The polkit service wasn't installing its own .policy files. This adds the configured polkit package to the list of services to scan for .policy files.
Incidentally there are a few more: $ for i in `find /gnu/store -name '*.policy'`; do basename $i; done | sort -u org.freedesktop.color.policy org.freedesktop.login1.policy org.freedesktop.policykit.examples.pkexec.policy org.freedesktop.policykit.policy org.freedesktop.udisks2.policy org.gnome.settings-daemon.plugins.power.policy org.gnome.settings-daemon.plugins.wacom.policy org.xfce.session.policy org.xfce.thunar.policy org.x.xf86-video-intel.backlight-helper.policy $ ls /etc/polkit-1/actions/ org.freedesktop.color.policy org.freedesktop.policykit.examples.pkexec.policy org.freedesktop.udisks2.policy org.freedesktop.login1.policy org.freedesktop.policykit.policy Should we add gnome-settings-daemon as a system service, just to get its policies into polkit? Incidentally I would *really* like the end result of this -- right now I can't change the backlight using the keys on my laptop. The deal is that changing the backlight requires root privs, and org.gnome.settings-daemon.plugins.power.policy can give root privs to a helper in gnome-settings-daemon for this purpose. That's how this works in GNOME. It seems the xf86-video-intel backlight helper can do the same, and I don't think it's intel-specific (https://cgit.freedesktop.org/xorg/driver/xf86-video-intel/tree/tools/backlight_helper.c) but it isn't wired up to anything, as far as I can tell. Concretely: what to do about gnome-settings-daemon, xfce4-session, and thunar? Andy
>From 01d5827d833452e91d5cffa4604aea6a44a78092 Mon Sep 17 00:00:00 2001 From: Andy Wingo <[email protected]> Date: Sun, 21 Feb 2016 22:06:12 +0100 Subject: [PATCH] gnu: services: Install policies for polkit service. * gnu/services/desktop.scm (polkit-etc-files): Add the polkit package itself to the list of packages to scan for .policy files. This add support for pkexec. --- gnu/services/desktop.scm | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/gnu/services/desktop.scm b/gnu/services/desktop.scm index e4f0736..02bcf1b 100644 --- a/gnu/services/desktop.scm +++ b/gnu/services/desktop.scm @@ -378,7 +378,7 @@ site} for more information." (define polkit-etc-files (match-lambda (($ <polkit-configuration> polkit packages) - `(("polkit-1" ,(polkit-directory packages)))))) + `(("polkit-1" ,(polkit-directory (cons polkit packages))))))) (define polkit-setuid-programs (match-lambda -- 2.6.3
