<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-2">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Hi all,</div>
<div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
I am facing an issue with polkit rules for pkexec. Currently when i try to run an application with pkexec command I'm facing an error:</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Jun 07 09:46:06 eg pkexec[59699]: test: Error executing command as another user: Not authorized [USER=root] [TTY=/dev/pts/0] [CWD=/home/root] [COMMAND=/usr/sbin/nft]<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
the rule for this to be run, looks like this:</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<div>polkit.addRule(function(action, subject) {</div>
<div> user_app = [</div>
<div> '/bin/chmod',</div>
<div> '/bin/chown',</div>
<div> '/bin/rm',</div>
<div> '/sbin/ifconfig',</div>
<div> '/sbin/route',</div>
<div> '/usr/sbin/update-ca-certificates',</div>
<div> '/usr/bin/hostnamectl',</div>
<div> '/usr/bin/iotedge',</div>
<div> '/usr/bin/swupdate',</div>
<div> '/usr/bin/timedatectl',</div>
<div> '/usr/sbin/dmidecode',</div>
<div> '/usr/sbin/eg_reboot',</div>
<div> '/usr/sbin/factory_reset',</div>
<div> '/usr/sbin/grub_console',</div>
<div> '/usr/sbin/nft',</div>
<div> '/usr/sbin/read_admin_keys',</div>
<div> '/usr/sbin/useradd',</div>
<div> '/usr/sbin/userdel'</div>
<div>];</div>
<div> if (action.id == "org.freedesktop.policykit.exec" && subject.user == "tes" && user_app.includes(action.lookup("program"))) {</div>
<div> return polkit.Result.YES;</div>
<div>}</div>
<div>});</div>
<div><br>
</div>
<div>and is stored in /etc/polkit-1/rules.d/30-sbin-test.rules. This was all working before, with polkit 0.116, but now we have switched to newer yocto 4.0 and there is polkit 0.119, with which it stopped working for us. Does something has changed in the polkitd
service and I'm missing it?</div>
<div><br>
</div>
<div>BR</div>
<div>Piotr</div>
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div id="Signature">
<div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
</div>
</div>
</div>
</div>
</body>
</html>