Privileges
This page is a work in progress.
Contents
Matrix
Privilege |
Everyone |
At console |
Desktop User |
Administrator |
Access external storage devices |
|
|
X |
X |
Access internal storage devices |
|
|
|
X |
Administer the system |
|
|
|
X (w/password) |
Use sudo to administer the system |
|
|
|
X (w/password) |
Configure printers |
|
|
|
X |
Connect to the Internet using a modem |
|
|
|
X |
Connect to wireless and ethernet net |
|
|
|
|
Monitor system logs |
|
|
X |
X |
Mount user-space filesystems (FUSE) |
|
|
X |
X |
Send and receive faxes |
|
|
X |
X |
Share files with the local network |
|
|
|
X |
Use audio devices |
|
|
|
|
Use CD-ROM drives |
|
|
X |
X |
Use floppy drives |
|
|
X |
X |
Use modems |
|
|
X |
X |
Use tape drives |
|
|
X |
X |
Use video devices |
|
|
X |
X |
Use Bluetooth devices |
|
X |
|
|
Use VirtualBox virtualization solution |
|
|
|
|
Use Checkbox |
|
X |
|
|
Communicate with HAL (deprecated?) |
|
X |
|
|
Use Network Manager |
|
X |
|
|
Check for new printers |
|
X |
|
|
Install new software |
|
|
|
X (w/password) |
Install security updates |
|
|
|
X (w/password) |
Install software updates |
|
|
|
X (w/password) |
Change CPU frequency scaling |
|
|
|
X |
Change the system clock |
|
|
|
X |
Access external storage devices
This right is gained by adding the user to the "plugdev" group.
Users in the "plugdev" group can send commands to HAL (this is probably deprecated). (Ref.: /etc/dbus-1/system.d/hal.conf)
TODO: See what else "plugdev" can do, and how it restricts access to the storage devices.
Access internal storage devices
This right is gained by adding the user to the "admin" group.
Users in the "admin" group can access internal storage devices. (Ref.: /var/lib/polkit-1/localauthority/10-vendor.d/com.ubuntu.desktop.pkla)
Administer the system
This right is gained by adding the user to the "admin" group.
Users in the "admin" group can use sudo to gain administrative privileges after supplying their password. (Ref.: /etc/sudoers)
The "admin" group is configured to be the PolicyKit "administrator authentication" group. (Ref.: /etc/polkit-1/localauthority.conf.d/51-ubuntu-admin.conf)
Use sudo to administer the system
This right is gained by adding the user to the "admin" group.
Users in the "admin" group can use sudo to gain administrative privileges after supplying their password. (Ref.: /etc/sudoers)
Beginning with Ubuntu 10.04 LTS, this right can also be granted by adding the user to the "sudo" group for compatibility reasons with Debian.