<html>
<head>
<base href="https://bugs.freedesktop.org/" />
</head>
<body>
<p>
<div>
<b><a class="bz_bug_link
bz_status_ASSIGNED "
title="ASSIGNED --- - networkd lacks access to hostnamed"
href="https://bugs.freedesktop.org/show_bug.cgi?id=81626#c4">Comment # 4</a>
on <a class="bz_bug_link
bz_status_ASSIGNED "
title="ASSIGNED --- - networkd lacks access to hostnamed"
href="https://bugs.freedesktop.org/show_bug.cgi?id=81626">bug 81626</a>
from <span class="vcard"><a class="email" href="mailto:dh.herrmann@gmail.com" title="David Herrmann <dh.herrmann@gmail.com>"> <span class="fn">David Herrmann</span></a>
</span></b>
<pre>I strongly discourage you from installing rules with systemd. Please see the
polkit man-page. Rules are meant exclusively for administrator-control and
non-generic system setups. A system should run just fine with an empty
/usr/share/polkit-1/rules.d/.
I don't have any better solution for this problem, though. So maybe we should
document this polkit-rule as workaround in the wiki until we find a real fix.
This problem is kind of nasty because we want to allow a non-root user to
access APIs that other non-root users cannot. But access-control has always
been under control of the API-provider, not of the API-user. Therefore,
installing rule files with networkd sounds wrong to me. It's hostnamed that
should open the API to a specific set of users.
Meh.. we really need a proper solution here.</pre>
</div>
</p>
<hr>
<span>You are receiving this mail because:</span>
<ul>
<li>You are the QA Contact for the bug.</li>
</ul>
</body>
</html>