Re: [Synaptic-devel] synaptic locking out password

[Vít Pelčák]

What about making virtual package, which would depend on packages you
need to have installed and lock this.

Maybe, it can be rendered non-uninstallable by moving its files from
/var/log/info (or where are preinst postinst .... files stored).

2009/3/24 Eric Duveau <address@hidden>:
> Michael,
>
>
> I have thought about chattr but
>
> it may not prevent the synaptic from shuting down iptables, tinyproxy,
> dansguardian process
> synaptic, tinyproxy, dansguardian packages have many files, which one to
> choose to set the immutable attribute
>
> I have to test it anyway.
> Thank you for your email.
>
>
> On Tue, Mar 24, 2009 at 8:33 AM, Michael Vogt <address@hidden> wrote:
>>
>> On Mon, Mar 23, 2009 at 10:37:31PM +0100, Eric Duveau wrote:
>> > Hi,
>> Hi,
>>
>> > I would like to install dansguardian + iptables + tinyproxy packages
>> > (parental control ) via synaptic.
>> >
>> > My kid would like to use it to install new packages. (he will use sudo
>> > synaptic)
>> >
>> > Is there a possibility to lockout dansguardian + iptables + tinyproxy
>> > packages so that they cannot be removed using synaptic.
>> > I am thinking of a secund admin password...
>>
>> This is currently not possible with synaptic - you could try to use
>> chattr and set the "immutable" attributes on the file for those
>> packages. But I have no tested if that really works (if dpkg will
>> refuse to install/remove the package then).
>>
>> Another alternative is "rapt"
>> (https://code.edge.launchpad.net/~mvo/+junk/rapt). It allows you to
>> prevent the user from removing packages. But its commandline so
>> probably not the right solution for your kid.
>>
>> Cheers,
>>  Michael
>
>
> _______________________________________________
> Synaptic-devel mailing list
> address@hidden
> http://lists.nongnu.org/mailman/listinfo/synaptic-devel
>
>



-- 
Vit Pelcak