Andy Wingo <[email protected]> skribis: > The polkit service wasn't installing its own .policy files. This adds > the configured polkit package to the list of services to scan for > .policy files.
Ouch, indeed. > Incidentally there are a few more: > > $ for i in `find /gnu/store -name '*.policy'`; do basename $i; done | sort -u > org.freedesktop.color.policy > org.freedesktop.login1.policy > org.freedesktop.policykit.examples.pkexec.policy > org.freedesktop.policykit.policy > org.freedesktop.udisks2.policy > org.gnome.settings-daemon.plugins.power.policy > org.gnome.settings-daemon.plugins.wacom.policy > org.xfce.session.policy > org.xfce.thunar.policy > org.x.xf86-video-intel.backlight-helper.policy > > $ ls /etc/polkit-1/actions/ > org.freedesktop.color.policy > org.freedesktop.policykit.examples.pkexec.policy > org.freedesktop.udisks2.policy > org.freedesktop.login1.policy org.freedesktop.policykit.policy > > Should we add gnome-settings-daemon as a system service, just to get its > policies into polkit? Probably. Same for Xfce I guess? While at it these GNOME and Xfce services should probably do everything needed to get a full-blown GNOME/Xfce environment. > Incidentally I would *really* like the end result of this -- right now > I can't change the backlight using the keys on my laptop. The deal is > that changing the backlight requires root privs, and > org.gnome.settings-daemon.plugins.power.policy can give root privs to > a helper in gnome-settings-daemon for this purpose. That's how this > works in GNOME. It seems the xf86-video-intel backlight helper can do > the same, and I don't think it's intel-specific > (https://cgit.freedesktop.org/xorg/driver/xf86-video-intel/tree/tools/backlight_helper.c) > but it isn't wired up to anything, as far as I can tell. OK, interesting. Same thing with the power-off button in Xfce/GNOME, I guess? > Concretely: what to do about gnome-settings-daemon, xfce4-session, and > thunar? What about adding a ‘gnome-session-service’ and an ‘xfce4-session-service’, each of which would extend polkit (the latter would also pass the Thunar policies)? Eventually, we could change the SLiM service to be extended by these two things. > From 01d5827d833452e91d5cffa4604aea6a44a78092 Mon Sep 17 00:00:00 2001 > From: Andy Wingo <[email protected]> > Date: Sun, 21 Feb 2016 22:06:12 +0100 > Subject: [PATCH] gnu: services: Install policies for polkit service. > > * gnu/services/desktop.scm (polkit-etc-files): Add the polkit package > itself to the list of packages to scan for .policy files. This add > support for pkexec. OK! Thanks, Ludo’.
