Arch Linux

mclabaut

Member

Registered: 2007-06-18

Posts: 41

Gnome does not respect policykit authorisations

Hello,

It looks like since I've upgrade to gnome 2.28, policykit auth are no more taken into account.

for example I've:

$polkit-auth --explicit-detail 
...
org.freedesktop.hal.power-management.shutdown-multiple-sessions
  Authorized:  Yes
  Scope:       Indefinitely
  Obtained:    Tue Oct 20 17:23:28 2009 from clabaut (uid 1000)

...

But I'm then still asked a root password in order to shutdown the computer when other users are logged in.....

I've also:

polkit-action  --action org.freedesktop.hal.storage.mount-removable
action_id:        org.freedesktop.hal.storage.mount-removable
description:      Mount file systems from removable drives.
message:          System policy prevents mounting removable media
default_any:      no
default_inactive: no
default_active:   yes

And then, when I insert a CDROM, it is mounted on the desktop of a user who do not has the current active session (as checked by use of ck-list-sessions )

Any tip, idea, suggestion  ?

Policykit.conf is the default one :

$ cat /etc/PolicyKit/PolicyKit.conf 
<?xml version="1.0" encoding="UTF-8"?> <!-- -*- XML -*- -->

<!DOCTYPE pkconfig PUBLIC "-//freedesktop//DTD PolicyKit Configuration 1.0//EN"
"http://hal.freedesktop.org/releases/PolicyKit/1.0/config.dtd">

<!-- See the manual page PolicyKit.conf(5) for file format -->

<config version="0.1">

mclabaut

Member

Registered: 2007-06-18

Posts: 41

Re: Gnome does not respect policykit authorisations

I've found a discrepency between the message given when asking for an admin password to allow shutdown when multiple users are logged in, which stats something about 
org.freedesktop.consolekit.system.stop-multiple-users

And the polkit-auth, which only knows about org.freedesktop.hal.power-management.shutdown-multiple-sessions

But ... the pkaction knows about the first !

What a mix !

Note that pkaction is ownd by the polkit packaged whereas polkit-auth is ownd by the policykit package !!!!

I  guess it is time to report a bug report !

mclabaut

Member

Registered: 2007-06-18

Posts: 41

Re: Gnome does not respect policykit authorisations

http://bugs.archlinux.org/task/16938

Package policykit is deprecated