Questions tagged [polkit]

Polkit (formerly PolicyKit) is a component for controlling system-wide privileges in Unix-like operating systems.

Filter by
Sorted by
Tagged with
0 votes
0 answers
22 views

How to modify/extend USB device access permissions in Debian?

I have a PC with Debian 10. I need the USB drives to have broader permissions than those given by default by the system. I will give an example: with the user "john" being authenticated, ...
Gustavo's user avatar
  • 11
0 votes
1 answer
23 views

Who or what start polkitd in Slackware?

On Linux "who" start daemons? Suse, RockyLinux, Debian use systemd Devuan use scripts in /etc/rc*.d/* which are symlinks from /etc/init.d Slackware: use scripts in /etc/rc.d/rc.* (for ...
elbarna's user avatar
  • 12.1k
0 votes
0 answers
40 views

Unable to determine the session we are in

I am currently running GarudaLinux(ArchLinux) , with Wayland and Hyprland as WM. Somewhere while disabling my GPUs adding Virtualization I lost my polkit configuration, and I am no longer able to run ...
Morphex's user avatar
  • 101
0 votes
0 answers
119 views

Polkit rule not working

My pkaction version is 0.112 I have a service that exists in the root directory and I want to give user group admin permissions to run the service. The service exists in /root/home/custom_service/...
jo.oj's user avatar
  • 3
3 votes
3 answers
465 views

systemctl suspend, Call to Suspend failed: Access denied

After a recent update on an Ubuntu 20.04: $ systemctl suspend Call to Suspend failed: Access denied Some weeks ago worked fine this way, without any root privileges. On journal: dbus-daemon[1310]: [...
Pablo A's user avatar
  • 2,337
0 votes
0 answers
53 views

Arch/Plasma - PolicyKit window not opening for Virtual Machine Manager;

I'm relatively new to linux and I have using Arch linux as the host for some virtual machines for some time now. I don't know what triggered it, but lately 90% of the times I boot and open the Virtual ...
his dudeness's user avatar
0 votes
0 answers
70 views

/sys/fs/selinux/policy doesn't get loaded

I am working in an ecosystem wherein a main server running RHEL8.4 boots up first, and then for any accessory single CPU machine that boots up subsequently, a copy of the loaded OS is transferred at ...
Vinod's user avatar
  • 155
3 votes
0 answers
139 views

Polkit Rule `systemctl enable`

How to write a rule so that an unprivileged user has the rights to execute the command systemctl enable my.service and only for my.service? I was able to give the rights to systemctl start/stop my....
Kolka V's user avatar
  • 31
0 votes
0 answers
53 views

Automount as another user (not logged)

When I plug a USB Key on my desktop install of a redhat fork, USB is automounted as /run/media//. I would like that plugged removable device will be automounted for another logged user (not the ...
SVA522's user avatar
  • 1
2 votes
2 answers
513 views

polkit-mate-authentication-agent won't start - "Error getting authority"

I am using Arch Linux on an x86_64 desktop. Since a recent full system update, it seems my polkit-mate-authentication-agent will not start. If I try to start it manually from the command line, I get ...
Time4Tea's user avatar
  • 2,288
0 votes
1 answer
203 views

How can I reconfigure openSUSE Leap's polkit to support having no root account?

I recently installed OpenSUSE Leap on my laptop, and when I installed it I neglected to disable the root account. Since then I've disabled the root account, added the user administrator_user to the ...
Ender Wiggin's user avatar
2 votes
1 answer
321 views

Allow udisksctl loop-setup without authentication for specific users

I have some tests that verify the behavior of a program under conditions where it runs out of disk space. Previously I've used dd to create a small-ish file then mkfs to make a filesystem on it, then ...
MadScientist's user avatar
  • 3,078
1 vote
0 answers
621 views

No Authentication Agent Found Although Already Running

I have an Alpine-Linux based system (PostmarketOS) running with the LXQT DE. Ever since I set up the system, out of the box it came with a bunch of problems with user authentication. I have various ...
Hexyl Cinnamal's user avatar
4 votes
2 answers
608 views

Sudo password dialogue not showing up for some apps over XRDP

It happens in both Ubuntu 22.04 and Manjaro (Gnome). If I install XRDP on it and connect to it via XRDP, for some apps the sudo password dialogue is working, and for some other apps, it does not work. ...
Damn Vegetables's user avatar
3 votes
0 answers
165 views

Alternative to "gksu" in "su" mode for non-root users

On an Oracle Linux 8 installation, I am trying to implement a desktop launcher for the GNOME shell where the (graphical) program is to be run as a different (non-root) user. However, I want to enforce ...
AdminBee's user avatar
  • 21.8k
1 vote
1 answer
204 views

Arch linux -- polkit auth_admin_keep setting doesn't remember authorization?

