Bug#271567: Can you disables the "locking" of the keyboard, mouse, ...

Gustavo Noronha Silva Gustavo Noronha Silva <kov@debian.org>, 271567@bugs.debian.org
Tue, 18 Jan 2005 23:50:45 -0200


Hey!

Em Ter, 2005-01-18 =C3=A0s 22:34 +0100, Osamu Aoki escreveu:
> First add these extra long options to "struct option long_opts[] =3D { ..=
."
>=20
> Then right before calling "gtk_init (&newargc, &newargv);" you source

I see your point (even more after reading your other post), but I think
messing up with argv is evil. I would also like to keep things codes
separated, as I don't think providing every long option on the config
file is useful, and some options should only be in the config file, like
force-grab.

> > >  * All /etc/gksu.conf entries to match gnu-long-options of gksu comma=
nd-line
> > >  * add new long-option: --force-grab
> >=20
> > Why add this? I don't see a reason.
>=20
> Without this, once account is compromised, it is easy to mkodify user
> menu to --allow-grab and you may unknowlingly run gksu while other
> process watching the keystroke of root password.  By preventing it
> forcebly, it gives extra thin layer of protection.

Added.

> This is for a system user should not even try to run program with gksu.
> Since menu will present these program such as synaptic, people expect
> something to happen by entring password.  We may give them a chance to
> break it by chance (root password may be easy one to guess.).  Why not
> just tell "You are not allowed tun this program."  This is more for
> administerd host.  Totally wishlist item you canm ignore this time.

Will ignore for now, then.

> * add new long-option: --prompt (prompt before locking I/O)
> only is fine with me.

I understand that the user might want to override the admin setting of
--prompt, so I added optional arguments for --disable-grab, --prompt and
--sudo-mode, so the user can do --prompt=3Dno in case the admin added
"prompt =3D yes" to the config file.

> Prompting is ugly hack but certainly avoid it without Depends on
> libgnomeui.  If you find a good alternative, I will be happy with that to=
o.

I'll keep trying, but prompt is there for now.

> > $ cat /etc/gksu.conf
> > # isso =C3=A9 um coment=C3=A1rio
> > disable-grab =3D yes # isso =C3=A9 outro coment=C3=A1rio
> > # mais coment=C3=A1rio
>=20
> That is pt-br.  Although pt-br may be 2nd most spoken foreign language
> in Japan, I do not understand :-(  (I used to hear quite a bit of pt-br
> in the shopping center in suburban Nagoya when I was living in Japan.)

=3DD

those were simply to test comments were being ignored and not destroying
the real options parsin... it basically says:

# this is a comment
disable-grab =3D yes # this is another comment
# more comment

I've made a new patch I'd like you to try out:

http://people.debian.org/~kov/gksu/patches/prompt-conf-file-enhancements.di=
ff

I hope I'll be uploading by the end of the week, after polishing this
whole thing up. Time is scarse, but I'm moving forward.

Thanks!

--=20
kov@debian.org: Gustavo Noronha <http://beterraba.no-ip.org/~kov/>
 Debian: <http://www.debian.org/>  *  <http://www.debian-br.org/>