Thread: [Announce] genwall a simple iptables firewall
View Single Post
peterleinchen's Avatar
peterleinchen is offline peterleinchen
2012-09-09 , 20:27
Posts: 4,118 | Thanked: 8,901 times | Joined on Aug 2010 @ Ruhrgebiet, Germany
#26
Originally Posted by sifo View Post
Isnt it better to add a a "genwall.sudoers" in "/etc/sudoers.d/" ?
Yes.

Originally Posted by sifo View Post
and then you can remove the sudo from the desktop file
i really dont know the different but this is what all devs doing
No.

Originally Posted by Halftux View Post
To use the icon from application browser you need to have sudser installed.
Nope, if you follow sifo's first hint. Put a genwall.sudoers file into /etc/sudoers.d with content
Code:
user ALL = NOPASSWD: /usr/sbin/genwall
or
Code:
user ALL = NOPASSWD: /opt/genwall/bin/genwall
or whereever your binary/link lives.
And then call update 'update-sudoers' in postinstall script.
This will allow the user to execute genwall with sudo rights without entering a password. You still need to call it with sudo from desktop file as well as from command line.
Sudser just adds a * to sudoers (not my security-preferred thing, but easy for lazy) ...
Last edited by peterleinchen; 2012-09-09 at 20:46.
 

The Following 5 Users Say Thank You to peterleinchen For This Useful Post: