Fedora 36 Silverblue
Gnome Shell 42.2
I don’t need sudo to run rpm-ostree on my system. Is that normal and safe?
Feels like it can wreak a lot of havoc. Used to doing sudo dnf
Best,
k.
it uses a polkit policy that allows administrators (which by default is anyone in the wheel group) to run it without super user privileges. if you have a second user that isn’t in the wheel group, it would require sudo
if you don’t like this behavior, you could override it in /etc/polkit-1/rules.d/org.projectatomic.rpmostree1.rules
2 Likes
Is there a way to configure it so that updating doesn’t need sudo access but layering does?
1 Like
Yes. Take a look at /usr/share/polkit-1/rules.d/org.projectatomic.rpmostree1.rules. Copy it in /etc/... to override it to your liking.
I would like to ALSO grant regular users of any kind to perform rpm-ostree upgrades.
If I create such a polkit file in /etc, will it override the /usr one and disable the wheel allowance?