Today, after I entered the password for the service shutdown/start process with systemctl, I wanted to set it to not ask for permission for 5-10 minutes. That's why when I entered the policy settings, ...
Faith's user avatar
  • 11
1 vote
1 answer
709 views

Cant get right to add wifi in nmcli / polkit

I am remote on an ubuntu 16.04 system via ssh. I added the following content to /etc/polkit-1/localauthority/90-mandatory.d/99-network.pkla [Allow netdev users to modify all network states and ...
flood's user avatar
  • 278
4 votes
1 answer
2k views

What is the consequence of chmod 0755 for pkexec

I understand that one way to quickly mitigate CVE-2021-4034 is to chmod 0755 /usr/bin/pkexec (ie remove the SUID bit from it). I am unclear exactly what the real world consequence of this is. (And, ...
davidgo's user avatar
  • 195
2 votes
0 answers
1k views

Polkit rule to allow a user restart systemd service

I created /etc/polkit-1/rules.d/00-manage-docker-daemon.rules file with following rule to allow members of "agroup" to administer (stop/start/restart) docker.service (Centos 7): // Allow ...
DonJ's user avatar
  • 351
3 votes
1 answer
202 views

If make isn't supposed to run as root, then how can I install a policy file?

I understand that a Makefile should not require the user to be root. So I'm using /usr/local like this: PREFIX=/usr/local install: install -D example $(PREFIX)/bin/example That works fine. But I ...
user avatar
1 vote
0 answers
189 views

Python tkinter GUI is being pushed behind GDM3 polkit password window

It seems that my Python PAM RFID solution development has come to an end 🎉 and I finally finished developing kind of working GUI solution as well. Issue But, of course I ran into one final issue 😑 - ...
richardev's user avatar
1 vote
1 answer
405 views

pkexec shows in command line instead of GUI pop-up [closed]

I just hopped to Pop!_os yesterday and pkexec executes in terminal. It also ran into the error: polkit-agent-helper-1: error response to PolicyKit daemon: GDBus.Error:org.freedesktop.PolicyKit1.Error....
Rain's user avatar
  • 21
0 votes
1 answer
2k views

How can I repair PolKit?

First let me describe my system. It's Mint 19.0 (Tara). Mint itself isn't the problem, but it's upgrade mechanism seem to have triggered the issue. It came after upgrading from Mint 18.3 to 19.0. I ...
hman2's user avatar
  • 1
1 vote
1 answer
557 views

Unable to connect to an existing X session w/ Nomachine

I've used Nomachine for years to connect my 2 Linux laptops. The client machine A has always connected to an existing X session in the server machine B displaying it in both A and B. However, lately ...
jaam's user avatar
  • 226
0 votes
0 answers
108 views

Untraceble authentication popup

I have this peculiar problem, which I hope some one can help me to solve it. I use xubuntu 20.05, up to date (on Asus prime x470-pro MB, BIOS V5843) Every time I login, there is a popup requesting for ...
Jack's user avatar
  • 171
3 votes
1 answer
199 views

Why I am asked for the password of a different account when trying to mount a disk?

I am on Debian 10 Buster. When using Nautilus (aka Files), I am always asked for my password when trying to mount another HDD. All normal. A few days ago, I am not asked for my account password ...
daniel_hck's user avatar
0 votes
0 answers
137 views

Is it ok to chmod a+w files under sys/platform in a desktop env?

I developed and maintain a keyboard backlight CLI/GUI for Linux-running Clevo laptops (https://github.com/webketje/tuxedo-backlight-control). Some of the files this CLI/GUI needs to alter are under /...
webketje's user avatar
  • 101
2 votes
2 answers
322 views

Make Kate to ask password only once, instead of asking it at every file saving?

I am using KDE and Kate editor. When I want to edit some common system files such as configs in /etc, I am asked for password to save my edits. When I am editing files, I often do several changes, ...
Ashark's user avatar
  • 769
1 vote
1 answer
562 views

What does polkit authorization do to a process?

I want to let my user edit a configuration file in /etc from my graphical C application. One method is: fprintf( fopen("/tmp/tmpfile", "w+") , "content\n"); // Write to ...
Stewart's user avatar
  • 12.7k
2 votes
2 answers
2k views

dwm - session polkit

I am really struggling to get the session polkit to work. I am not really familiar with how it works, but I have been using gnome before switching to dwm and in gnome it worked perfectly, so I wanted ...
weisbrja's user avatar
  • 131
0 votes
0 answers
2k views

No polkit authentication agent found in AwesomeWM

I have Ubuntu 20.04 installed on my computer, and recently I've abandoned Gnome in favor of AwesomeWM. I've since learned that a DE is much more fleshed-out than just using a WM, so I've had to rice ...
Yehuda's user avatar
  • 207
1 vote
0 answers
505 views

Mount usb drive as regular user in debian/sid

I'm using debian sid, and since one of the upgrades I cannot normally mount usb drive (sdcard). In dolphin it results in message saying "Not authorized to perform operation" So after some ...
Emiter's user avatar
  • 121
1 vote
0 answers
363 views

polkit.Result.AUTH_ADMIN_KEEP not working with fprintd

I'm currently configuring fprintd on my computer. It is a powerful tool that makes the fingerprint authorization possible on Unix-like systems. However, a user can add modify and delete fingerprints ...
TJM's user avatar
  • 534
4 votes
1 answer
2k views

