Questions tagged [polkit]
Polkit (formerly PolicyKit) is a component for controlling system-wide privileges in Unix-like operating systems.
118
questions
0
votes
0
answers
22
views
How to modify/extend USB device access permissions in Debian?
I have a PC with Debian 10. I need the USB drives to have broader permissions than those given by default by the system.
I will give an example: with the user "john" being authenticated, ...
- 11
0
votes
1
answer
23
views
Who or what start polkitd in Slackware?
On Linux "who" start daemons?
Suse, RockyLinux, Debian use systemd
Devuan use scripts in /etc/rc*.d/* which are symlinks from /etc/init.d
Slackware: use scripts in /etc/rc.d/rc.* (for ...
- 12.1k
0
votes
0
answers
40
views
Unable to determine the session we are in
I am currently running GarudaLinux(ArchLinux) , with Wayland and Hyprland as WM.
Somewhere while disabling my GPUs adding Virtualization I lost my polkit configuration, and I am no longer able to run ...
- 101
0
votes
0
answers
119
views
Polkit rule not working
My pkaction version is 0.112
I have a service that exists in the root directory and I want to give user group admin permissions to run the service.
The service exists in /root/home/custom_service/...
- 3
3
votes
3
answers
465
views
systemctl suspend, Call to Suspend failed: Access denied
After a recent update on an Ubuntu 20.04:
$ systemctl suspend
Call to Suspend failed: Access denied
Some weeks ago worked fine this way, without any root privileges.
On journal:
dbus-daemon[1310]: [...
- 2,337
0
votes
0
answers
53
views
Arch/Plasma - PolicyKit window not opening for Virtual Machine Manager;
I'm relatively new to linux and I have using Arch linux as the host for some virtual machines for some time now. I don't know what triggered it, but lately 90% of the times I boot and open the Virtual ...
- 121
0
votes
0
answers
70
views
/sys/fs/selinux/policy doesn't get loaded
I am working in an ecosystem wherein a main server running RHEL8.4 boots up first, and then for any accessory single CPU machine that boots up subsequently, a copy of the loaded OS is transferred at ...
- 155
3
votes
0
answers
139
views
Polkit Rule `systemctl enable`
How to write a rule so that an unprivileged user has the rights to execute the command systemctl enable my.service and only for my.service?
I was able to give the rights to systemctl start/stop my....
- 31
0
votes
0
answers
53
views
Automount as another user (not logged)
When I plug a USB Key on my desktop install of a redhat fork, USB is automounted as /run/media//. I would like that plugged removable device will be automounted for another logged user (not the ...
- 1
2
votes
2
answers
513
views
polkit-mate-authentication-agent won't start - "Error getting authority"
I am using Arch Linux on an x86_64 desktop. Since a recent full system update, it seems my polkit-mate-authentication-agent will not start. If I try to start it manually from the command line, I get ...
- 2,288
0
votes
1
answer
203
views
How can I reconfigure openSUSE Leap's polkit to support having no root account?
I recently installed OpenSUSE Leap on my laptop, and when I installed it I neglected to disable the root account. Since then I've disabled the root account, added the user administrator_user to the ...
- 215
2
votes
1
answer
321
views
Allow udisksctl loop-setup without authentication for specific users
I have some tests that verify the behavior of a program under conditions where it runs out of disk space. Previously I've used dd to create a small-ish file then mkfs to make a filesystem on it, then ...
- 3,078
1
vote
0
answers
621
views
No Authentication Agent Found Although Already Running
I have an Alpine-Linux based system (PostmarketOS) running with the LXQT DE.
Ever since I set up the system, out of the box it came with a bunch of problems with user authentication. I have various ...
4
votes
2
answers
608
views
Sudo password dialogue not showing up for some apps over XRDP
It happens in both Ubuntu 22.04 and Manjaro (Gnome). If I install XRDP on it and connect to it via XRDP, for some apps the sudo password dialogue is working, and for some other apps, it does not work. ...
- 1,207
3
votes
0
answers
165
views
Alternative to "gksu" in "su" mode for non-root users
On an Oracle Linux 8 installation, I am trying to implement a desktop launcher for the GNOME shell where the (graphical) program is to be run as a different (non-root) user. However, I want to enforce ...
- 21.8k
1
vote
1
answer
204
views
Arch linux -- polkit auth_admin_keep setting doesn't remember authorization?
Today, after I entered the password for the service shutdown/start process with systemctl, I wanted to set it to not ask for permission for 5-10 minutes. That's why when I entered the policy settings, ...
- 11
1
vote
1
answer
709
views
Cant get right to add wifi in nmcli / polkit
I am remote on an ubuntu 16.04 system via ssh.
