https://bugzilla.redhat.com/show_bug.cgi?id=872166
As an alternative to commit id 'e94979e90' which allows polkit
authentication by adding users to the 'libvirt' group, add the
ability to start and utilize a text based authentication agent
for virsh.
At the very least patch 1 will suffice part of the issue listed
in the bz - the opaque error message related to "some agent".
For patch 2, it was far easier to utilize what polkit provides
in pkttyagent and pkcheck utilities, than adding some code which
requires POLKIT_AGENT_I_KNOW_API_IS_SUBJECT_TO_CHANGE being
#defined for compilation.
I chose 'pkauth' to mean polkit authentication - figured it was
a workable shorthand, but if there's better suggestions those
can be considered.
John Ferlan (3):
polkit: Adjust message when action-id isn't found
util: Introduce API's for Polkit text authentication
virsh: Add support for text based polkit authentication
src/libvirt_private.syms | 3 ++
src/util/virpolkit.c | 104 +++++++++++++++++++++++++++++++++++++++++++++--
src/util/virpolkit.h | 7 ++++
tests/virpolkittest.c | 3 +-
tools/virsh.c | 22 ++++++++--
tools/virsh.h | 2 +
tools/virsh.pod | 10 +++++
tools/vsh.h | 1 +
8 files changed, 144 insertions(+), 8 deletions(-)
--
2.5.0