Polkit - Revision history

PlumpPot: Remove trailing whitespace

2026-03-27T20:53:07Z

Remove trailing whitespace

← Older revision		Revision as of 20:53, 27 March 2026
Line 59:		Line 59:
	(action.id == "org.freedesktop.udisks2.filesystem-mount" \|\|		(action.id == "org.freedesktop.udisks2.filesystem-mount" \|\|
	action.id == "org.freedesktop.udisks2.filesystem-mount-system" \|\|		action.id == "org.freedesktop.udisks2.filesystem-mount-system" \|\|
	action.id == "org.freedesktop.udisks2.filesystem-unmount-others" \|\|		action.id == "org.freedesktop.udisks2.filesystem-unmount-others" \|\|
	action.id == "org.freedesktop.udisks2.eject-media" \|\|		action.id == "org.freedesktop.udisks2.eject-media" \|\|
	action.id == "org.freedesktop.udisks2.encrypted-unlock" \|\|		action.id == "org.freedesktop.udisks2.encrypted-unlock" \|\|

DenysNykula: /* Example1 */ Fix 50-udisks.rules JS syntax and the action id for eject

2026-03-19T22:18:41Z

Example1: Fix 50-udisks.rules JS syntax and the action id for eject

← Older revision		Revision as of 22:18, 19 March 2026
Line 56:		Line 56:
	A sample polkit rule file {{Path\|/etc/polkit-1/rules.d/50-udisks.rules}} which allow [[File_management#Automounting_removable_storage\|automatic mounting of removable storage]] based on being a member of '''disk''' or '''storage''' group. This rule depends only on group membership which works with seatd: {{cat\|/etc/polkit-1/rules.d/50-udisks.rules\|<nowiki>		A sample polkit rule file {{Path\|/etc/polkit-1/rules.d/50-udisks.rules}} which allow [[File_management#Automounting_removable_storage\|automatic mounting of removable storage]] based on being a member of '''disk''' or '''storage''' group. This rule depends only on group membership which works with seatd: {{cat\|/etc/polkit-1/rules.d/50-udisks.rules\|<nowiki>
	polkit.addRule(function(action, subject) {		polkit.addRule(function(action, subject) {
	if (subject.isInGroup("disk") \|\| subject.isInGroup("storage")) &&		if ((subject.isInGroup("disk") \|\| subject.isInGroup("storage")) &&
	(action.id == "org.freedesktop.udisks2.filesystem-mount" \|\|		(action.id == "org.freedesktop.udisks2.filesystem-mount" \|\|
	action.id == "org.freedesktop.udisks2.filesystem-mount-system" \|\|		action.id == "org.freedesktop.udisks2.filesystem-mount-system" \|\|
	action.id == "org.freedesktop.udisks2.filesystem-unmount-others" \|\|		action.id == "org.freedesktop.udisks2.filesystem-unmount-others" \|\|
	action.id == "org.freedesktop.udisks2.~~drive~~-~~eject~~" \|\|		action.id == "org.freedesktop.udisks2.eject-media" \|\|
	action.id == "org.freedesktop.udisks2.encrypted-unlock" \|\|		action.id == "org.freedesktop.udisks2.encrypted-unlock" \|\|
	action.id == "org.freedesktop.udisks2.power-off-drive")) {		action.id == "org.freedesktop.udisks2.power-off-drive")) {
	return polkit.Result.YES; //		return polkit.Result.YES;
	}		}
	});		});

Encode: /* Authentication agents */ Correct KDE agent package name

2025-11-18T20:23:40Z

Authentication agents: Correct KDE agent package name

← Older revision		Revision as of 20:23, 18 November 2025
Line 37:		Line 37:

	* {{Pkg\|xfce-polkit}}		* {{Pkg\|xfce-polkit}}
	* {{~~pkg~~\|mate-polkit}}		* {{Pkg\|mate-polkit}}
	* {{~~pkg~~\|polkit-gnome}}		* {{Pkg\|polkit-gnome}}
	* {{~~pkg~~\|polkit-kde-agent}}		* {{Pkg\|polkit-kde-agent-1}}
	For [[Xfce]], install {{Pkg\|xfce-polkit}} as follows:{{Cmd\|# apk add ~~{{Pkg\|~~xfce-polkit}}}}
			For [[Xfce]], install {{Pkg\|xfce-polkit}} as follows:

