Hi Bill!
Anno domini 2024 Fri, 19 Apr 16:29:44 -0700
William Morder via tde-users scripsit:
>
> On Friday 19 April 2024 04:05:24 Dr. Nikolaus Klepp via tde-users wrote:
> > I just ran into polkit hell + network-manager - like Bill. This is how to
> > get network-manager working for your user, so you do not need to run it as
> > root:
> >
> > Check your permissions - if you get "yes" on all lines, you are good, but
> > then you won't have network-manager issues at all: $ nmcli gen permissions
> >
> > If you don't get "yes on all lines, then create this file:
> >
> > #/etc/polkit-1/rules.d/50-org.freedesktop.NetworkManager.rules
> > polkit.addRule(function(action, subject) {
> > if (action.id == "org.freedesktop.NetworkManager.network-control")
> > return "yes";
> > });
> >
> > Now check again - all lines should say "yes":
> > $ nmcli gen permissions
> >
> > Now you can do bad stuff with network connections from all your systms
> > users, but as you most likely are the only system user it should be ok:
> >
> > $ nmtui
> >
> >
> > Nik
> >
>
> For what it's worth, here is the output that I get:
>
> $ nmcli gen permissions
> PERMISSION VALUE
> org.freedesktop.NetworkManager.checkpoint-rollback auth
> org.freedesktop.NetworkManager.enable-disable-connectivity-check yes
> org.freedesktop.NetworkManager.enable-disable-network yes
> org.freedesktop.NetworkManager.enable-disable-statistics yes
> org.freedesktop.NetworkManager.enable-disable-wifi yes
> org.freedesktop.NetworkManager.enable-disable-wimax yes
> org.freedesktop.NetworkManager.enable-disable-wwan yes
> org.freedesktop.NetworkManager.network-control yes
> org.freedesktop.NetworkManager.reload auth
> org.freedesktop.NetworkManager.settings.modify.global-dns auth
> org.freedesktop.NetworkManager.settings.modify.hostname auth
> org.freedesktop.NetworkManager.settings.modify.own yes
> org.freedesktop.NetworkManager.settings.modify.system yes
> org.freedesktop.NetworkManager.sleep-wake no
> org.freedesktop.NetworkManager.wifi.scan yes
> org.freedesktop.NetworkManager.wifi.share.open yes
> org.freedesktop.NetworkManager.wifi.share.protected yes
>
> Not quite YES on every line. Don't know if auth is good or bad, and only one
> line is NO. But maybe I don't want that, anyway? It looks like that would
> connect the network on wake?
IMO auth is ok - if you really get an authentication dialog. I didn't get any and I had mst stuff set on "no". The problem with "org.freedesktop.NetworkManager.sleep-wake" is that ut's not clear what it does - and if there is any documentation to look it up I've not found it yet. For me it's totally baffeling how somebody with a sane mind would develop such a monstrosity. Most likly it's corporate stuff developed by managers and GNOMES ...
Anyway, I have these after adding the mentioned file and networkmanager behavers "sane" - which translates to "does not get in my way":
$ nmcli gen permissions
PERMISSION VALUE
org.freedesktop.NetworkManager.checkpoint-rollback ja
org.freedesktop.NetworkManager.enable-disable-connectivity-check ja
org.freedesktop.NetworkManager.enable-disable-network ja
org.freedesktop.NetworkManager.enable-disable-statistics ja
org.freedesktop.NetworkManager.enable-disable-wifi ja
org.freedesktop.NetworkManager.enable-disable-wimax ja
org.freedesktop.NetworkManager.enable-disable-wwan ja
org.freedesktop.NetworkManager.network-control ja
org.freedesktop.NetworkManager.reload ja
org.freedesktop.NetworkManager.settings.modify.global-dns ja
org.freedesktop.NetworkManager.settings.modify.hostname ja
org.freedesktop.NetworkManager.settings.modify.own ja
org.freedesktop.NetworkManager.settings.modify.system ja
org.freedesktop.NetworkManager.sleep-wake ja
org.freedesktop.NetworkManager.wifi.scan ja
org.freedesktop.NetworkManager.wifi.share.open ja
org.freedesktop.NetworkManager.wifi.share.protected ja
Nik
>
> Bill
> ____________________________________________________
> tde-users mailing list -- users@xxxxxxxxxxxxxxxxxx
> To unsubscribe send an email to users-leave@xxxxxxxxxxxxxxxxxx
> Web mail archive available at https://mail.trinitydesktop.org/mailman3/hyperkitty/list/users@xxxxxxxxxxxxxxxxxx
>
--
Please do not email me anything that you are not comfortable also sharing with the NSA, CIA ...
____________________________________________________
tde-users mailing list -- users@xxxxxxxxxxxxxxxxxx
To unsubscribe send an email to users-leave@xxxxxxxxxxxxxxxxxx
Web mail archive available at https://mail.trinitydesktop.org/mailman3/hyperkitty/list/users@xxxxxxxxxxxxxxxxxx
