From 8df33ae37696d332ca6dc9eaf89fba4fd8a9f311 Mon Sep 17 00:00:00 2001
From: DJ Lucas <dj@linuxfromscratch.org>
Date: Sun, 13 Nov 2016 04:08:20 +0000
Subject: [PATCH] Add polkit configuration for Network Manager.

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@17951 af4574ff-66df-0310-9fd7-8a98e5e911e0
---
 general.ent                            |  4 +--
 introduction/welcome/changelog.xml     |  9 +++++
 networking/netutils/networkmanager.xml | 46 +++++++++++++++++++++-----
 3 files changed, 48 insertions(+), 11 deletions(-)

diff --git a/general.ent b/general.ent
index e9bdf52b54..bee3d4da98 100644
--- a/general.ent
+++ b/general.ent
@@ -1,12 +1,12 @@
 <!-- $LastChangedBy$ $Date$ -->
 
-<!ENTITY day          "11">                   <!-- Always 2 digits -->
+<!ENTITY day          "13">                   <!-- Always 2 digits -->
 <!ENTITY month        "11">                   <!-- Always 2 digits -->
 <!ENTITY year         "2016">
 <!ENTITY copyrightdate "2001-&year;">
 <!ENTITY copyholder   "The BLFS Development Team">
 <!ENTITY version      "&year;-&month;-&day;">
-<!ENTITY releasedate  "November 11th &year;">
+<!ENTITY releasedate  "November 13th &year;">
 <!ENTITY pubdate      "&year;-&month;-&day;"> <!-- metadata req. by TLDP -->
 <!ENTITY blfs-version "svn">                  <!-- svn|[release #] -->
 <!ENTITY lfs-version  "development">          <!-- x.y|development -->
diff --git a/introduction/welcome/changelog.xml b/introduction/welcome/changelog.xml
index 1f3df44239..56afaa986b 100644
--- a/introduction/welcome/changelog.xml
+++ b/introduction/welcome/changelog.xml
@@ -43,6 +43,15 @@
     </listitem>
 -->
 
+    <listitem>
+      <para>November 13th, 2016</para>
+      <itemizedlist>
+        <listitem>
+          <para>[dj] - Add polkit configuration for Network Manager.</para>
+        </listitem>
+      </itemizedlist>
+    </listitem>
+
     <listitem>
       <para>November 11th, 2016</para>
       <itemizedlist>
diff --git a/networking/netutils/networkmanager.xml b/networking/netutils/networkmanager.xml
index 5614940150..fb41944bb4 100644
--- a/networking/netutils/networkmanager.xml
+++ b/networking/netutils/networkmanager.xml
@@ -33,10 +33,11 @@
 
     <para>
       <application>NetworkManager</application> is a set of co-operative
-      tools that make networking simple and straightforward. Whether WiFi, wired,
-      3G, or Bluetooth, NetworkManager allows you to quickly move from one network
-      to another: Once a network has been configured and joined once, it can be
-      detected and re-joined automatically the next time it's available.
+      tools that make networking simple and straightforward. Whether WiFi,
+      wired, 3G, or Bluetooth, NetworkManager allows you to quickly move from
+      one network to another: Once a network has been configured and joined
+      once, it can be detected and re-joined automatically the next time it's
+      available.
     </para>
 
     &lfs7a_checked;
@@ -248,11 +249,10 @@ make</userinput></screen>
 
       <para>
         For <application>NetworkManager</application> to work, at least
-        minimal configuration file must be present. Such file is not
-        installed with <command>make install</command>. Issue following
-        command as the
-        <systemitem class="username">root</systemitem> user to create
-        minimal <filename>NetworkManager.conf</filename> file:
+        a minimal configuration file must be present. Such file is not
+        installed with <command>make install</command>. Issue the following
+        command as the <systemitem class="username">root</systemitem> user to
+        create minimal <filename>NetworkManager.conf</filename> file:
       </para>
 
 <screen role="root"><userinput>cat &gt;&gt; /etc/NetworkManager/NetworkManager.conf &lt;&lt; "EOF"
@@ -267,6 +267,25 @@ EOF</userinput></screen>
          for any additional options.
       </para>
 
+      <para>
+        To allow regular users permission to configure network connections,
+        you should add them to the
+        <systemitem class="groupname">netdev</systemitem>
+        group, and create a <application>polkit</application> rule that grants
+        access. Run the following commands as the
+        <systemitem class="username">root</systemitem> user:
+      </para>
+
+<screen role="root"><userinput>/sbin/usermod -a -G netdev <replaceable>&lt;username&gt;</replaceable>
+
+cat &gt; /usr/share/polkit-1/rules.d/org.freedesktop.NetworkManager.rules &lt;&lt; "EOF"
+<literal>polkit.addRule(function(action, subject) {
+    if (action.id.indexOf("org.freedesktop.NetworkManager.") == 0 &amp;&amp; subject.isInGroup("netdev")) {
+        return polkit.Result.YES;
+    }
+});</literal>
+EOF</userinput></screen>
+
     </sect3>
 
     <sect3 id="NetworkManager-init">
@@ -286,6 +305,15 @@ EOF</userinput></screen>
         as the <systemitem class="username">root</systemitem> user:
       </para>
 
+      <note>
+        <para>
+          If using <application>Network Manager</application> to manage
+          an interface, any previous configuration for that interface should be
+          removed, and the interface brought down prior to starting
+          <application>Network Manager</application>.
+        </para>
+      </note>
+         
       <indexterm zone="NetworkManager NetworkManager-init">
         <primary sortas="f-NetworkManager">NetworkManager</primary>
       </indexterm>