fdo-mirrors/NetworkManager
1
0
Fork 0
mirror of https://gitlab.freedesktop.org/NetworkManager/NetworkManager.git synced 2026-01-01 13:00:12 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions
NetworkManager/src
History
Thomas Haller a0a5b0b2f5 core: add main.auth-polkit option "root-only" 
We always build with PolicyKit support enabled, because it has no
additional dependencies, beside some D-Bus calls.

However, in NetworkManager.conf the user could configure
"main.auth-polkit" to disable PolicyKit. However, previously it would
only allow to disable PolicyKit while granting access to all users.

I think it's useful to have an option that disables PolicyKit and grants
access only to root. I think we should not go too far in implementing
our own authorization mechanisms beside PolicyKit (e.g. you cannot
disable PolicyKit and grant access based on group membership of the
user). However, disabling PolicyKit can be useful sometimes, and it's
simple to implement a "root-only" setup.

Note one change is that when NetworkManager now runs without a D-Bus
connection (in initrd), it would deny all non-root requests. Previously
it would grant access. I think there should be little difference in
practice, because if we have no D-Bus we also don't have any requests to
authenticate.

(cherry picked from commit 6d7446e52f)
2019-12-11 13:13:05 +01:00
..
devices device: don't transition assumed devices to FAILED before ACTIVATED 2019-12-05 17:11:36 +01:00
dhcp dhcp: support FQDN flags in the nettools backend 2019-11-28 17:56:35 +01:00
dns all: manually drop code comments with file description 2019-10-01 07:50:52 +02:00
dnsmasq meson: Improve the src build file 2019-10-01 09:49:33 +02:00
initrd initrd: don't use inet_aton() to parse IPv4 address 2019-12-05 13:12:04 +01:00
ndisc all: unify format of our Copyright source code comments 2019-10-02 17:03:52 +02:00
platform platform/tests: skip team test when we fail to create team link 2019-12-02 17:34:51 +01:00
ppp all: unify format of our Copyright source code comments 2019-10-02 17:03:52 +02:00
settings settings: assert that we don't leak error variable in impl_settings_load_connections() 2019-12-09 09:55:16 +01:00
supplicant all: use nm_dbus_path_not_empty() 2019-11-07 11:34:36 +01:00
systemd sd: cleanup integrating systemd's event loop with GMainContext 2019-11-25 12:58:33 +01:00
tests core: fix IAID endianness in client-id generation test 2019-12-02 18:02:42 +01:00
vpn all: manually drop code comments with file description 2019-10-01 07:50:52 +02:00
main-utils.c all: manually drop code comments with file description 2019-10-01 07:50:52 +02:00
main-utils.h all: manually drop code comments with file description 2019-10-01 07:50:52 +02:00
main.c core: add main.auth-polkit option "root-only" 2019-12-11 13:13:05 +01:00
meson.build meson: Improve the src build file 2019-10-01 09:49:33 +02:00
NetworkManagerUtils.c utils: alow matching ipv6 new method 'disable' 2019-11-18 11:07:18 +01:00
NetworkManagerUtils.h all: unify format of our Copyright source code comments 2019-10-02 17:03:52 +02:00
nm-act-request.c all: manually drop code comments with file description 2019-10-01 07:50:52 +02:00
nm-act-request.h all: unify format of our Copyright source code comments 2019-10-02 17:03:52 +02:00
nm-active-connection.c core: don't use pointer value for pending action string in active-connection 2019-10-14 16:37:16 +02:00
nm-active-connection.h all: manually drop code comments with file description 2019-10-01 07:50:52 +02:00
nm-audit-manager.c all: unify format of our Copyright source code comments 2019-10-02 17:03:52 +02:00
nm-audit-manager.h all: unify format of our Copyright source code comments 2019-10-02 17:03:52 +02:00
nm-auth-manager.c core: add main.auth-polkit option "root-only" 2019-12-11 13:13:05 +01:00
nm-auth-manager.h core: add main.auth-polkit option "root-only" 2019-12-11 13:13:05 +01:00
nm-auth-subject.c all: manually drop code comments with file description 2019-10-01 07:50:52 +02:00
nm-auth-subject.h all: manually drop code comments with file description 2019-10-01 07:50:52 +02:00
nm-auth-utils.c all: manually drop code comments with file description 2019-10-01 07:50:52 +02:00
nm-auth-utils.h all: manually drop code comments with file description 2019-10-01 07:50:52 +02:00
nm-checkpoint-manager.c all: use nm_dbus_path_not_empty() 2019-11-07 11:34:36 +01:00
nm-checkpoint-manager.h all: manually drop code comments with file description 2019-10-01 07:50:52 +02:00
nm-checkpoint.c all: manually drop code comments with file description 2019-10-01 07:50:52 +02:00
nm-checkpoint.h all: manually drop code comments with file description 2019-10-01 07:50:52 +02:00
nm-config-data.c core: add main.auth-polkit option "root-only" 2019-12-11 13:13:05 +01:00
nm-config-data.h core: add main.auth-polkit option "root-only" 2019-12-11 13:13:05 +01:00
nm-config.c all: manually drop code comments with file description 2019-10-01 07:50:52 +02:00
nm-config.h core: add main.auth-polkit option "root-only" 2019-12-11 13:13:05 +01:00
