policykit.exec mechanism

Yclept Nemo orbisvicis at gmail.com
Wed Mar 24 15:22:27 PDT 2010


Polkit contains the
"/usr/share/polkit-1/actions/org.freedesktop.policykit.policy" actions
file. Is any accompanying mechanism provided as well?

I am hoping along the lines of:

/usr/share/dbus-1/system-services/*
 - a service file that automatically launches the polickit.exec mechanism
/usr/share/dbus-1/interfaces/*
 - a set of methods the client can request over dbus from the mechanism
/etc/dbus-1/system.d
 - any user is allowed to make a request

The client, started as root user, simply listens for dbus requests,
calls polkitd over dbus requesting "pk_authority.CheckAuthorization",
and if authorized, swaps the euid of the client-requested pids.

Well, probably this mechanism doesn't exist, which is why gksu-polkit
was created...


More information about the polkit-devel mailing list