On Mon, Jan 14, 2019 at 01:08:27AM +0000, David Holland wrote: > On Mon, Jan 14, 2019 at 09:42:54AM +1100, matthew green wrote: > > it would be OK if this was _read-only_ access to network > > configuration, but one should never be allowed to change the > > it unless root. > > In the long run, it's quite helpful for laptops to be able to adjust > the network configuration from a GUI on the console without having to > run GUI bits as root. We aren't in a position to do this correctly > (nor does importing the likes of polkit as a hack to allow reasoning > about being "on the console" constitute correctly) but let's not lose > track of it as a goal. > > Is there a way we could, for example, leverage the current hacks for > chowning console devices to grant access to wpa_supplicant? > > -- > David A. Holland > dholl...@netbsd.org
This does give the ability to configure wifi with a GUI w/o root or something akin to polkit, via some pkgsrc packages (There's wpa_gui, for example, it's a QT5 thing. I imagine writing other things is not much harder) I just figured this change might be controversial so we need to be honest about it happening.