nm-connectivity.c connectivity: fix using curl_multi_strerror() for CURLMcode error code 2019-11-22 15:32:52 +01:00
nm-connectivity.h all: manually drop code comments with file description 2019-10-01 07:50:52 +02:00
nm-core-utils.c core: remove 'legacy_unstable_byteorder' argument from client-id helpers 2019-12-02 18:02:41 +01:00
nm-core-utils.h core: remove 'legacy_unstable_byteorder' argument from client-id helpers 2019-12-02 18:02:41 +01:00
nm-dbus-manager.c all: manually drop code comments with file description 2019-10-01 07:50:52 +02:00
nm-dbus-manager.h all: manually drop code comments with file description 2019-10-01 07:50:52 +02:00
nm-dbus-object.c all: unify format of our Copyright source code comments 2019-10-02 17:03:52 +02:00
nm-dbus-object.h all: unify format of our Copyright source code comments 2019-10-02 17:03:52 +02:00
nm-dbus-utils.c all: unify format of our Copyright source code comments 2019-10-02 17:03:52 +02:00
nm-dbus-utils.h all: unify format of our Copyright source code comments 2019-10-02 17:03:52 +02:00
nm-dcb.c all: manually drop code comments with file description 2019-10-01 07:50:52 +02:00
nm-dcb.h all: manually drop code comments with file description 2019-10-01 07:50:52 +02:00
nm-dhcp4-config.c all: manually drop code comments with file description 2019-10-01 07:50:52 +02:00
nm-dhcp4-config.h all: manually drop code comments with file description 2019-10-01 07:50:52 +02:00
nm-dhcp6-config.c all: manually drop code comments with file description 2019-10-01 07:50:52 +02:00
nm-dhcp6-config.h all: manually drop code comments with file description 2019-10-01 07:50:52 +02:00
nm-dispatcher.c all: manually drop code comments with file description 2019-10-01 07:50:52 +02:00
nm-dispatcher.h all: manually drop code comments with file description 2019-10-01 07:50:52 +02:00
nm-firewall-manager.c all: manually drop code comments with file description 2019-10-01 07:50:52 +02:00
nm-firewall-manager.h all: manually drop code comments with file description 2019-10-01 07:50:52 +02:00
nm-hostname-manager.c all: unify format of our Copyright source code comments 2019-10-02 17:03:52 +02:00
nm-hostname-manager.h all: unify format of our Copyright source code comments 2019-10-02 17:03:52 +02:00
nm-iface-helper.c dhcp: support FQDN flags in the dhclient backend 2019-11-28 17:56:35 +01:00
nm-ip4-config.c all: add support for "scope" attribute for IPv4 routes 2019-11-28 00:11:15 +01:00
nm-ip4-config.h all: unify format of our Copyright source code comments 2019-10-02 17:03:52 +02:00
nm-ip6-config.c core: don't add prefix route for external addresses 2019-10-23 21:46:26 +02:00
nm-ip6-config.h all: unify format of our Copyright source code comments 2019-10-02 17:03:52 +02:00
nm-keep-alive.c all: unify format of our Copyright source code comments 2019-10-02 17:03:52 +02:00
nm-keep-alive.h all: unify format of our Copyright source code comments 2019-10-02 17:03:52 +02:00
nm-logging.c shared: move log level info from core to "nm-logging-base.h" 2019-11-28 19:20:33 +01:00
nm-logging.h core: move _LOG*() macros to "shared/nm-glib-aux/nm-logging-fwd.h" 2019-11-22 15:32:52 +01:00
nm-manager.c nm-manager: remove lease file if copying dhclient lease fails 2019-12-11 10:07:12 +01:00
nm-manager.h manager: don't activate device if the parent is missing 2019-11-25 08:58:27 +01:00
nm-netns.c all: manually drop code comments with file description 2019-10-01 07:50:52 +02:00
nm-netns.h all: manually drop code comments with file description 2019-10-01 07:50:52 +02:00
nm-pacrunner-manager.c all: unify format of our Copyright source code comments 2019-10-02 17:03:52 +02:00
nm-pacrunner-manager.h all: unify format of our Copyright source code comments 2019-10-02 17:03:52 +02:00
nm-policy.c all: manually drop code comments with file description 2019-10-01 07:50:52 +02:00
nm-policy.h all: manually drop code comments with file description 2019-10-01 07:50:52 +02:00
nm-proxy-config.c all: unify format of our Copyright source code comments 2019-10-02 17:03:52 +02:00
nm-proxy-config.h all: unify format of our Copyright source code comments 2019-10-02 17:03:52 +02:00
nm-rfkill-manager.c all: manually drop code comments with file description 2019-10-01 07:50:52 +02:00
nm-rfkill-manager.h all: manually drop code comments with file description 2019-10-01 07:50:52 +02:00
nm-session-monitor.c all: unify format of our Copyright source code comments 2019-10-02 17:03:52 +02:00
nm-session-monitor.h all: unify format of our Copyright source code comments 2019-10-02 17:03:52 +02:00
nm-sleep-monitor.c all: unify format of our Copyright source code comments 2019-10-02 17:03:52 +02:00
nm-sleep-monitor.h all: unify format of our Copyright source code comments 2019-10-02 17:03:52 +02:00
nm-test-utils-core.h all: unify format of our Copyright source code comments 2019-10-02 17:03:52 +02:00
nm-types.h core: track whether IP addresses are external 2019-10-23 17:44:38 +02:00
org.freedesktop.NetworkManager.conf wifi-p2p: rename Wi-Fi P2P 2019-02-01 17:02:57 +01:00