NetworkManager/src/nm-sudo
2021-08-19 17:51:11 +02:00
..
meson.build sudo: introduce nm-sudo D-Bus service 2021-07-26 15:31:46 +02:00
nm-sudo.c nm-sudo,dispatcher: rename and refactor code to make them more similar 2021-08-06 14:33:39 +02:00
nm-sudo.conf sudo: introduce nm-sudo D-Bus service 2021-07-26 15:31:46 +02:00
org.freedesktop.nm.sudo.service.in sudo: introduce nm-sudo D-Bus service 2021-07-26 15:31:46 +02:00
README.md all: add some README.md files describing the purpose of our sources 2021-08-19 17:51:11 +02:00

nm-sudo

This is a D-Bus activatable, exit-on-idle service, which provides an internal API to NetworkManager daemon.

This has no purpose for the user, it is an implementation detail of the daemon.

The purpose is that nm-sudo can execute certain operations, which NetworkManager process is not allowed to. We want to sandbox NetworkManager as much as possible, and nm-sudo provides a controlled way to perform some very specific operations.

As such, nm-sudo should still be sandboxed too to only being able to execute the operations that are necessary for NetworkManager.

nm-sudo will reject all D-Bus requests that are not originating from the current name owner of "org.freedesktop.NetworkManager". That is, it is supposed to only reply to NetworkManager daemon and as such is not useful to the user directly.