[prev in list] [next in list] [prev in thread] [next in thread] 

List:       kde-commits
Subject:    [smb4k] doc: Add a remark regarding denied privilege escalation.
From:       Alexander Reinholdt <null () kde ! org>
Date:       2017-07-31 18:21:39
Message-ID: E1dcFJz-00078w-E0 () code ! kde ! org
[Download RAW message or body]

Git commit ccaecebf117f7067230d08197eee5823a4efa7e6 by Alexander Reinholdt.
Committed on 31/07/2017 at 18:20.
Pushed by areinholdt into branch 'master'.

Add a remark regarding denied privilege escalation.

M  +28   -2    doc/index.docbook

https://commits.kde.org/smb4k/ccaecebf117f7067230d08197eee5823a4efa7e6

diff --git a/doc/index.docbook b/doc/index.docbook
index 958f05d..1bc678a 100644
--- a/doc/index.docbook
+++ b/doc/index.docbook
@@ -27,8 +27,8 @@
     <holder>Alexander Reinholdt</holder>
   </copyright>
   <legalnotice>&underFDL;</legalnotice>
-  <date>2017-03-03</date>
-  <releaseinfo>&smb4k; 2.0.0</releaseinfo><!--FIXME change releaseinfo number-->
+  <date>2017-07-25</date>
+  <releaseinfo>&smb4k; 2.0.2</releaseinfo><!--FIXME change releaseinfo number-->
   <abstract>
     <para>&smb4k; is an advanced network neighborhood browser and Samba share \
mounting utility.</para>  </abstract>
@@ -1441,6 +1441,32 @@ client ipc max protocol = NT1
   
       <para>Unfortunately, this fix for &smb4k; breaks the possibility to connect to \
the network neighborhood with &dolphin; and maybe also other programs.</para>  \
</sect2> +    
+<!--
+    Using Smb4K : Special Remarks : Remarks Regarding polkit-1
+-->
+    
+    <sect2 id="special_remarks_polkit-1">
+      <title>Remarks Regarding Denied Privilege Escalation</title>
+      
+      <para>In case the mount and unmount actions fail with an \
<guilabel>AuthorizationDeniedError</guilabel>, your polkit-1 setup might need to be \
adjusted: Add a file, &eg; named <filename>10-mounthelper.rules</filename>, to the \
<filename class="directory">$PREFIX/etc/polkit-1/rules.d/</filename> directory with \
the following content:</para> +
+<programlisting>polkit.addRule(function(action, subject) {
+        if (action.id == "org.kde.smb4k.mounthelper.mount" &amp;&amp; 
+            subject.isInGroup("wheel")) {
+                return polkit.Result.YES;
+        }
+});
+
+polkit.addRule(function(action, subject) {
+        if (action.id == "org.kde.smb4k.mounthelper.unmount" &amp;&amp;
+            subject.isInGroup("wheel")) {
+                return polkit.Result.YES;
+        }
+});</programlisting>
+      
+      <para>This allows all users in the Unix group <emphasis>wheel</emphasis> to \
execute the mount and unmount action. You may adjust the group of authorized users to \
any group you need (&eg; <emphasis>sudo</emphasis> or \
<emphasis>operator</emphasis>).</para> +    </sect2>
   
 <!-- 
       Using Smb4K : Special Remarks : Remarks for FreeBSD Users 


[prev in list] [next in list] [prev in thread] [next in thread]