Solutions
Wayland is designed to not allow elevated (sudo -H, gksu ...) permissions with GUI application programs. It is a good idea to do such tasks with command line tools. But there are workarounds, if you have a GUI tool, that works well for you and needs elevated permissions. (I use two such standard tools: the Synaptic Package Manager, synaptic and the partitioning tool Gparted, gparted. I use MakeUSB to create USB boot drives, mkusb, too, but it can run the parts that need elevated permissions without graphics.)
There is a workaround to allow graphical application programs owned by other users than the logged in user in Wayland,
xhost +si:localuser:root
gksu and gksudo are not bundled with standard Ubuntu and do not work here, but they work in Xorg.
Instead you can use
sudo -H
It is a good idea to prevent graphical application programs owned by other users than the logged in user afterwards,
xhost -si:localuser:root
Temporary access for root to the Wayland desktop via function gks
Please avoid sudo GUI-program. It can cause the system to overwrite the configuration files for your regular user ID with root's configuration and set ownership and permissions to fit root and lock out your regular user ID. You should run GUI applications with sudo -H, which writes the configuration files in root's home directory /root. Example:
sudo -H gedit myfile.txt
But there is a risk that you forget -H. Instead you can create a function, for example gks
gks () { xhost +si:localuser:root; sudo -H "$@"; xhost -si:localuser:root; }
and store it in your ~/.bashrc near the aliases. Then you can run
gks gedit myfile.txt
in a way similar to how you used gksudo before.
Testing
You can check how sudo, sudo -H and gks work with the following commands
sudodus@xenial32 ~ $ sudo bash -c "echo ~"
/home/sudodus
sudodus@xenial32 ~ $ sudo -H bash -c "echo ~"
/root
sudodus@xenial32 ~ $ gks () { xhost +si:localuser:root; sudo -H "$@"; xhost -si:localuser:root; }
sudodus@xenial32 ~ $ gks bash -c "echo ~"
localuser:root being added to access control list
/root
localuser:root being removed from access control list
sudodus@xenial32 ~ $
and of course
gks gedit myfile.txt
according to the example in the previous section.
Method that works via Alt-F2 and Gnome Shell menu
Instead of adding a simple one-line function to ~/.bashrc, you can make a system, that works also without bash. It may be convenient to use, but is more complicated to set up. Please notice that you should install only one of the alternatives, because the one-line function will disturb using this more complicated system.
Three files
The shellscript gks:
#!/bin/bash
xhost +si:localuser:root
if [ $# -eq 0 ]
then
xterm -T "gks console - enter command and password" \
-fa default -fs 14 -geometry 60x4 \
-e bash -c 'echo "gks lets you run command lines with GUI programs
with temporary elevated permissions in Wayland."; \
read -p "Enter command: " cmd; \
cmdfile=$(mktemp); echo "$cmd" > "$cmdfile"; \
sudo -H bash "$cmdfile"; rm "$cmdfile"'
else
xterm -T "gks console - enter password" -fa default -fs 14 -geometry 60x4 -e sudo -H "$@"
fi
xhost -si:localuser:root;
The desktop file gks.desktop:
[Desktop Entry]
Version=1.0
Categories=Application;System;
Type=Application
Name=gks
Description=Run program with temporary elevated permissions in Wayland
Comment=Run program with temporary elevated permissions in Wayland
Exec=gks %f
Icon=/usr/share/icons/gks.svg
Terminal=false
StartupNotify=false
GenericName[en_US.UTF-8]=Run program with temporary elevated permissions in Wayland
The icon file gks.svg looks like this:
You can download the icon file or a tarball with all three files from this link,
wiki.ubuntu.com/Wayland/gks
Copy the [extracted or copied & pasted] files to the following locations,
sudo cp gks /usr/bin
sudo cp gks.desktop /usr/share/applications/
sudo cp gks.svg /usr/share/icons
Logout/login or reboot, and there should be a working desktop icon. It will work from a terminal window like with the simple solution with the function.
Alt F2 box:
Gnome Shell menu:
gks console and gparted:
Custom script and desktop file
If you have only a few GUI applications, that need elevated permissions, you could make custom scripts and desktop files for them and avoid entering the command (application name). You would only enter the password, which is not more difficult compared to the previous versions of Ubuntu (you should enter the password anyway).
Example with the simple GUI program xlogo that comes with the program package x11-apps:
The shellscript gkslogo (simplified compared to gks),
#!/bin/bash
xhost +si:localuser:root
xterm -T "gks console - enter password" -fa default -fs 14 -geometry 60x4 -e sudo -H xlogo
xhost -si:localuser:root;
The desktop file gkslogo.desktop:
[Desktop Entry]
Version=1.0
Categories=Application;System;
Type=Application
Name=gkslogo
Description=Run program with temporary elevated permissions in Wayland
Comment=Run program with temporary elevated permissions in Wayland
Exec=gkslogo
Icon=/usr/share/icons/gks.svg
Terminal=false
StartupNotify=false
GenericName[en_US.UTF-8]=Run program with temporary elevated permissions in Wayland
I was lazy and used the same icon file gks.svg
Copy the [copied & pasted] files to the following locations,
sudo cp gkslogo /usr/bin
sudo cp gkslogo.desktop /usr/share/applications/
gks[logo] console and xlogo:
gksudowon't work in a Wayland session, you may switch to an Xorg session and try. – pomsky Oct 4 '17 at 13:59gksu -dg synapticYou never should be doing that anyways. – Rinzwind Oct 21 '17 at 14:22