Mini-proposal for Elevated User Privileges in menu-spec

[Sean Middleditch]

On Sun, 2005-05-15 at 15:40 +0200, Waldo Bastian wrote:
> KDE supports the following two fields:
> 
> X-KDE-SubstituteUID=true|false, with false as default
> X-KDE-Username=<username>, with root as default
> 
> Would be trivial to add support for a standardized key as well.
> I'm not aware of anyone actually using X-KDE-Username for anything other than 
> root, so I don't think it's very important to include that.
> 
> Something like RootRequired=yes|no|optional would work for me. I suggest you 
> make a patch for the desktop-entry spec and send it to this list. See 
> http://www.freedesktop.org/wiki/Standards/desktop-entry-spec

I would also suggest adding fields for a role, as used by SELinux,
certain TrustedBSD and TrustedSolaris mechanisms, and so on.  A tool
might not need to be root, but it might need to switch to a sysadm_r
role or whatnot.

> 
> Cheers,
> Waldo
> _______________________________________________
> xdg mailing list
> xdg at lists.freedesktop.org
> http://lists.freedesktop.org/mailman/listinfo/xdg