Bug#271567: Can you disables the "locking" of the keyboard,
mouse, ...
Gustavo Noronha Silva
Gustavo Noronha Silva <kov@debian.org>, 271567@bugs.debian.org
Tue, 18 Jan 2005 23:50:45 -0200
Hey!
Em Ter, 2005-01-18 =C3=A0s 22:34 +0100, Osamu Aoki escreveu:
> First add these extra long options to "struct option long_opts[] =3D { ..=
."
>=20
> Then right before calling "gtk_init (&newargc, &newargv);" you source
I see your point (even more after reading your other post), but I think
messing up with argv is evil. I would also like to keep things codes
separated, as I don't think providing every long option on the config
file is useful, and some options should only be in the config file, like
force-grab.
> > > * All /etc/gksu.conf entries to match gnu-long-options of gksu comma=
nd-line
> > > * add new long-option: --force-grab
> >=20
> > Why add this? I don't see a reason.
>=20
> Without this, once account is compromised, it is easy to mkodify user
> menu to --allow-grab and you may unknowlingly run gksu while other
> process watching the keystroke of root password. By preventing it
> forcebly, it gives extra thin layer of protection.
Added.
> This is for a system user should not even try to run program with gksu.
> Since menu will present these program such as synaptic, people expect
> something to happen by entring password. We may give them a chance to
> break it by chance (root password may be easy one to guess.). Why not
> just tell "You are not allowed tun this program." This is more for
> administerd host. Totally wishlist item you canm ignore this time.
Will ignore for now, then.
> * add new long-option: --prompt (prompt before locking I/O)
> only is fine with me.
I understand that the user might want to override the admin setting of
--prompt, so I added optional arguments for --disable-grab, --prompt and
--sudo-mode, so the user can do --prompt=3Dno in case the admin added
"prompt =3D yes" to the config file.
> Prompting is ugly hack but certainly avoid it without Depends on
> libgnomeui. If you find a good alternative, I will be happy with that to=
o.
I'll keep trying, but prompt is there for now.
> > $ cat /etc/gksu.conf
> > # isso =C3=A9 um coment=C3=A1rio
> > disable-grab =3D yes # isso =C3=A9 outro coment=C3=A1rio
> > # mais coment=C3=A1rio
>=20
> That is pt-br. Although pt-br may be 2nd most spoken foreign language
> in Japan, I do not understand :-( (I used to hear quite a bit of pt-br
> in the shopping center in suburban Nagoya when I was living in Japan.)
=3DD
those were simply to test comments were being ignored and not destroying
the real options parsin... it basically says:
# this is a comment
disable-grab =3D yes # this is another comment
# more comment
I've made a new patch I'd like you to try out:
http://people.debian.org/~kov/gksu/patches/prompt-conf-file-enhancements.di=
ff
I hope I'll be uploading by the end of the week, after polishing this
whole thing up. Time is scarse, but I'm moving forward.
Thanks!
--=20
kov@debian.org: Gustavo Noronha <http://beterraba.no-ip.org/~kov/>
Debian: <http://www.debian.org/> * <http://www.debian-br.org/>