[Revisor-users] revisor

[Jeroen van Meeuwen (Fedora Unity)]

Farkas Levente wrote:
> Jeroen van Meeuwen (Fedora Unity) wrote:
>>> - and why revisor should have to run as root? [...]
>> If you'll take a look into what Revisor actually does (open up the
>> source code) it'll become clear that Revisor will need to run as a
>> privileged user. Certain actions at this moment cannot be performed in
>> user-space.
> 
> can you point me to some specific code? i try to look into the code, but
> one or two reason would be enough for me. what do revsor? collect some
> info, packages and files put them together into an iso file. ok i know
> it's complicated, but for what the priovilegized right required? the
> only reason may be revisor like to mount the result iso (this can be
> skipped in case of non roor user). any other? but even in that case i'd
> like to give the oportunity to my users to create install iso images for
> a given type of system. i put together the config and they only need to
> run revisor without any changes of the config files and at the and the
> iso images created and they can use it. revisor would be the best and
> easiest tool for this, but i wouldn't like to give root access on out
> servers to these users.
> this is something building an rpm about 5-10 years ago all packages made
> by root, but later it's turn out that isn't required what's more highly
> not recommended.
> 

Well, first of all we call a number of programs that require root
privileges to be run in the first place. Second, some programs do
loopback device setups, create hard drive images, make filesystems on
those, mount those, run yum, install packages, probe modules and create
initial ram disks.

If you want to enable your users to run revisor, add a group to the
sudoers file and enable that group to run /usr/sbin/revisor via sudo
without a password, and then alias 'revisor'='sudo /usr/sbin/revisor'
for each user.

Kind regards,

Jeroen van Meeuwen
-kanarip