PDA

View Full Version : How can I restrict this package: kdesu from specific group ?



User808
2nd September 2017, 10:35 PM
Hi.

Recently I installed k3b burner. It need kdesu as a dependency. This rise question of how to block this package from a specific group ?

I did this already by the following command:

sudo setfacl -m g:riskywork:--- $(which pkexec)

& for package NOT detected by "which" command, like "polkit-gnome-authentication-agent-1", I use 1st:

rpm -ql polkit-gnome

to locate it's exact location, then run following:

sudo setfacl -m g:riskywork:--- /usr/libexec/polkit-gnome-authentication-agent-1

Regarding kdesu, 1st I run:

which kdesu

to see if it detected, & it was detected in /usr/bin/kdesu

But when I run:

rpm -ql kdesu

the output was the following:


/usr/bin/kdesu
/usr/libexec/kf5/kdesu
/usr/share/doc/HTML/ca/kdesu
/usr/share/doc/HTML/ca/kdesu/index.cache.bz2
/usr/share/doc/HTML/ca/kdesu/index.docbook
/usr/share/doc/HTML/en/kdesu
/usr/share/doc/HTML/en/kdesu/index.cache.bz2
/usr/share/doc/HTML/en/kdesu/index.docbook
/usr/share/man/man1/kdesu.1.gz

The line in RED BOLD is the problem ! kdesu appear to me in 2 locations:

/usr/bin/kdesu
/usr/libexec/kf5/kdesu

So, my question is that: is it enough to run:

sudo setfacl -m g:riskywork:--- /usr/bin/kdesu

or I have, in addition, to run the following:

sudo setfacl -m g:riskywork:--- /usr/libexec/kf5/kdesu

Best