After an evaluation, GNOME has moved from Bugzilla to GitLab. Learn more about GitLab.
No new issues can be reported in GNOME Bugzilla anymore.
To report an issue in a GNOME project, go to GNOME GitLab.
Do not go to GNOME Gitlab for: Bluefish, Doxygen, GnuCash, GStreamer, java-gnome, LDTP, NetworkManager, Tomboy.
Bug 700141 - turn --enable-modify-system into NetworkManager.conf setting
turn --enable-modify-system into NetworkManager.conf setting
Status: RESOLVED NOTABUG
Product: NetworkManager
Classification: Platform
Component: general
unspecified
Other Linux
: Normal normal
: ---
Assigned To: NetworkManager maintainer(s)
NetworkManager maintainer(s)
Depends on:
Blocks: 695213
 
 
Reported: 2013-05-11 23:53 UTC by Pavel Simerda
Modified: 2013-05-22 15:19 UTC
See Also:
GNOME target: ---
GNOME version: ---


Description Pavel Simerda 2013-05-11 23:53:23 UTC 
The configuration modification policy is now determined at build time but should IMO be determined by local configuration file.
Comment 1 Dan Winship 2013-05-13 15:57:40 UTC 
Not sure about this... policykit has a configuration mechanism for this stuff. Adding our own layer on top of that could make things confusing.

Also, you can override the installed policy with a file in /etc/polkit-1/rules.d/, so it *is* run-time configurable.
Comment 2 Pavel Simerda 2013-05-13 18:02:11 UTC 
Thanks for your comment. But if it is run-time configurable, then it doesn't make sense to have the compile-time option at all, does it?
Comment 3 Dan Williams 2013-05-13 19:34:12 UTC 
The compile-time option is for setting the defaults so that distro maintainers (ie, us) don't have to carry patches around locally for it.  Logically there are two sets of defaults for NM: permissive and locked-down.  Fedora uses permissive, other distros use locked-down by default.  It's then up to the administrator post-install to customize the PolicyKit rules for their specific requirements.
Comment 4 Dan Winship 2013-05-22 15:19:30 UTC 
What he said: /usr/share/polkit-1/actions/ contains the default setting for the distribution, and so is set at build time. /etc/polkit-1/rules.d/ contains site-specific overrides, and is configured at run time.