			{{Cmd\|# apk add xfce-polkit}}

	== Polkit rule files ==		== Polkit rule files ==

Prabuanand: combined warning

2025-11-11T05:29:48Z

combined warning

← Older revision		Revision as of 05:29, 11 November 2025
Line 32:		Line 32:
	When an unprivileged user attempts to access a privileged location (such as by typing admin:// in the address bar of a [[File_management#File_managers\|File Manager]]), when the appropriate polkit policy requires administrative authentication, a password dialogue will typically appear.		When an unprivileged user attempts to access a privileged location (such as by typing admin:// in the address bar of a [[File_management#File_managers\|File Manager]]), when the appropriate polkit policy requires administrative authentication, a password dialogue will typically appear.

	{{Warning\|Authentication agents will work only when [[#Using polkit with elogind\|polkit is used with elogind]]~~.}}~~		{{Warning\|Authentication agents will work only when [[PAM]] is properly set up and [[#Using polkit with elogind\|polkit is used with elogind]].}}
	~~{{Warning\|Authentication agents won't work unless [[PAM]] is properly set up~~.}}

	Some of the authentication agents available in Alpine linux is listed below:		Some of the authentication agents available in Alpine linux is listed below:

JakeCubes: Changed seatd's auth agent incompatibility note to a warning.

2025-11-09T02:38:50Z

Changed seatd's auth agent incompatibility note to a warning.

← Older revision		Revision as of 02:38, 9 November 2025
Line 32:		Line 32:
	When an unprivileged user attempts to access a privileged location (such as by typing admin:// in the address bar of a [[File_management#File_managers\|File Manager]]), when the appropriate polkit policy requires administrative authentication, a password dialogue will typically appear.		When an unprivileged user attempts to access a privileged location (such as by typing admin:// in the address bar of a [[File_management#File_managers\|File Manager]]), when the appropriate polkit policy requires administrative authentication, a password dialogue will typically appear.

	{{~~Note~~\|Authentication agents will work only when [[#Using polkit with elogind\|polkit is used with elogind]].}}		{{Warning\|Authentication agents will work only when [[#Using polkit with elogind\|polkit is used with elogind]].}}
	{{Warning\|Authentication agents won't work unless [[PAM]] is properly set up.}}		{{Warning\|Authentication agents won't work unless [[PAM]] is properly set up.}}

JakeCubes: /* Authentication agents */

2025-11-09T02:30:09Z

Authentication agents

← Older revision		Revision as of 02:30, 9 November 2025
Line 33:		Line 33:

	{{Note\|Authentication agents will work only when [[#Using polkit with elogind\|polkit is used with elogind]].}}		{{Note\|Authentication agents will work only when [[#Using polkit with elogind\|polkit is used with elogind]].}}
			{{Warning\|Authentication agents won't work unless [[PAM]] is properly set up.}}

	Some of the authentication agents available in Alpine linux is listed below:		Some of the authentication agents available in Alpine linux is listed below:

Prabuanand: removed :Category:Security as :Category:Authentication is a sub-category of it already

2025-09-02T04:40:43Z

removed Category:Security as Category:Authentication is a sub-category of it already

← Older revision		Revision as of 04:40, 2 September 2025
Line 88:		Line 88:
	* [https://wiki.archlinux.org/title/Running_GUI_applications_as_root Arch wiki Running GUI applications as root]		* [https://wiki.archlinux.org/title/Running_GUI_applications_as_root Arch wiki Running GUI applications as root]

	[[Category:~~Security~~]]		[[Category:Authentication]]

Prabuanand: added need for correct permission to the rule files

2025-09-02T04:38:46Z

added need for correct permission to the rule files

← Older revision		Revision as of 04:38, 2 September 2025
Line 45:		Line 45:

	The following example rule files have been provided to show the limitations of [[#Using polkit with seatd\|seatd]].		The following example rule files have been provided to show the limitations of [[#Using polkit with seatd\|seatd]].