I added the following content to /etc/polkit-1/localauthority/90-mandatory.d/99-network.pkla
[Allow netdev users to modify all network states and ...
- 278
4
votes
1
answer
2k
views
What is the consequence of chmod 0755 for pkexec
I understand that one way to quickly mitigate CVE-2021-4034 is to chmod 0755 /usr/bin/pkexec (ie remove the SUID bit from it).
I am unclear exactly what the real world consequence of this is. (And, ...
- 195
2
votes
0
answers
1k
views
Polkit rule to allow a user restart systemd service
I created /etc/polkit-1/rules.d/00-manage-docker-daemon.rules file with following rule to allow members of "agroup" to administer (stop/start/restart) docker.service (Centos 7):
// Allow ...
- 351
3
votes
1
answer
202
views
If make isn't supposed to run as root, then how can I install a policy file?
I understand that a Makefile should not require the user to be root. So I'm using /usr/local like this:
PREFIX=/usr/local
install:
install -D example $(PREFIX)/bin/example
That works fine. But I ...
user508856
1
vote
0
answers
189
views
Python tkinter GUI is being pushed behind GDM3 polkit password window
It seems that my Python PAM RFID solution development has come to an end 🎉 and I finally finished developing kind of working GUI solution as well.
Issue
But, of course I ran into one final issue 😑 - ...
- 71
1
vote
1
answer
405
views
pkexec shows in command line instead of GUI pop-up [closed]
I just hopped to Pop!_os yesterday and pkexec executes in terminal.
It also ran into the error:
polkit-agent-helper-1: error response to PolicyKit daemon: GDBus.Error:org.freedesktop.PolicyKit1.Error....
- 21
0
votes
1
answer
2k
views
How can I repair PolKit?
First let me describe my system. It's Mint 19.0 (Tara). Mint itself isn't the problem, but it's upgrade mechanism seem to have triggered the issue. It came after upgrading from Mint 18.3 to 19.0. I ...
- 1
1
vote
1
answer
557
views
Unable to connect to an existing X session w/ Nomachine
I've used Nomachine for years to connect my 2 Linux laptops. The client machine A has always connected to an existing X session in the server machine B displaying it in both A and B. However, lately ...
- 226
0
votes
0
answers
108
views
Untraceble authentication popup
I have this peculiar problem, which I hope some one can help me to solve it.
I use xubuntu 20.05, up to date (on Asus prime x470-pro MB, BIOS V5843)
Every time I login, there is a popup requesting for ...
- 171
3
votes
1
answer
199
views
Why I am asked for the password of a different account when trying to mount a disk?
I am on Debian 10 Buster.
When using Nautilus (aka Files), I am always asked for my password when trying to mount another HDD. All normal.
A few days ago, I am not asked for my account password ...
- 268
0
votes
0
answers
137
views
Is it ok to chmod a+w files under sys/platform in a desktop env?
I developed and maintain a keyboard backlight CLI/GUI for Linux-running Clevo laptops (https://github.com/webketje/tuxedo-backlight-control). Some of the files this CLI/GUI needs to alter are under /...
- 101
2
votes
2
answers
322
views
Make Kate to ask password only once, instead of asking it at every file saving?
I am using KDE and Kate editor. When I want to edit some common system files such as configs in /etc, I am asked for password to save my edits.
When I am editing files, I often do several changes, ...
- 769
1
vote
1
answer
562
views
What does polkit authorization do to a process?
I want to let my user edit a configuration file in /etc from my graphical C application. One method is:
fprintf( fopen("/tmp/tmpfile", "w+") , "content\n"); // Write to ...
- 12.7k
2
votes
2
answers
2k
views
dwm - session polkit
I am really struggling to get the session polkit to work.
I am not really familiar with how it works, but I have been using gnome before switching to dwm and in gnome it worked perfectly, so I wanted ...
- 131
0
votes
0
answers
2k
views
No polkit authentication agent found in AwesomeWM
I have Ubuntu 20.04 installed on my computer, and recently I've abandoned Gnome in favor of AwesomeWM. I've since learned that a DE is much more fleshed-out than just using a WM, so I've had to rice ...
- 207
1
vote
0
answers
505
views
Mount usb drive as regular user in debian/sid
I'm using debian sid, and since one of the upgrades I cannot normally mount usb drive (sdcard).
In dolphin it results in message saying "Not authorized to perform operation"
So after some ...
- 121
1
vote
0
answers
363
views
polkit.Result.AUTH_ADMIN_KEEP not working with fprintd
I'm currently configuring fprintd on my computer. It is a powerful tool that makes the fingerprint authorization possible on Unix-like systems. However, a user can add modify and delete fingerprints ...
