Linux permissions and Pale Moon updates [I'm stupid]

General project discussion.
Use this as a last resort if your topic does not fit in any of the other boards but it still on-topic.
Forum rules
This General Discussion board is meant for topics that are still relevant to Pale Moon, web browsers, browser tech, UXP applications, and related, but don't have a more fitting board available.

Please stick to the relevance of this forum here, which focuses on everything around the Pale Moon project and its user community. "Random" subjects don't belong here, and should be posted in the Off-Topic board.
User avatar
Thad E G
Hobby Astronomer
Hobby Astronomer
Posts: 18
Joined: 2022-10-23, 10:38

Linux permissions and Pale Moon updates [I'm stupid]

Unread post by Thad E G » 2024-11-10, 13:53

"A recommended security and stability update is available. but you do not have the system permissions required to install it ... ... ... or try again from an account that has permission to install software on this computer"
Pale Moon 33.4.0.1
Linux: Linux Mint 21

Well, fair enough, most software needs root permissions to install and update. I think the usual way of handling it is that the installer asks for the required permission. But how to handle this in a safe way? There's an obvious answer...

Code: Select all

$ sudo palemoon #running with root permissions
$ <run update from Help>
$ <quit palemoon>
$ palemoon #running as user.
...Is this safe and effective?

Call me paranoid (which doesn't mean that the rest of of the world isn't out to get us ;) ) but I am terrified of accidentally compromising the security of Pale Moon by accidentally giving something root permission.

I know enough to be scared... but not enough to know if I should be scared!
Last edited by Thad E G on 2024-11-10, 15:00, edited 1 time in total.

andy80
Moonbather
Moonbather
Posts: 65
Joined: 2015-01-04, 08:21
Location: Beijing

Re: Linux permissions and Pale Moon updates

Unread post by andy80 » 2024-11-10, 14:29

I don't use Mint, so I don't know whether Pale Moon is available in its repositories (in such a case you can just update it as all other packages, maybe with a small delay between the announcement of the new version of Pale Moon and its availability in the Mint repositories).

If you want to be sure to have Pale Moon without involving root, you can just extract the archive with your user in your home directory and then add a symbolic link from ~/bin to the "palemoon" file in the extracted archive's content.

Alternatively, you can do as I do: when getting the announcement of a new version, I download manually the archive and then extract it (as root) in /opt after removing the previous version of Pale Moon. To simplify the execution of Pale Moon, I added a symbolic link "/usr/bin/palemoon -> /opt/palemoon/palemoon".

User avatar
Thad E G
Hobby Astronomer
Hobby Astronomer
Posts: 18
Joined: 2022-10-23, 10:38

Re: Linux permissions and Pale Moon updates [I'm stupid]

Unread post by Thad E G » 2024-11-10, 15:02

Thank you very much.

It looks like I'm being stupid here. It seemed like a really nice idea to be able to just update from within the application, so I stopped thinking about anything else.

I just download the .deb from http://mirrors.rit.edu/mxlinux/mx-packa ... /palemoon/ and installed it.

:oops:

User avatar
Pentium4User
Board Warrior
Board Warrior
Posts: 1282
Joined: 2019-04-24, 09:38
Contact:

Re: Linux permissions and Pale Moon updates [I'm stupid]

Unread post by Pentium4User » 2024-11-10, 18:44

Linux operating systems normally have a package manager that does updates.
There is a public repo for PM on Debian-based systems like yours:
https://kannegieser.net/palemoon/

If you want to use the tarball, I recommend not using the internal updater. Enable notification, but not installation.
Then download the tarball and extract it with sudo privileges to the destination.
The profile picture shows my Maico EC30 E ceiling fan.

Lucio Chiappetti
Astronaut
Astronaut
Posts: 705
Joined: 2014-09-01, 15:11
Location: Milan Italy

Re: Linux permissions and Pale Moon updates [I'm stupid]

Unread post by Lucio Chiappetti » 2024-11-10, 19:49

Pentium4User wrote:
2024-11-10, 18:44
If you want to use the tarball, I recommend not using the internal updater. Enable notification, but not installation.
I do no understand why.
Note I've been for a long time skeptical about frequent and (semi)automatic updates, but it's now a few years I converted.
I always installed the tarball under my own account (not a repo, not as root), both on the work and home machines.
And I always had notificaion enabled without automatic update.
1) At work (OpenSuse) I could not use the internal updater, so I have a standard manual) procedure where I backup profile and latest version, then get the tarball and install it.
2) At home (Ubuntu, desktop) the internal updater works, so after receiving the notification I do a quick backup (two tar commands of the binaries and of my profile) then call the updater (Help-> Check for Updates-> OK
3) At home (Ubuntu, laptop) I just call the updater without any backup (it's a sort of scratch machine)
2-3 is much simpler than 1 and I never had a problem.
The reasonable man adapts himself to the world: the unreasonable one persists in trying to adapt the world to himself. Therefore all progress depends on the unreasonable man. (G.B. Shaw)

