Comment 2 for bug 1048522

Revision history for this message
Michael Terry (mterry) wrote :

On IRC:

<mterry> Wellark, so with this patch, if a new NM capability comes out, we'll end up using the default permissions for it, instead of denying?
 seems bad
<Wellark> mterry: the actions do have default permissions
<Wellark> so if a new action is introduced it's probably prevented by default permission if it's dangerous
<Wellark> but yes, if the default policy does not prevent the new action then it's available in the greeter also
 and preventing that needs a modification to the .pkla
<Wellark> but there has not been new actions to NM in very long time
 and they are something that are added only with great care. Unless NM gets something totally new kind of functionality there will be no new actions
 policykit upstream is planning to move to a whole new configuration system in the future
 so, we need to update the permissions files on all the packages we use it anyway at some point in the future
 I would not be too concerned about the (unlikely) situation that NM gets a new action added before that