Add a mode to landscape-client that allows it to run non-root (and with limited plugins)
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
Landscape Client |
Fix Released
|
Undecided
|
Unassigned | ||
Landscape Server |
Fix Released
|
Wishlist
|
Christopher Armstrong | ||
landscape-client (Ubuntu) |
Fix Released
|
Undecided
|
Unassigned |
Bug Description
The configuration option itself should be in the GUI configurator described in bug #81313.
At AllHands, when we described the way the landscape client runs as root and allows the server to perform administrative commands, people were concerned and many suggested the ability to run the client without root priveleges. While not running as root, we should also leave out plugins which require root privs. Perhaps the GUI configuration should have fine-grained selection of plugins to be used, but that is not strictly necessary.
The main reason for this is that customers may want to offer the support team read-only information about their computers (which is all the support team gets anyway), but are too paranoid to run a root daemon which allows third parties control of their machines. The same applies when they want read-only access to their own machines without administrative control. They may, for example, want their servers to be read-only but their desktop machines to be administrable.
Related branches
Changed in landscape: | |
assignee: | nobody → radix |
importance: | Undecided → Wishlist |
status: | New → Confirmed |
Changed in landscape: | |
milestone: | mthood → later |
Changed in landscape: | |
milestone: | later → mountainview |
Changed in landscape-client: | |
status: | New → Fix Committed |
Changed in landscape: | |
milestone: | mountainview-pre-7 → mountainview-pre-8 |
Changed in landscape: | |
status: | Fix Committed → Fix Released |
Changed in landscape: | |
milestone: | mountainview-pre-8 → mountainview |
status: | Fix Released → Fix Committed |
Changed in landscape-client: | |
status: | Fix Committed → Fix Released |
Changed in landscape: | |
status: | Fix Committed → Fix Released |
That will become possible with the DBUS ideas we've been discussing.