[SOLVED] Force require root password when installing apps from pamac

light9876 · 2020-04-21 10:21:14

I would like the root passowrd to be required whenever a user tries to install apps.

Currently when the user tries installing apps either through

sudo pacman -S <package>

Or by using the pacman GUI, only the user password is required.

I tried uncommenting this line:

Defaults targetpw

In the file:

/etc/sudoers

This worked when using the sudo command. But when using the GUI, the user is asked for his own password, not the root password. Any ideas please?

Last edited by light9876 (2020-04-27 10:34:30)

ajayyadav2412 · 2020-04-21 10:40:31

If you want to use root password you need to be logged in as root. If you use other account that root then that account should not be having sudo permissions

Slithery · 2020-04-21 10:41:26

Pacman doesn't have a GUI.

How did you install Arch?

light9876 · 2020-04-21 11:36:03

I installed Arch from the installer here https://www.archlinux.org/download/

I'm sorry I meant pamac-manager; not pacman.

Then how can I restrict user from installing applications using pamac-manager? Is uninstalling it the only option?

EDIT:
Running the command

pacman -S vlc

From command line does not work, it does not even ask for the user's password. But installing vlc from pamac-manager, asks for the user's password.

Last edited by light9876 (2020-04-21 11:39:23)

V1del · 2020-04-21 11:40:36

Pamac likely has defined polkit rules, or rather utilizes the default polkit rule to allow all users of the wheel group to access privileged actions: https://wiki.archlinux.org/index.php/Polkit that entire page should be read if interested in the topic but specifically pay attention to: https://wiki.archlinux.org/index.php/Po … identities as it explains how to change this exact behaviour you are asking about.

Last edited by V1del (2020-04-21 11:41:10)

light9876 · 2020-04-21 12:55:21

Thank you so much V1del, it worked.

I only added the file:

/etc/polkit-1/rules.d/49-rootpw_global.rules

Containing:

/* Always authenticate Admins by prompting for the root
 * password, similar to the rootpw option in sudo
 */
polkit.addAdminRule(function(action, subject) {
    return ["unix-user:root"];
});

Last edited by light9876 (2020-04-21 12:55:36)

2ManyDogs · 2020-04-21 13:06:09

Please remember to mark your thread [SOLVED] (edit the title of your first post).

Trilby · 2020-04-21 13:47:24

I'm a bit confused by - and concerned about - the goal.

You apparently have users that are in the wheel group (or otherwise allowed to use sudo) but you don't want them to be able to install packages. Limiting pacman and pamac to only accepting the root password will not acheive this goal. If users are in the wheel group and/or can use sudo, they can simply change the root password then install whatever they want.

seth · 2020-04-21 14:06:31

They can also just launch a su shell ;-)

However, he already contained sudo by enabling targetpw and "pkexec bash" gets me https://xkcd.com/838/

WorMzy · 2020-04-21 14:31:06

It makes me sad that Randall runs 'sudo su' instead of 'sudo -i'.

seth · 2020-04-21 14:57:46

According to https://www.explainxkcd.com/wiki/index.php/Rob that's Black Hats roommate, so he's probably deliberately side-stepping some prank…

SurlyCycler · 2020-04-22 16:53:05

oops never mind LOL

Last edited by SurlyCycler (2020-04-22 17:20:12)

eschwartz · 2020-04-22 19:04:37

WorMzy wrote:

It makes me sad that Randall runs 'sudo su' instead of 'sudo -i'.

Those two commands do have different behavior though, for example the results of `env`, sudo -i performs a login as root vs. just spawning a shell with a different EUID (sudo bash would be more comparable, and sudo -i is closer to sudo su --login which would incidentally wipe $SUDO_*).

Arch Linux

#1 2020-04-21 10:21:14

[SOLVED] Force require root password when installing apps from pamac

#2 2020-04-21 10:40:31

Re: [SOLVED] Force require root password when installing apps from pamac

#3 2020-04-21 10:41:26

Re: [SOLVED] Force require root password when installing apps from pamac

#4 2020-04-21 11:36:03

Re: [SOLVED] Force require root password when installing apps from pamac

#5 2020-04-21 11:40:36

Re: [SOLVED] Force require root password when installing apps from pamac

#6 2020-04-21 12:55:21

Re: [SOLVED] Force require root password when installing apps from pamac

#7 2020-04-21 13:06:09

Re: [SOLVED] Force require root password when installing apps from pamac

#8 2020-04-21 13:47:24

Re: [SOLVED] Force require root password when installing apps from pamac

#9 2020-04-21 14:06:31

Re: [SOLVED] Force require root password when installing apps from pamac

#10 2020-04-21 14:31:06

Re: [SOLVED] Force require root password when installing apps from pamac

#11 2020-04-21 14:57:46

Re: [SOLVED] Force require root password when installing apps from pamac

#12 2020-04-22 16:53:05

Re: [SOLVED] Force require root password when installing apps from pamac

#13 2020-04-22 19:04:37

Re: [SOLVED] Force require root password when installing apps from pamac

Board footer