Guido G nther: Handling privileges with PolicyKit
I got tired of having to authenticate as root to change printer settings like
paper size or printout mode via a GUI. Since system-config-printer uses
PolicyKit things like allow myself to change printer settings when logged
into the system should be possible without having to mess with cupsd.conf or
sudo, are they?
Which printer related actions are governed by PolicyKit:
pkaction grep printer
shows about the following if you have cups-pk-helper installed. The later
is used by system-config-printer to interface with PolicyKit:
org.opensuse.cupspkhelper.mechanism.printer-enable
org.opensuse.cupspkhelper.mechanism.printer-local-edit
org.opensuse.cupspkhelper.mechanism.printer-remote-edit
org.opensuse.cupspkhelper.mechanism.printer-set-default
org.opensuse.cupspkhelper.mechanism.printeraddremove
So org.opensuse.cupspkhelper.mechanism.printer-local-edit
seems to be what I'm looking for. Let's change the policy for this action:
cat <<EOF >/etc/polkit-1/localauthority/50-local.d/99-local.pkla
[EditPrinters]
Identity=unix-user:foo
Action=org.opensuse.cupspkhelper.mechanism.printer-local-edit
ResultAny=no
ResultInactive=no
ResultActive=yes
EOF
This allows user foo to perform the action
org.opensuse.cupspkhelper.mechanism.printer-local-edit if the user is logged
into a local interactive session. The pklocalauthority(8) manpage has all the
details. PolicyKit will pick up the configuration file changes on the fly. Lets
see if this worked by getting the process id of the running
system-config-printer and checking via pkcheck if the process is authorized
to use that action:
PID=$(ps a awk '/[p]ython .*system-config-printer/ print $1 ')
pkcheck --action-id org.opensuse.cupspkhelper.mechanism.printer-local-edit --process $PID
echo $?
If pkcheck returns with a zero return value everything is fine and user foo
won't need any password to modify local printer settings from now on.
Check the output of pkaction(1) to list more actions that can be setup this
way.
DebConf10 ended 2 weeks ago, I m back in Bosnia and I needed some time to recalculate everything that happened to me in last month
This was my third time in NYC, and NYC as a city never left me empty handed, in every possible sense! And am seriously considering option of moving back one day, whether to get my Masters/phD or just do work we ll see what future holds for me
DebConf10
I was in organization team for DebConf10, but if you put me aside, what s particularly interesting is that there was a total number of 7 Bosnians on DebConf10, two of which were government officials. I must note this wasn t our complete team, and what s most important of all is that they all pretty much volunteered as much as they could, of course, besides good will to help Debian, but also to at least somehow prepare themselves for organization of DebConf11.
It s also worth noting that this was their first DebConf, and I as a leader of the team must say I m proud on how well they performed. I m sure by being highly active in volunteering they have learned as much as they could when it comes to how it s done and were able to see good and bad sides of DebConf10 organization team.
Of course, I d also like to thank DebConf10 team for their superb work, perfect Venue selection, their hospitality and being incredibly friendly and helpful to all of us. As I said in one of my lectures, it s kinda unwritten rule that every next DebConf has to top the previous one, and that being said it s going to be almost impossible to compete with this year bid, but being Bosnians we re up for the challenge
Before anything, I d like to thank Government of Republika Srpska for their full financial support, which was one of the preconditions to even get this bid. With their full support + sponsors, we ll be able to get great amount for sponsorships, for you to come to Banja Luka from the most remote places, and also in case you need visa for them to help you in getting one. Government support is just too precious in any way you want to take it.
We would also like to invite you to DebConf11 in Bosnia (Banja Luka) next summer, we also invite all of you to our communication channels (mailing list, irc) since we would really like to get involved as many people as we can. Besides all of you enjoying DebConf11 next year, we would like you to help us in giving directions since we re a young team
Besides Debian people, I d like to invite anyone who think he/she could help, or want to get involved, especially individuals/organizations/LUG from whole region!
It s also important to stress that in all of our communication means, we do speak English, so please do not hesitate if you have any sort of question/suggestion/whatever.
For those interested in next DebConf11, most important page you should follow is our wiki page, where you can find all information and which we keep updated in timely manner:
)


Thanks to the
As you may remember,
Quite a few things have happened recently in the Debian/ARM land
People often want to know what an application looks like before they install it. This is one of the reason why Christoph Haas started with the
I ve decided to try using local DNS caching again, using the simple

With his
It's really simplistic, but I did not need more to have fun. :-)
This could be extended to set a specific marker and/or color for each
contact, with a legend. I'll let that as an exercise for my readers.