Re: Enabling package installation for non-root users

2012-03-14 Thread Josselin Mouette
Le dimanche 04 mars 2012 à 01:39 +0100, David Weinehall a écrit : On Mon, Feb 27, 2012 at 09:32:04AM +0100, Josselin Mouette wrote: This should clearly be a whitelist. I don’t think there’s real use for a blacklist, it is too dangerous. Wouldn't both be best? Let's say the whitelist

Re: Enabling package installation for non-root users

2012-03-03 Thread David Weinehall
On Mon, Feb 27, 2012 at 09:32:04AM +0100, Josselin Mouette wrote: Le lundi 27 février 2012 à 05:19 +0100, Sebastian Heinlein a écrit : Am Donnerstag, den 23.02.2012, 18:46 +0200 schrieb Timo Juhani Lindfors: Josselin Mouette j...@debian.org writes: (We even have a patch to allow only

Re: Enabling package installation for non-root users

2012-02-27 Thread Josselin Mouette
Le lundi 27 février 2012 à 05:19 +0100, Sebastian Heinlein a écrit : Am Donnerstag, den 23.02.2012, 18:46 +0200 schrieb Timo Juhani Lindfors: Josselin Mouette j...@debian.org writes: (We even have a patch to allow only a subset of packages but it is unfortunately a bit too hackish.)

Re: Enabling package installation for non-root users

2012-02-26 Thread Sebastian Heinlein
Am Donnerstag, den 23.02.2012, 18:46 +0200 schrieb Timo Juhani Lindfors: Josselin Mouette j...@debian.org writes: (We even have a patch to allow only a subset of packages but it is unfortunately a bit too hackish.) Would be really nice to have some standard sets available (think browser

Re: Enabling package installation for non-root users

2012-02-26 Thread Timo Juhani Lindfors
Sebastian Heinlein de...@glatzor.de writes: APTDAEMON::Restrict::Users { joe, jane; }; APTDAEMON::Restrict::Tags::Allow { interface::shell; }; APTDAEMON::Restrict::Tags::Deny { interface::daemon; }; Would this be of any help to you? Sounds like a great start. -- To UNSUBSCRIBE, email to

Re: Enabling package installation for non-root users

2012-02-26 Thread Philip Hands
On Thu, 23 Feb 2012 16:32:18 +0100, John Paul Adrian Glaubitz glaub...@physik.fu-berlin.de wrote: Hi, I'm looking for a way to enable non-root users to install packages on their local machines, but not removing/purging them. Well, perhaps an option (which also allows removal) is what used

Re: Enabling package installation for non-root users

2012-02-26 Thread Sebastian Heinlein
Am Donnerstag, den 23.02.2012, 18:46 +0200 schrieb Timo Juhani Lindfors: Josselin Mouette j...@debian.org writes: (We even have a patch to allow only a subset of packages but it is unfortunately a bit too hackish.) Would be really nice to have some standard sets available (think browser

Enabling package installation for non-root users

2012-02-23 Thread John Paul Adrian Glaubitz
Hi, I'm looking for a way to enable non-root users to install packages on their local machines, but not removing/purging them. I know that probably the proper way to achieve that is PackageKit, but I was wondering if there is also a way to allow the use of apt-get, with constraints for certain

Re: Enabling package installation for non-root users

2012-02-23 Thread Neil Williams
On Thu, 23 Feb 2012 16:32:18 +0100 John Paul Adrian Glaubitz glaub...@physik.fu-berlin.de wrote: Hi, I'm looking for a way to enable non-root users to install packages on their local machines, but not removing/purging them. At which point, you lose anyway because sometimes package

Re: Enabling package installation for non-root users

2012-02-23 Thread Josselin Mouette
Hi, Le jeudi 23 février 2012 à 16:32 +0100, John Paul Adrian Glaubitz a écrit : I'm looking for a way to enable non-root users to install packages on their local machines, but not removing/purging them. I know that probably the proper way to achieve that is PackageKit, but I was wondering

Re: Enabling package installation for non-root users

2012-02-23 Thread Timo Juhani Lindfors
Josselin Mouette j...@debian.org writes: (We even have a patch to allow only a subset of packages but it is unfortunately a bit too hackish.) Would be really nice to have some standard sets available (think browser extensions, command-line tools that ship no services or suid binaries). I'd

Re: Enabling package installation for non-root users

2012-02-23 Thread Matthias Klumpp
2012/2/23 Timo Juhani Lindfors timo.lindf...@iki.fi: Josselin Mouette j...@debian.org writes: (We even have a patch to allow only a subset of packages but it is unfortunately a bit too hackish.) Would be really nice to have some standard sets available (think browser extensions, command-line

Re: Enabling package installation for non-root users

2012-02-23 Thread Josselin Mouette
Le jeudi 23 février 2012 à 18:57 +0100, Matthias Klumpp a écrit : You can change the PK settings using PolicyKit. Limiting installations to a group of packages is not possible at time. (and not planned - what if a package in group X requires a package of group Y? Users could easily work

Re: Enabling package installation for non-root users

2012-02-23 Thread Matthias Klumpp
2012/2/23 Josselin Mouette j...@debian.org: Le jeudi 23 février 2012 à 18:57 +0100, Matthias Klumpp a écrit : You can change the PK settings using PolicyKit. Limiting installations to a group of packages is not possible at time. (and not planned - what if a package in group X requires a