[Pkg-utopia-maintainers] Bug#566586: Please allow any actions by group "sudo" on the console

[Josh Triplett]

Package: policykit-1
Followup-For: Bug #566586

Upon further consideration, I think it makes the most sense to just use
the existing group "sudo" for this.  Group "sudo" already has
root-equivalent permissions in the default sudoers file, and
debian-installer already has support for doing an install with sudo
configured by default and the initial user in group sudo.  Thus, making
sudo root-equivalent in policykit as well would make sense.

To do so, install the following as a new file
/var/lib/polkit-1/localauthority/10-vendor.d/sudo.pkla :

[Admin]
Identity=unix-group:sudo
Action=*
ResultActive=yes


The same file with a different unix-group: would work if you prefer to
make a new group for this.  (However, a new group has the disadvantage
of not existing by default on new installs, which means debian-installer
can't automatically put the initial user in that group.)

Hope that helps,
Josh Triplett

-- System Information:
Debian Release: wheezy/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'stable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.38-2-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.utf8, LC_CTYPE=en_US.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages policykit-1 depends on:
ii  consolekit                    0.4.4-1    framework for defining and trackin
ii  dbus                          1.4.6-1    simple interprocess messaging syst
ii  libc6                         2.11.2-13  Embedded GNU C Library: Shared lib
ii  libexpat1                     2.0.1-7    XML parsing C library - runtime li
ii  libglib2.0-0                  2.28.4-1   The GLib library of C routines
ii  libpam0g                      1.1.2-2    Pluggable Authentication Modules l
ii  libpolkit-agent-1-0           0.101-2    PolicyKit Authentication Agent API
ii  libpolkit-backend-1-0         0.101-2    PolicyKit backend API
ii  libpolkit-gobject-1-0         0.101-2    PolicyKit Authorization API

policykit-1 recommends no packages.

policykit-1 suggests no packages.

-- no debconf information