On 02/07/2011 11:18 PM, Douglas McClendon wrote:
> On 02/07/2011 04:06 PM, Urs Beyerle wrote:
>> Hi Patrick
>>
>> On 02/07/2011 08:16 PM, patrickm wrote:
>>> On Sun, 06 Feb 2011 19:10:36 -0600, Bob&  Jeanne Good
>>> <[log in to unmask]>  wrote:
>>>> Urs's LiveCD SL6 creations are working very well for me as well.
>>>
>>> I tried the LiveDVD. And everything seems to work well, except that I
>>> got an error when I was configuring the firewall. I configured the
>>> Network Print Client (IPP) and got the following error when I tried to
>>> save the configuration: http://www.imagebam.com/image/02a339118578182
>>
>> Thanks for reporting this.
>>
>> In case system-config-firewall is started from the menu ->  System ->
>> Administration ->  Firewall. The program system-config-firewall runs
>> under the normal user "sluser", which has no permission to change the
>> firewall config. That's why you get the error "IOError: Permission
>> denied: /etc/sysconfig/iptables.old"
>>
>> It should work, if you run the firewall configuration as root from the
>> command line:
>>
>> su -
>> system-config-firewall
>>
>> This all happens because I do not set a root password and give all
>> rights to the sluser via /etc/sudoers
>>
>> sluser     ALL=(ALL)     NOPASSWD: ALL
>>
>> This seems to "confuse" system-config-firewall when starting as normal
>> user.
>>
>> I have to think about how to solve this problem ... any suggestions are
>> welcome.
> 
> I would think you should be able to match whatever the fedora LiveCD
> does, but maybe they don't include s-c-f, or don't believe it should be
> configured to be run by a normal user.
> 
> But you may want to take a look at how the installer (anaconda/liveinst)
> is invoked by the desktop user with root privs, i.e.
> /etc/security/console.apps/liveinst and /etc/pam.d/liveinst
> 
> -dmc


Fedora Live 13 and 14 have "system-config-firewall" included and show exact the same problem: "IOError: Permission
denied: /etc/sysconfig/iptables.old". So it is not solved in Fedora, either.

I think, I will patch /usr/share/applications/system-config-firewall.desktop to make it working with sudo:

Exec=/usr/bin/system-config-firewall

change to

Exec=sudo /usr/bin/system-config-firewall

What's a little bit strange, I also have to change in system-config-firewall.desktop

Terminal=false

to

Terminal=true

to make Exec=sudo working ...?

The other possibility would be to set a root password for the LiveCD.

Cheers,

	Urs