CheckboxPolicykit
Launchpad Entry: qa-checkbox-policykit
Created: 2008-12-05
Contributors: schwuk
Packages affected: checkbox
Summary
Checkbox currently runs completely as root which is not appropriate default behaviour for most end-user cases. Privileges should be elevated only when there is a specific need as defined in the test.
Release Note
No real user impact, so no release note necessary. Users will still be prompted for authentication, but at different times.
Rationale
Although running Checkbox through sudo has allowed us to work around permission related issues, this provides a "tainted" result as well as exposing the system vulnerabilites. In particular the latter will become more of a concern as we extend test coverage and incorporate community tests.
Ideally unless we are testing functionality that requires root permissions, then all tests should be performed as the current users.
This will also allow us to address current issues with integrating LDTP/desktop tests into Checkbox, as they cannot (easily) be run as root.
Use Cases
- Jill desktop user starts Checkbox from the Admin menu (System Testing). She can get a basic view of her hardware and perform most tests without entering her password.
- As we add more comprehensive desktop test coverage it is important that they run in an environment that is as realistic as possible - as a user, not as root.
Assumptions
That PolicyKit is the right solution for this
- That the current requirements for running as root only apply to a small number of tests
Design
Implementation
UI Changes
Code Changes
Test/Demo Plan
Unresolved issues