Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

make Qubes / Whonix graphical user interface (GUI) applications that require root compatible with wayland #7538

Open
adrelanos opened this issue Jun 1, 2022 · 0 comments
Labels
C: other P: default Priority: default. Default priority for new issues, to be replaced given sufficient information. T: enhancement Type: enhancement. A new feature that does not yet exist or improvement of existing functionality.

Comments

@adrelanos
Copy link
Member

In wayland it's no longer easily possible to run lxsudo application. I found many users asking how to do that, workarounds. But I haven't found any cannoncial suggestion for developers how that should now be implemented.

This might only affect (Qubes-)Whonix as I am not sure Qubes has any GUIs that perform actions which require root rights (except probably the installer).

Affected application examples:

  • anon-connection-wizard (writing Tor configuration)
  • tor-control-panel (same as above)
  • repository-dist-wizard (writing APT sources list)

Options:

  • PolicyKit (deprecated, replaced by polkit)
  • polkit: Has itself security vulnerabilities.
  • dbus: Same as above.
  • sudo: I doubt Qubes can ever fully get rid of sudo?

Maybe Qubes has long term goals to get rid of a default installed polkit / dbus?

The new implementation should also be compatible with Qubes long term plans:
#2695

I am wary of porting to polkit or dbus, if not knowing the Linux desktop's long term vision on GUI vs root and/or how likely that these options are soon invalidated.

If there is no guidance, I'll probably implement this sudo based solution:
https://unix.stackexchange.com/a/423287/49297

@adrelanos adrelanos added P: default Priority: default. Default priority for new issues, to be replaced given sufficient information. T: bug Type: bug report. A problem or defect resulting in unintended behavior in something that exists. labels Jun 1, 2022
@andrewdavidwong andrewdavidwong added T: enhancement Type: enhancement. A new feature that does not yet exist or improvement of existing functionality. C: other and removed T: bug Type: bug report. A problem or defect resulting in unintended behavior in something that exists. labels Jun 2, 2022
@andrewdavidwong andrewdavidwong added this to the Release TBD milestone Jun 2, 2022
@andrewdavidwong andrewdavidwong removed this from the Release TBD milestone Aug 13, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
C: other P: default Priority: default. Default priority for new issues, to be replaced given sufficient information. T: enhancement Type: enhancement. A new feature that does not yet exist or improvement of existing functionality.
Projects
None yet
Development

No branches or pull requests

2 participants