-
Notifications
You must be signed in to change notification settings - Fork 13
polkit
pyllyukko edited this page Mar 11, 2026
·
1 revision
Some notes about polkit.
Usually determined in /usr/share/polkit-1/rules.d/50-default.rules (see 50-default.rules.in).
See dont-set-wheel-group-as-admin.diff.gz.
polkit.addAdminRule(function(action, subject) {
return ["unix-user:root"];
});
polkit.addAdminRule(function(action, subject) {
return ["unix-group:sudo"];
});
/usr/share/polkit-1/actions/org.freedesktop.systemd1.policy (see org.freedesktop.systemd1.policy.in).
This action ID is used by run0. The defaults are as such, that if a non-admin user is trying to use run0, polkit prompts the user which admin user should be used to authenticate and then asks for the password of that admin user.
E.g. Authorization requires authentication or auth_admin:
<action id="org.freedesktop.systemd1.manage-units">
<description gettext-domain="systemd">Manage system services or other units</description>
<message gettext-domain="systemd">Authentication is required to manage system services or other units.</message>
<defaults>
<allow_any>auth_admin</allow_any>
<allow_inactive>auth_admin</allow_inactive>
<allow_active>auth_admin_keep</allow_active>
</defaults>
</action>