontrol
as root. 

The usability of the system depends on this feature, that a user can have 
controlled access to the secret message key data base via the daemon without
having to know (and use) anything but his login password.

That's why I need to set the user name in the file /etc/sudoers.d/cbcontrol
when the software is being installed. That's why I chose a GUI to ask for the
user name.

I cannot come up with an alternative to this setup. Because if the installation
was silent, some other root process must write this crucial file.
I need to exit the GUI until the user has manually created the sudo file.
It seems much more natural to me to request the user name while the package
is being installed, because at that time, the user who is in control of the
machine can make the right choice. 

So if this is absolutely a no-go, what do you suggest?

-- 
You are receiving this mail because:
You are on the CC list for the bug.
You are always notified about changes to this product and component
_______________________________________________
package-review mailing list
package-review@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/package-review




[Index of Archives]     [Fedora Legacy]     [Fedora Desktop]     [Fedora SELinux]     [Yosemite News]     [KDE Users]     [Fedora Tools]