Otherwise nm-applet is not able to control NetworkManager over dbus, and
you get the following error messages:
```
(nm-applet:19808): nm-applet-WARNING **: 17:24:56.716: disconnect_cb: Device disconnect failed: (1) org.freedesktop.NetworkManager.network-control request failed: not authorized
```
This is unfortunate, but I don't see a better way around it.
See also: https://groups.google.com/d/topic/qubes-users/b_yEFCMazuM/discussion
This is for R4.0 and fedora-28-minimal, but might also apply to R3.2 (not tested). Without adding 'gnome-keyring' the user will not get the 'enter password' dialog when selecting a WiFi connection and has to enter the password under 'Edit connections...' | 'WiFi security' instead.
When studying the document for 4.0 , I overlooked the fact that `qubes-core-agent-networking` is generally required for any network access, not just for using the minimal template as `sys-net` or `sys-firewall`.
I found the existing doc misleading, as it claims sudo is not installed. This misled me to try to install sudo, which dnf said was already there. Also, the fact that the template does not have passwordless root is not a bug and therefore the relevant install should not be described as a "fix" in the doc.
I have also included explicit instructions to enable passwordless root, which will also serve as an example to newcomers of how to install the packages listed in the following section.
* updated for fedora-26-minimal template (no-one should safely be using -25- anymore, correct?)
* removed packages installed by default
* I've never seen the minimal template weigh less than 2GB (was 300mb from a pre-3.2 version of qubes?)
* added Qubes R4.0 specific things (I've always seen sudo installed by default for the R3.2 minimal template)
Formatted the document in a more structured table listing the known use cases.
- Separated the network utilities from the standard util packages
- Removed the ProxyVM section completely, as it didn't add much information
- Moved the logging information to an ending section, where more topics can be listed.
Expanded the description of a standard NetVM with qubes-input-proxy-sender, so that a 3.2 standard installation with NetVM=UsbVM does not leave USB broken when replacing the NetVM template with the fedora-minimal one.