Polkit rule for systemd template files - how to

I am trying to use polkit to allow specific user to start/stop/restart specific services. Those services are defined via systemd template, so for example user can run this command: systmctl stop my-...
Petr's user avatar
  • 101
3 votes
1 answer
684 views

Polkit not working when trying to reload nmcli connection

I'm currently working on an Archlinux system and I try to configure rules used by polkit so users inside network group are able to run nmcli commands. I've create a polkit rule as follow : polkit....
Maniolias's user avatar
2 votes
0 answers
467 views

DBus NameOwnerChanged

When i run dbus-monitor --system, i got these 20 events per second: signal time=1585510053.359267 sender=org.freedesktop.DBus -> destination=(null destination) serial=2019 path=/org/freedesktop/...
Salim Toufik Nedjam's user avatar
0 votes
1 answer
2k views

Can't start polkit-mate-authentication-agent

I'm using Mate on Parabola GNU/Linux (based on Arch). I have the polkit-mate-authentication-agent installed and it is supposed to be autostarting on login to the desktop; however, it doesn't seem to ...
Time4Tea's user avatar
  • 2,288
0 votes
1 answer
260 views

GDBus/PolicyKit error in LXDE

I am using LXDE with Parabola (a libre derivative of Arch Linux). When I log in to the desktop environment, a window pops up with the following error: GDBus.Error:org.freedesktop.PolicyKit1.Error....
Time4Tea's user avatar
  • 2,288
0 votes
1 answer
164 views

Does "Polkit" make use of linux capabilities?

I know that some authentication programs like KDE's KAuth can use polkit as the backend.And what makes polkit special is that it can grant some specific privileges to a non-privileged process.A ...
Parsa Mousavi's user avatar
1 vote
0 answers
359 views

polkit on OpenBSD

I use xfce which came with a polkit action org.xfce.thunar.policy in /usr/local/share/polkit-1/actions/. This action allow to run thunar as root if you can give the root password. On debian with ...
ctac_'s user avatar
  • 1,960
-1 votes
1 answer
562 views

CentOS 8: Gparted requires polkit, where may I find it?

In a previous question I asked for help finding polkit so I could install gparted. The one answer I received allowed gparted's install by adding another repository, but led to other problems. Now ...
K7AAY's user avatar
  • 3,726
2 votes
2 answers
3k views

CentOS 8 install gparted fails

In CentOS 8.0 Server with desktop, I am trying to install gparted. It's not in the native software app, so I tried: sudo yum install epel-release sudo yum install gparted and when I ran the latter, ...
K7AAY's user avatar
  • 3,726
2 votes
0 answers
4k views

How to avoid polkit error/timeout "Authorization not available" when restarting systemd services as root

On a very small server I have polkit and dbus daemons/services not running in order to save resources and harden the server (these are not needed for normal running and they increase the attack ...
Ned64's user avatar
  • 8,546
0 votes
0 answers
180 views

Cannot modify system configuration

why i cannot add user after install vnc and add the polkit? if i remove the polkit i able to add user from console but rdp didn't work. please help. here is the capture: i am using ubuntu 18.04, ...
Only's user avatar
  • 1
2 votes
1 answer
440 views

How to achieve Linux privilege escalation by polkitd without password but with Yes/No prompt?

I want to implement Window's UAC like access control using polkit(d). So if I open Network manager or printers, it should ask me yes/no. No password prompt but window must be showed to user. I tried ...
eri's user avatar
  • 865
2 votes
1 answer
2k views

Controlling systemd system service as user

I have several services that need to be user-controlled and I can't use them as user services (their requirement is system service with root access), plus there is weird GROUP/216 bug that I haven't ...
Petr's user avatar
  • 101
2 votes
1 answer
549 views

How to get rid of nag screen "Authentication is required to set one's own greeter properties"?

After a recent update on my Linux system I get a dialogue window every few (5?) minutes with the same message: Authentication is required to set one's own greeter properties. It has a password ...
Ned64's user avatar
  • 8,546
13 votes
2 answers
14k views

system policy prevents control of network connections

When we log into a KDE seesion using X2Go client, the user is greeted with a dialog asking for a sudo password. I do not want the user to have a sudo password and I would like to prevent the dialog ...
MountainX's user avatar
  • 17.3k
9 votes
3 answers
33k views

How can I reboot a server with systemctl if systemctl reboot fails?

I tried rebooting my CentOS 7 server but it gives ridiculous error messages. As root (of course): # systemctl reboot Authorization not available. Check if polkit service is running or see debug ...
Ned64's user avatar
  • 8,546
1 vote
1 answer
1k views

Setup .pkla rule for polkit

I'd like to start a systemd service using DBus in one of my apps which is run as non-root user myuser. For that I need to set up a PolicyKit where I'm using polkit 0.105 and added the following .pkla ...
plazmakeks's user avatar