Comment 29 for bug 221363

Revision history for this message
Marcelo Boveto Shima (marceloshima) wrote : Re: Policy Kit Unlock Buttons Greyed Out when using NX

Indeed, PolicyKit should be repaired to allow a remote sessions permission to do something.
But FreeNX/NX must be fixed to create a valid session.

My solution corrects FreeNX/NX but just workaround PolicyKit problem.

But I must say that in some cases this solution has a SECURITY IMPLICATION.
Like I've showed in the proof of concept, the solution can act like a "sudo" and
sudo my itself is an workaround.
The problem is that a remote session should have the permission to gain admin
right only if it is explicitly allow to do so.

This happens only if you have admin rights but don't have "sudo" permission.
Don't apply to Ubuntu, since the admin group has sudo permission by default.
But I think Fedora/Red Hat don't uses "sudo" by default.

Everybody that uses this fix must be aware of this problem.