			Ensure that correct permissions are set for the rule files. For example, for the rule file {{Path\|/etc/polkit-1/rules.d/50-udisks.rules}}:{{Cmd\|<nowiki># chown root:root /etc/polkit-1/rules.d/50-udisks.rules
			# chmod 644 /etc/polkit-1/rules.d/50-udisks.rules</nowiki>}}

	=== Example1 ===		=== Example1 ===

Prabuanand: moved Enabling privilege escalation GUI to File management page

2025-08-08T08:26:35Z

moved Enabling privilege escalation GUI to File management page

← Older revision		Revision as of 08:26, 8 August 2025
Line 41:		Line 41:
	* {{pkg\|polkit-kde-agent}}		* {{pkg\|polkit-kde-agent}}
	For [[Xfce]], install {{Pkg\|xfce-polkit}} as follows:{{Cmd\|# apk add {{Pkg\|xfce-polkit}}}}		For [[Xfce]], install {{Pkg\|xfce-polkit}} as follows:{{Cmd\|# apk add {{Pkg\|xfce-polkit}}}}

	~~== Enabling privilege escalation GUI ==~~

	To enable the privilege escalation GUI for an [[Setting_up_a_new_user#Admin_user\|admin user]], install the appropriate [[#Authentication agents\|authentication agent]] for the desktop environment and ensure that [[#Using polkit with elogind\|polkit is used with elogind]].

	~~Ensure that the authentication agent is autostarted along with the desktop environment.~~

	~~If the above steps are completed, When {{ic\|admin://}} is typed in the address bar of [[File_management#File_managers\|File Manager]], a password dialogue will appear.~~

	== Polkit rule files ==		== Polkit rule files ==

Prabuanand: added Sway as an example for minimal desktop

2025-08-07T16:31:02Z

added Sway as an example for minimal desktop

← Older revision		Revision as of 16:31, 7 August 2025
Line 21:		Line 21:
	=== Using polkit with seatd ===		=== Using polkit with seatd ===

	For a minimal [[~~Desktop environments and Window managers\|desktop~~]], polkit can be used with [[Seatd#Polkit\|seatd with certain limitations]]. With Seatd, polkit rules can only evaluate group membership, resulting in a 'yes' or 'no' decision. Graphical, session aware [[#Authentication agents\|authentication agents]] are not supported.		For a minimal desktop like [[Sway]], polkit can be used with [[Seatd#Polkit\|seatd with certain limitations]]. With Seatd, polkit rules can only evaluate group membership, resulting in a 'yes' or 'no' decision. Graphical, session aware [[#Authentication agents\|authentication agents]] are not supported.

	To proceed to use polkit with seatd, install the {{Pkg\|polkit}} package and enable the {{ic\|polkit}} service using [[OpenRC]]: {{Cmd\|<nowiki># apk add polkit		To proceed to use polkit with seatd, install the {{Pkg\|polkit}} package and enable the {{ic\|polkit}} service using [[OpenRC]]: {{Cmd\|<nowiki># apk add polkit

← Older revision		Revision as of 20:53, 27 March 2026
Line 59:		Line 59:
	(action.id == "org.freedesktop.udisks2.filesystem-mount" \|\|		(action.id == "org.freedesktop.udisks2.filesystem-mount" \|\|
	action.id == "org.freedesktop.udisks2.filesystem-mount-system" \|\|		action.id == "org.freedesktop.udisks2.filesystem-mount-system" \|\|
	action.id == "org.freedesktop.udisks2.filesystem-unmount-others" \|\|		action.id == "org.freedesktop.udisks2.filesystem-unmount-others" \|\|
	action.id == "org.freedesktop.udisks2.eject-media" \|\|		action.id == "org.freedesktop.udisks2.eject-media" \|\|
	action.id == "org.freedesktop.udisks2.encrypted-unlock" \|\|		action.id == "org.freedesktop.udisks2.encrypted-unlock" \|\|

