Write a desktop application that has sudo privlages?

The.Jackal · 2013-03-30 12:40:37

Hi,
I'm writing a GUI frontend to Netcfg in C++ and am nearing 1.0 version. The problem is that since netcfg needs root privlages, right now it's nessesery to run it using sudo. I'd like the user to be able to run it without sudo, for example in startup scripts. I know it's possible, networkmanger wicd archassistant and every other program of simular nature does it. Can someone point me in the right direction? I searched in google but did not find a good solution.

parazyd · 2013-03-30 12:46:11

The sudoers file can be edited to allow specific applications run without asking for a password.

The.Jackal · 2013-03-30 12:48:34

Yea I know, but how come all other programs do this automaticly? I don't want to ask users to start editing files.

parazyd · 2013-03-30 12:50:16

Which ones do escalate privileges by themselves?

The.Jackal · 2013-03-30 12:53:39

wicd and networkmanager for example start without asking the user for the password. They somehow remember it.

Xyne · 2013-03-30 12:56:27

If the frontend is a binary executable (as it must be in this case if you are writing it in C++) then you can use the setuid flag:
https://en.wikipedia.org/wiki/Setuid
http://www.techrepublic.com/blog/securi … urity/2857

For reference, if it is a script (Bash, Python, Lua, etc.) then setuid will not work because it is not the script but rather the interpreter that is executed.

This may also be of interest:
https://wiki.archlinux.org/index.php/Us … _Of_Setuid

Incidentally, I believe that netcfg will soon be replaced by netctl so you may wish to redirect your efforts now to avoid wasting them.

parazyd · 2013-03-30 12:56:30

They're both open-source tools, why don't you check the source code.

Sorry, but, applications can't "remember" your passwords unless you type them in.

The.Jackal · 2013-03-30 12:59:00

Xyne wrote:

If the frontend is a binary executable (as it must be in this case if you are writing it in C++) then you can use the setuid flag:
https://en.wikipedia.org/wiki/Setuid
http://www.techrepublic.com/blog/securi … urity/2857
For reference, if it is a script (Bash, Python, Lua, etc.) then setuid will not work because it is not the script but rather the interpreter that is executed.
This may also be of interest:
https://wiki.archlinux.org/index.php/Us … _Of_Setuid

Incidentally, I believe that netcfg will soon be replaced by netctl so you may wish to redirect your efforts now to avoid wasting them.

Xyne that is most helpfull, thank you. And don't worry, I'm mainly doing it to learn C++ and Gtkmm. Worst case scenerio I change the system calls to netcfg and convery my project (-:

progandy · 2013-03-30 13:01:26

networkmanager uses a client application that communicates via dbus (using polkit permissions) with a system service.

ewaller · 2013-03-30 16:36:21

The.Jackal wrote:

[...And don't worry, I'm mainly doing it to learn C++ and Gtkmm. .

Having been bitten (twice) by this, I want to emphasize to anyone reads this, that the setuid *WILL NOT* work with scripts -- by design.

Last edited by ewaller (2013-03-30 16:36:40)

Arch Linux

#1 2013-03-30 12:40:37

Write a desktop application that has sudo privlages?

#2 2013-03-30 12:46:11

Re: Write a desktop application that has sudo privlages?

#3 2013-03-30 12:48:34

Re: Write a desktop application that has sudo privlages?

#4 2013-03-30 12:50:16

Re: Write a desktop application that has sudo privlages?

#5 2013-03-30 12:53:39

Re: Write a desktop application that has sudo privlages?

#6 2013-03-30 12:56:27

Re: Write a desktop application that has sudo privlages?

#7 2013-03-30 12:56:30

Re: Write a desktop application that has sudo privlages?

#8 2013-03-30 12:59:00

Re: Write a desktop application that has sudo privlages?

#9 2013-03-30 13:01:26

Re: Write a desktop application that has sudo privlages?

#10 2013-03-30 16:36:21

Re: Write a desktop application that has sudo privlages?

Board footer