- 534
4
votes
1
answer
2k
views
Polkit rule for systemd template files - how to
I am trying to use polkit to allow specific user to start/stop/restart specific services. Those services are defined via systemd template, so for example user can run this command:
systmctl stop my-...
- 101
3
votes
1
answer
684
views
Polkit not working when trying to reload nmcli connection
I'm currently working on an Archlinux system and I try to configure rules used by polkit so users inside network group are able to run nmcli commands.
I've create a polkit rule as follow :
polkit....
- 31
2
votes
0
answers
467
views
DBus NameOwnerChanged
When i run dbus-monitor --system, i got these 20 events per second:
signal time=1585510053.359267 sender=org.freedesktop.DBus -> destination=(null destination) serial=2019 path=/org/freedesktop/...
0
votes
1
answer
2k
views
Can't start polkit-mate-authentication-agent
I'm using Mate on Parabola GNU/Linux (based on Arch). I have the polkit-mate-authentication-agent installed and it is supposed to be autostarting on login to the desktop; however, it doesn't seem to ...
- 2,288
0
votes
1
answer
260
views
GDBus/PolicyKit error in LXDE
I am using LXDE with Parabola (a libre derivative of Arch Linux). When I log in to the desktop environment, a window pops up with the following error:
GDBus.Error:org.freedesktop.PolicyKit1.Error....
- 2,288
0
votes
1
answer
164
views
Does "Polkit" make use of linux capabilities?
I know that some authentication programs like KDE's KAuth can use polkit as the backend.And what makes polkit special is that it can grant some specific privileges to a non-privileged process.A ...
- 1,020
1
vote
0
answers
359
views
polkit on OpenBSD
I use xfce which came with a polkit action org.xfce.thunar.policy in /usr/local/share/polkit-1/actions/.
This action allow to run thunar as root if you can give the root password.
On debian with ...
- 1,960
-1
votes
1
answer
562
views
CentOS 8: Gparted requires polkit, where may I find it?
In a previous question I asked for help finding polkit so I could install gparted. The one answer I received allowed gparted's install by adding another repository, but led to other problems.
Now ...
- 3,726
2
votes
2
answers
3k
views
CentOS 8 install gparted fails
In CentOS 8.0 Server with desktop, I am trying to install gparted. It's not in the native software app, so I tried:
sudo yum install epel-release
sudo yum install gparted
and when I ran the latter, ...
- 3,726
2
votes
0
answers
4k
views
How to avoid polkit error/timeout "Authorization not available" when restarting systemd services as root
On a very small server I have polkit and dbus daemons/services not running in order to save resources and harden the server (these are not needed for normal running and they increase the attack ...
- 8,546
0
votes
0
answers
180
views
Cannot modify system configuration
why i cannot add user after install vnc and add the polkit?
if i remove the polkit i able to add user from console but rdp didn't work.
please help.
here is the capture:
i am using ubuntu 18.04, ...
- 1
2
votes
1
answer
440
views
How to achieve Linux privilege escalation by polkitd without password but with Yes/No prompt?
I want to implement Window's UAC like access control using polkit(d). So if I open Network manager or printers, it should ask me yes/no. No password prompt but window must be showed to user.
I tried ...
- 865
2
votes
1
answer
2k
views
Controlling systemd system service as user
I have several services that need to be user-controlled and I can't use them as user services (their requirement is system service with root access), plus there is weird GROUP/216 bug that I haven't ...
- 101
2
votes
1
answer
549
views
How to get rid of nag screen "Authentication is required to set one's own greeter properties"?
After a recent update on my Linux system I get a dialogue window every few (5?) minutes with the same message:
Authentication is required to set one's own greeter properties.
It has a password ...
- 8,546
13
votes
2
answers
14k
views
system policy prevents control of network connections
When we log into a KDE seesion using X2Go client, the user is greeted with a dialog asking for a sudo password. I do not want the user to have a sudo password and I would like to prevent the dialog ...
- 17.3k
9
votes
3
answers
33k
views
How can I reboot a server with systemctl if systemctl reboot fails?
I tried rebooting my CentOS 7 server but it gives ridiculous error messages.
As root (of course):
# systemctl reboot
Authorization not available. Check if polkit service is running or see debug ...
- 8,546
1
vote
1
answer
1k
views
Setup .pkla rule for polkit
I'd like to start a systemd service using DBus in one of my apps which is run as non-root user myuser. For that I need to set up a PolicyKit where I'm using polkit 0.105 and added the following .pkla ...
- 171