Page 11 of 13

Re: Salix Xfce 15.0alpha2

Posted: 7. May 2022, 10:49
by gapan
ibka wrote: 7. May 2022, 07:06 Hi
I installed zotero and when asked if i want to install the LibreOffice add-on i got an error see the image.
Libreoffice is built without java support, so I gueexpected..is expected. At the very least we would need an openjdk package in the repos first and then I'll have to try to build it with java support.

Re: Salix Xfce 15.0alpha2

Posted: 7. May 2022, 15:35
by gapan
djemos wrote: 2. May 2022, 08:50 Copy the lines bellow and save them in a file 49-nopasswd_global.rules
Copy 49-nopasswd_global.rules file to /etc/polkit-1/rules.d/ or to /usr/share/polkit-1/rules.d/

Code: Select all

/* Allow members of the wheel group to execute any actions
 * without password authentication, similar to "sudo NOPASSWD:"
 */
polkit.addRule(function(action, subject) {
    if (subject.isInGroup("wheel")) {
        return polkit.Result.YES;
    }
});

/* Allow members of the polkitd group to execute any actions
 * without password authentication, similar to "sudo NOPASSWD:"
 */
polkit.addRule(function(action, subject) {
    if (subject.isInGroup("polkitd")) {
        return polkit.Result.YES;
    }
});
This has been checked on Salix64-alpha2.

mimosa wrote: 2. May 2022, 14:27 Thanks djemos, yes, it works. Is this secure though? What else does it allow me to do apart from opening unmounted partitions in Thunar?

Obviously it's handy to be able to do that, but I imagine there must be some reason the default behaviour is as it is.

What would make sense would be if Thunar requested a password to open them, rather than just refusing. But I can certainly live with the status quo - I just wasn't sure that was how it was meant to be.
Finally, I have a proper solution for this now.

In fact, I don't think what djemos suggests is secure. It allows anyone in the wheel group to run anything with root privileges using pkexec, without using any kind of authentication.

The whole problem started because the PAM settings that lightdm installed were incomplete and prevented any polkit agent from running, so even if polkit-gnome was installed, it didn't actually do anything. I have now updated the lightdm packages and also added a new package

So, follow the next steps:
1. Install the new salix-polkit-settings package
2. Upgrade to the new lightdm-1.30.0 (3gv) package.
3. Run dotnew and accept all new lightdm settings files
4. (optional and irrelevant to this issue) Install the qogir-icon-theme package, because it's the default in the updated lightdm-gtk-settings package
5. Reboot or log out/log in.

and this should give you a working pkexec, and you should get a prompt for your password if you are in the wheel group whenever you're trying to run anything with elevated privileges through polkit.

Re: Salix Xfce 15.0alpha2

Posted: 7. May 2022, 16:28
by ibka
Finally, I have a proper solution for this now.

In fact, I don't think what djemos suggests is secure. It allows anyone in the wheel group to run anything with root privileges using pkexec, without using any kind of authentication.

The whole problem started because the PAM settings that lightdm installed were incomplete and prevented any polkit agent from running, so even if polkit-gnome was installed, it didn't actually do anything. I have now updated the lightdm packages and also added a new package
I tested it with catfish "Refresh search index.." and that works

Re: Salix Xfce 15.0alpha2

Posted: 7. May 2022, 20:10
by Papasot
djemos wrote: 6. May 2022, 21:54 lua, freealut, alure, FreeImage
Lua version in this build works but it is 10 years old. Latest version is 5.4.4 from 13 Jan 2022, and the SLKBUILD must be very different than the old one because the structure of the library has been changed. I rewrote the SLKBUILD for the latest version (and it works) but we should probably still keep the old one for compatibility reasons and name the new one differently?
alure won't build because the SLKBUILD refers to a url that does not exist anymore. The correct one is here.
FreeImage is ok, but I modified the SLKBUILD a bit so that it will only need one change should a new version is released.

I do remember people could contribute other packages during the beta testing of 14.2. Will we have the same opportunity this time? If so, I have some pending.

Re: Salix Xfce 15.0alpha2

Posted: 11. May 2022, 12:30
by FreeArcher
Hi! I installed salix with a base packages list. It does not contain NetworkManager. I think it should be in base installation, too.

Re: Salix Xfce 15.0alpha2

Posted: 11. May 2022, 15:20
by Papasot
FreeArcher wrote: 11. May 2022, 12:30 Hi! I installed salix with a base packages list. It does not contain NetworkManager. I think it should be in base installation, too.
I agree. Installing Salix on a laptop would require Ethernet connection otherwise, just to install NetworkManager (or another application for that purpose). Given laptops are quite common nowadays, I believe basic installation should include the default network manager, in this case... NetworkManager - although I personally dislike it and would install connman instead.
However, NetworkManager would be useless on desktop computers which are usually permanently cable-connected. But better uninstalling NetworkManager on a system that will never need it than looking for a cable to install it on a laptop that desperately needs it right away.

Re: Salix Xfce 15.0alpha2

Posted: 11. May 2022, 23:01
by EricC
Papasot wrote: 11. May 2022, 15:20
FreeArcher wrote: 11. May 2022, 12:30 Hi! I installed salix with a base packages list. It does not contain NetworkManager. I think it should be in base installation, too.
I agree. Installing Salix on a laptop would require Ethernet connection otherwise, just to install NetworkManager (or another application for that purpose). Given laptops are quite common nowadays, I believe basic installation should include the default network manager, in this case... NetworkManager - although I personally dislike it and would install connman instead.
However, NetworkManager would be useless on desktop computers which are usually permanently cable-connected. But better uninstalling NetworkManager on a system that will never need it than looking for a cable to install it on a laptop that desperately needs it right away.
I agree.

Re: Salix Xfce 15.0alpha2

Posted: 12. May 2022, 21:14
by mimosa
It would be nice to have Wicd too, assuming it does not take up too much space?

NM covers more bases, but in most setups, Wicd works better.

Re: Salix Xfce 15.0alpha2

Posted: 13. May 2022, 10:07
by FreeArcher
I found out the package cmake is not installed. It seems to me all the build-packages muss be installed.

Re: Salix Xfce 15.0alpha2

Posted: 13. May 2022, 14:46
by djemos
mimosa wrote: 12. May 2022, 21:14 It would be nice to have Wicd too, assuming it does not take up too much space?

NM covers more bases, but in most setups, Wicd works better.
For me, wicd is not working anymore. It is unmaintained for years.
So i use networkmanager. If you do not like networkmanager, a good alternative is connman, http://www.slackel.gr/repo/source/extra/connman-gtk/, http://www.slackel.gr/repo/source/extra/connman/1.38/, http://www.slackel.gr/repo/source/extra/cmst/