← Older revision		Revision as of 22:18, 19 March 2026
Line 56:		Line 56:
	A sample polkit rule file {{Path\|/etc/polkit-1/rules.d/50-udisks.rules}} which allow [[File_management#Automounting_removable_storage\|automatic mounting of removable storage]] based on being a member of '''disk''' or '''storage''' group. This rule depends only on group membership which works with seatd: {{cat\|/etc/polkit-1/rules.d/50-udisks.rules\|<nowiki>		A sample polkit rule file {{Path\|/etc/polkit-1/rules.d/50-udisks.rules}} which allow [[File_management#Automounting_removable_storage\|automatic mounting of removable storage]] based on being a member of '''disk''' or '''storage''' group. This rule depends only on group membership which works with seatd: {{cat\|/etc/polkit-1/rules.d/50-udisks.rules\|<nowiki>
	polkit.addRule(function(action, subject) {		polkit.addRule(function(action, subject) {
	if (subject.isInGroup("disk") \|\| subject.isInGroup("storage")) &&		if ((subject.isInGroup("disk") \|\| subject.isInGroup("storage")) &&
	(action.id == "org.freedesktop.udisks2.filesystem-mount" \|\|		(action.id == "org.freedesktop.udisks2.filesystem-mount" \|\|
	action.id == "org.freedesktop.udisks2.filesystem-mount-system" \|\|		action.id == "org.freedesktop.udisks2.filesystem-mount-system" \|\|
	action.id == "org.freedesktop.udisks2.filesystem-unmount-others" \|\|		action.id == "org.freedesktop.udisks2.filesystem-unmount-others" \|\|
	action.id == "org.freedesktop.udisks2.~~drive~~-~~eject~~" \|\|		action.id == "org.freedesktop.udisks2.eject-media" \|\|
	action.id == "org.freedesktop.udisks2.encrypted-unlock" \|\|		action.id == "org.freedesktop.udisks2.encrypted-unlock" \|\|
	action.id == "org.freedesktop.udisks2.power-off-drive")) {		action.id == "org.freedesktop.udisks2.power-off-drive")) {
	return polkit.Result.YES; //		return polkit.Result.YES;
	}		}
	});		});

← Older revision		Revision as of 20:23, 18 November 2025
Line 37:		Line 37:

	* {{Pkg\|xfce-polkit}}		* {{Pkg\|xfce-polkit}}
	* {{~~pkg~~\|mate-polkit}}		* {{Pkg\|mate-polkit}}
	* {{~~pkg~~\|polkit-gnome}}		* {{Pkg\|polkit-gnome}}
	* {{~~pkg~~\|polkit-kde-agent}}		* {{Pkg\|polkit-kde-agent-1}}
	For [[Xfce]], install {{Pkg\|xfce-polkit}} as follows:{{Cmd\|# apk add ~~{{Pkg\|~~xfce-polkit}}}}
			For [[Xfce]], install {{Pkg\|xfce-polkit}} as follows:

			{{Cmd\|# apk add xfce-polkit}}

	== Polkit rule files ==		== Polkit rule files ==

← Older revision		Revision as of 02:38, 9 November 2025
Line 32:		Line 32:
	When an unprivileged user attempts to access a privileged location (such as by typing admin:// in the address bar of a [[File_management#File_managers\|File Manager]]), when the appropriate polkit policy requires administrative authentication, a password dialogue will typically appear.		When an unprivileged user attempts to access a privileged location (such as by typing admin:// in the address bar of a [[File_management#File_managers\|File Manager]]), when the appropriate polkit policy requires administrative authentication, a password dialogue will typically appear.

	{{~~Note~~\|Authentication agents will work only when [[#Using polkit with elogind\|polkit is used with elogind]].}}		{{Warning\|Authentication agents will work only when [[#Using polkit with elogind\|polkit is used with elogind]].}}
	{{Warning\|Authentication agents won't work unless [[PAM]] is properly set up.}}		{{Warning\|Authentication agents won't work unless [[PAM]] is properly set up.}}