Arch Linux

elipp

Member

Registered: 2013-12-19

Posts: 11

[SOLVED] Cinnamon multi-user privilege mess

Hey.

Ever since I added another user account to my Arch system, I've had Cinnamon prompting for administrator password for just about every little thing, e.g. mounting removable disk volumes + network manager tasks (adding WiFi networks etc.), which I'm not quite comfortable with and would indeed like to get rid of for all users (everybody's considered an administrator at this time). That said, my experience with GNU/Linux multi-user systems in general is sparse. Is this a feature or a bug? + is there a fix (even a hack will do) for this?

Last edited by elipp (2014-01-03 21:21:26)

clfarron4

Member

From: London, UK

Registered: 2013-06-28

Posts: 2,175

Website

Re: [SOLVED] Cinnamon multi-user privilege mess

It sounds like your user is not in the right groups. You'll still need to do some authentication, but not as much as you seem to describe.

---

Claire is fine.
Problems? I have dysgraphia, so clear and concise please.
My public GPG key for package signing
My x86_64 package repository

mrunion

Member

From: Jonesborough, TN

Registered: 2007-01-26

Posts: 1,938

Website

Re: [SOLVED] Cinnamon multi-user privilege mess

What groups is your user a part of? Can you list those?

---

Matt

"It is very difficult to educate the educated."

elipp

Member

Registered: 2013-12-19

Posts: 11

Re: [SOLVED] Cinnamon multi-user privilege mess

Ok. I've got two users on my system, named, say, dorothy and jack

$ cat /etc/group | grep "dorothy\|jack"

wheel:x:10:root,dorothy,jack
log:x:19:root,dorothy,jack
games:x:50:dorothy,jack
network:x:90:dorothy,jack
video:x:91:dorothy,jack
audio:x:92:dorothy,jack
optical:x:93:dorothy,jack
storage:x:95:dorothy,jack
scanner:x:96:dorothy,jack
power:x:98:dorothy,jack
users:x:100:dorothy,jack
dorothy:x:1000:
jack:x:1001:

The prompt I'm referring to is (e.g.) the one with the "Authentication is required to <do stuff>." -> select either user from drop-down menu-> enter password for said user. Getting rid of that stuff at least when using NetworkManager (nm-applet) and the removable volume automounter would be sweet.

As stated, this never happened before I actually added another user to the system, and it happens regardless of who's actually logged in.

edit: the cat /etc/group output was missing a line

Last edited by elipp (2014-01-03 17:55:39)

henk

Member

From: Weert, Netherlands

Registered: 2013-01-01

Posts: 334

Re: [SOLVED] Cinnamon multi-user privilege mess

You could add a custom rule to /etc/polkit-1/rules.d

99-custom.rules:

polkit.addRule(function(action, subject) {
		if (action.id.indexOf("org.freedesktop.udisks2.") == 0 && subject.isInGroup("wheel")) {
			return polkit.Result.YES;
		}
	}
);

This should probably work if your users are part of the wheel group.

EDIT: Fixed typo

Last edited by henk (2014-01-03 18:08:03)

elipp

Member

Registered: 2013-12-19

Posts: 11

Re: [SOLVED] Cinnamon multi-user privilege mess

@ henk: awesome! For better or worse, I added a similar polkit rule for NetworkManager:

/etc/polkit-1/rules.d/99-custom.rules

polkit.addRule(function(action, subject) {
	if (action.id.indexOf("org.freedesktop.udisks2.") == 0 && subject.isInGroup("wheel")) {
		return polkit.Result.YES;
	}
} );

polkit.addRule(function(action, subject) {
	if (action.id.indexOf("org.freedesktop.NetworkManager.") == 0 && subject.isInGroup("wheel")) { 
                return polkit.Result.YES; 
        } 
} ); 

And everything seems to be working just the way I want it. Thanks y'all.

Last edited by elipp (2014-01-03 20:56:50)