Some help with PolicyKit basics

[Robert Ancell]

That's just what I want!!  Thanks!

2009/7/27 David Zeuthen <david at fubar.dk>:
> On Sun, 2009-07-26 at 16:22 -0400, David Zeuthen wrote:
>> Hmm, it might be nice to have library API for doing all this since it is
>> rather complicated. Like, we'd have some code in polkit-gobject-1 to do
>> the server side bits and maybe a polkit-gtk-1 library for the client
>> side bits. Unfortunately we don't have a nice D-Bus library for GLib
>> just yet so it is not yet feasible to do the server side bits just
>> yet...
>
> I thought a bit more about this and there's really no reason it has to
> be as complicated as I originally described. So I've just added a
> libpolkit-gtk-1.so library to polkit-gnome with a PolkitLockButton
> widget that does all this without having to involve the mechanism
>
> http://hal.freedesktop.org/docs/polkit-gtk/
>
> This widget is only useful for control center stuff but since there's a
> good chunk of these, this work will probably end up paying off down the
> road. Here's a simple example of how to use it
>
> http://git.gnome.org/cgit/PolicyKit-gnome/tree/polkitgtk/example.c
>
> (Implementation-wise we now allow unprivileged callers to check
> authorizations for processes they own themselves. There's a twist
> though, details (as consumed by PolkitBackendLookupInfo extensions)
> can't be passed when checking authorizations, as this would introduce a
> security hole since (dialogs could be spoofed).)
>
>     David
>
>
>