View source for How to get applications running with root privileges

{{LangSwitch}}
[[Category:HowTo]]

== Introduction ==

This tutorial is intended for developers with the need for their applications to run with root privileges, without using '''su''' or one of it GUI equivalents, like '''kdesu'''. The steps shown below are not directly related to Qt, indeed with the operative system, so the developer has to have a basic of system administration knowledge. However this five steps are very easy, so there should be no problem to accomplish it. When we have done all this, an authentication dialog will show up just before our aplication to run, after typing the correct root password we are going to have our application running with administrator rights.

'''Note:''' This steps has been only tested on [http://fedoraproject.org/ Fedora GNU/Linux], but should work on any other [http://www.redhat.com/ Red Hat] based distributions.

== Installing the usermode package ==

The '''usermode''' package contains the '''userhelper''' program, which can be used to allow configured programs to be run with superuser privileges by ordinary users.

To install this package just execute the following command:

<pre>
yum install usermode
</pre>

== The /etc/security/console.apps/ directory ==

This directory have to contain a file with the same name (has to be lowercase) of our application binary and without extention, for example:

<pre>
/etc/security/console.apps/myapp
</pre>

and the contents:

<pre>
USER=root
PROGRAM=/usr/sbin/myapp
SESSION=true
</pre>

== The /etc/pam.d/ directory ==

This directory also have to contain a file with the same name (has to be lowercase) of our application binary, without extention and with the following content:

File

<pre>
/etc/pam.d/myapp
</pre>

Content:

<code>
#%PAM-1.0
auth include config-util
account include config-util
session include config-util
</code>

== Linking ==

Now we have to create a symlink with the name (has to be lowercase) of our application binary and linked to the consolehelper program:

<pre>
ln -fs /usr/bin/consolehelper /usr/bin/myapp
</pre>

'''Note:''' The real binary of our application have to be placed at /usr/sbin/ directory.

== The .desktop file ==

The last is concerned with the .desktop file of our application, that have to point to the link we create in the previous step insted of the real binay.

This .desktop file could look like this:

<pre>
[Desktop Entry]
Categories=System
Exec=/usr/bin/myapp
GenericName[en_US]=My App
GenericName=My App
Icon=myapp
Name[en_US]=MyApp
Name=MyApp
StartupNotify=true
Terminal=false
Type=Application
</pre>