User avatar
Pentium4User
Board Warrior
Board Warrior
Posts: 1282
Joined: 2019-04-24, 09:38
Contact:

Re: Linux permissions and Pale Moon updates [I'm stupid]

Unread post by Pentium4User » 2024-11-10, 20:00

You can use the internal updater if the place PM is located can be written by your user.
If that isn't writable, you can't replace the files because the UNIX permissions will deny it.
The profile picture shows my Maico EC30 E ceiling fan.

User avatar
Thad E G
Hobby Astronomer
Hobby Astronomer
Posts: 18
Joined: 2022-10-23, 10:38

Re: Linux permissions and Pale Moon updates [I'm stupid]

Unread post by Thad E G » 2024-11-10, 22:44

Pentium4User wrote:
2024-11-10, 20:00
You can use the internal updater if the place PM is located can be written by your user.
This and andy80's suggestions are very feasible.

If not seen already on the forum, the update message can alert me to the existence of the new version, which I can then download as .deb and install. Which I should have realised immediately, as I'd done it before!

In principle, I also do not like automatic updates, but update notifications are fine.

Lucio Chiappetti
Astronaut
Astronaut
Posts: 705
Joined: 2014-09-01, 15:11
Location: Milan Italy

Re: Linux permissions and Pale Moon updates [I'm stupid]

Unread post by Lucio Chiappetti » 2024-11-10, 22:52

Pentium4User wrote:
2024-11-10, 20:00
You can use the internal updater if the place PM is located can be written by your user.
If that isn't writable, you can't replace the files because the UNIX permissions will deny it.
Exactly. It might also be affected by the permissions of some symbolic link, parent directory or other system-dependent issue.
I have PM located under my user (always installed from tar, never by deb or repo) and the internal updater works nicely in Ubuntu (where the password required by sudo is my user password), while it doesn't in OpenSuse (where the password required by sudo is the root password).
The reasonable man adapts himself to the world: the unreasonable one persists in trying to adapt the world to himself. Therefore all progress depends on the unreasonable man. (G.B. Shaw)

User avatar
moonbat
Knows the dark side
Knows the dark side
Posts: 5366
Joined: 2015-12-09, 15:45
Contact:

Re: Linux permissions and Pale Moon updates [I'm stupid]

Unread post by moonbat » 2024-11-11, 07:12

There are 2 ways to install PM on Linux - the official tarballs from the downloads page, or using the repositories created by stevepusser and kannegieser.
If you choose the former, then extract the tarball to your home directory and run Pale Moon from there. This build has a built in updater that can be configured to install automatically or just alert you when there's a new update. If you don't like automatic updates and want to be in control of installing them, this is the way to go.

If you use stevepusser's repository, it is built without the built in updater since your distro's package manager will handle automatic updates. Pale Moon gets installed to /usr/lib/palemoon, and will automatically be integrated with your system (showing up in the application menu, or as an option to handle HTML documents). All updates are system handled and there are no permission errors because the system updater handles it. Instructions to set it up are here.

If you use kannegieser's repository, the problem is that the built in updater isn't removed; so even though the system can handle it, the auto updater will still announce a new update and fail because of lack of permissions.
"One hosts to look them up, one DNS to find them and in the darkness BIND them."

Image
KDE Neon on a Slimbook Excalibur (Ryzen 7 8845HS, 64 GB RAM)
AutoPageColor|PermissionsPlus|PMPlayer|Pure URL|RecordRewind|TextFX

User avatar
Thad E G
Hobby Astronomer
Hobby Astronomer
Posts: 18
Joined: 2022-10-23, 10:38

Re: Linux permissions and Pale Moon updates [I'm stupid]

Unread post by Thad E G » 2024-11-11, 11:50

moonbat wrote:
2024-11-11, 07:12
There are 2 ways to install PM on Linux - the official tarballs from the downloads page, or using the repositories created by stevepusser and kannegieser.
Thank you

Post Reply