gufw-developers team mailing list archive

[Paulo Fino <finomeno@xxxxxxxxx>]

Hi,

polkit or not, some solution will have to be found eventually as Wayland
will phase out X. Developers have made it clear they don't think running
GUI apps as root is a good idea, so they won't support it any longer.
See https://bugzilla.redhat.com/show_bug.cgi?id=1274451#c62

For now, it seems the easiest, yet somewhat insecure, workaround is
using "xhost si:localuser:root" before running gufw, gparted or any
other GUI app that still relies on direct root access, and then using
"xhost -si:localuser:root" (notice the "-") to revoke root's right to
access your local user's X session.

** Bug watch added: Red Hat Bugzilla #1274451
   https://bugzilla.redhat.com/show_bug.cgi?id=1274451

-- 
You received this bug notification because you are a member of Gufw
Developers, which is subscribed to Gufw.
https://bugs.launchpad.net/bugs/1652857

Title:
  GUI should not run as root, instead should use polkit

Status in Gufw:
  Opinion

Bug description:
  GUFW cannot connect to XServer as root. This is due to new security
  policy in XWayland. Log attached.

  The current way that GUFW's GUI runs is to login as start and operate
  as root. This is a problem if the GUI tries to run with XWayland. On
  modern Linux desktops, application GUI's run as the normal user and
  request special permissions through other means - polkit for example.
  This should be implemented for GUFW as well in order to make it work
  with Wayland (XWayland) security model.

  More info can be found here -
  https://bugzilla.redhat.com/show_bug.cgi?id=1274451

To manage notifications about this bug go to:
https://bugs.launchpad.net/gui-ufw/+bug/1652857/+subscriptions