View Full Version : How can I restrict this package: kdesu from specific group ?

2nd September 2017, 10:35 PM

Recently I installed k3b burner. It need kdesu as a dependency. This rise question of how to block this package from a specific group ?

I did this already by the following command:

sudo setfacl -m g:riskywork:--- $(which pkexec)

& for package NOT detected by "which" command, like "polkit-gnome-authentication-agent-1", I use 1st:

rpm -ql polkit-gnome

to locate it's exact location, then run following:

sudo setfacl -m g:riskywork:--- /usr/libexec/polkit-gnome-authentication-agent-1

Regarding kdesu, 1st I run:

which kdesu

to see if it detected, & it was detected in /usr/bin/kdesu

But when I run:

rpm -ql kdesu

the output was the following:


The line in RED BOLD is the problem ! kdesu appear to me in 2 locations:


So, my question is that: is it enough to run:

sudo setfacl -m g:riskywork:--- /usr/bin/kdesu

or I have, in addition, to run the following:

sudo setfacl -m g:riskywork:--- /usr/libexec/kf5/kdesu