Bug 927106

Summary: smb4k requires root-privilege to mount CIFS share in user space
Product: [openSUSE] openSUSE Distribution Reporter: Forgotten User c-AT0h9V-M <forgotten_c-AT0h9V-M>
Component: KDE ApplicationsAssignee: E-mail List <kde-maintainers>
Status: RESOLVED DUPLICATE QA Contact: E-mail List <qa-bugs>
Severity: Normal    
Priority: P5 - None CC: wbauer
Version: 13.2   
Target Milestone: ---   
Hardware: Other   
OS: Other   
Whiteboard:
Found By: --- Services Priority:
Business Priority: Blocker: ---
Marketing QA Status: --- IT Deployment: ---

Description Forgotten User c-AT0h9V-M 2015-04-14 12:27:58 UTC
Does not make any sense to ask for root-privilege, because this tool runs in user space, otherwise there is no difference in mounting over fstab or smb4k (just GUI/console).

--- Possible fix ---

Add to /etc/polkit-default-privs.local following lines:

de.berlios.smb4k.mounthelper.mount auth_admin:auth_admin:yes
de.berlios.smb4k.mounthelper.unmount auth_admin:auth_admin:yes
Comment 1 Wolfgang Bauer 2015-04-14 13:18:42 UTC
(In reply to Antons Svedkijs from comment #0)
> Does not make any sense to ask for root-privilege, because this tool runs in
> user space, otherwise there is no difference in mounting over fstab or smb4k
> (just GUI/console).

The "tool" runs in user space, yes. But mounting a share still requires root privileges.
You cannot mount random stuff as user, only things that are explicitely listed in fstab with the "user" mount option.

> --- Possible fix ---
> 
> Add to /etc/polkit-default-privs.local following lines:
> 
> de.berlios.smb4k.mounthelper.mount auth_admin:auth_admin:yes
> de.berlios.smb4k.mounthelper.unmount auth_admin:auth_admin:yes

Yes, we know that. And you can easily do that on your system, /etc/polkit-default-privs.local is intended for local changes as the name indicates... ;)

But, for modifying openSUSE's default privileges accordingly to not require the root password, the security team has to approve that change.
See also bug#749065, which unfortunately hasn't seen any action since 3 years.

Or for the latest smb4k, see bug#915714.

PS, if you install smb4k from KDE:Extra, no local change is necessary for passwordless mount. ;)

*** This bug has been marked as a duplicate of bug 749065 ***