Arch Linux

spiri

Guest

[solved] [polkit] Authentication required to read your app filter

Hello,

Since I updated my system theres a popup which appears when I start a gnome session. It asks me for my password to read my app filter all the time.

I already had such problems with my color profile and solved it by adding rules to /etc/polkit-1/rules.d.

Now I don't know which actions should I specify in the rules file to prevent this popup from showing up.

So I looked for all actions on my system which could match the app filter:

$ grep -hoE 'org(\.\w+){1,}' /usr/share/polkit-1/actions/* | sort | uniq
org.a11y.brlapi.write
org.freedesktop.accounts.change
org.freedesktop.accounts.set
org.freedesktop.accounts.user
org.freedesktop.bolt.authorize
org.freedesktop.bolt.enroll
org.freedesktop.bolt.manage
org.freedesktop.color
org.freedesktop.Flatpak.app
org.freedesktop.Flatpak.appstream
org.freedesktop.Flatpak.configure
org.freedesktop.Flatpak.install
org.freedesktop.Flatpak.metadata
org.freedesktop.Flatpak.modify
org.freedesktop.Flatpak.override
org.freedesktop.Flatpak.runtime
org.freedesktop.Flatpak.update
org.freedesktop.home1.authenticate
org.freedesktop.home1.create
org.freedesktop.home1.passwd
org.freedesktop.home1.remove
org.freedesktop.home1.resize
org.freedesktop.home1.update
org.freedesktop.hostname1.get
org.freedesktop.hostname1.set
org.freedesktop.import1.export
org.freedesktop.import1.import
org.freedesktop.import1.pull
org.freedesktop.locale1.set
org.freedesktop.login1.attach
org.freedesktop.login1.chvt
org.freedesktop.login1.flush
org.freedesktop.login1.halt
org.freedesktop.login1.hibernate
org.freedesktop.login1.host
org.freedesktop.login1.inhibit
org.freedesktop.login1.lock
org.freedesktop.login1.login
org.freedesktop.login1.manage
org.freedesktop.login1.power
org.freedesktop.login1.reboot
org.freedesktop.login1.set
org.freedesktop.login1.shell
org.freedesktop.login1.suspend
org.freedesktop.machine1.host
org.freedesktop.machine1.login
org.freedesktop.machine1.manage
org.freedesktop.machine1.open
org.freedesktop.machine1.shell
org.freedesktop.MalcontentControl.administration
org.freedesktop.network1.reconfigure
org.freedesktop.network1.reload
org.freedesktop.network1.renew
org.freedesktop.network1.revert
org.freedesktop.network1.set
org.freedesktop.NetworkManager.checkpoint
org.freedesktop.NetworkManager.enable
org.freedesktop.NetworkManager.network
org.freedesktop.NetworkManager.reload
org.freedesktop.NetworkManager.settings.modify.global
org.freedesktop.NetworkManager.settings.modify.hostname
org.freedesktop.NetworkManager.settings.modify.own
org.freedesktop.NetworkManager.settings.modify.system
org.freedesktop.NetworkManager.sleep
org.freedesktop.NetworkManager.wifi.scan
org.freedesktop.NetworkManager.wifi.share.open
org.freedesktop.NetworkManager.wifi.share.protected
org.freedesktop.policykit.example.pkexec.run
org.freedesktop.policykit.exec
org.freedesktop.policykit.exec.argv1
org.freedesktop.policykit.exec.path
org.freedesktop.policykit.imply
org.freedesktop.policykit.owner
org.freedesktop.portable1.attach
org.freedesktop.portable1.inspect
org.freedesktop.portable1.manage
org.freedesktop.realmd.configure
org.freedesktop.realmd.login
org.freedesktop.RealtimeKit1.acquire
org.freedesktop.resolve1.register
org.freedesktop.resolve1.revert
org.freedesktop.resolve1.set
org.freedesktop.resolve1.unregister
org.freedesktop.systemd1.manage
org.freedesktop.systemd1.reload
org.freedesktop.systemd1.reply
org.freedesktop.systemd1.set
org.freedesktop.timedate1.set
org.freedesktop.udisks2.ata
org.freedesktop.udisks2.bcache.manage
org.freedesktop.udisks2.btrfs.manage
org.freedesktop.udisks2.cancel
org.freedesktop.udisks2.eject
org.freedesktop.udisks2.encrypted
org.freedesktop.udisks2.filesystem
org.freedesktop.udisks2.loop
org.freedesktop.udisks2.lvm2.manage
org.freedesktop.udisks2.manage
org.freedesktop.udisks2.modify
org.freedesktop.udisks2.open
org.freedesktop.udisks2.power
org.freedesktop.udisks2.read
org.freedesktop.udisks2.rescan
org.freedesktop.udisks2.vdo.manage
org.freedesktop.udisks2.zram.manage
org.gnome.controlcenter.datetime.configure
org.gnome.controlcenter.remote
org.gnome.controlcenter.user
org.gnome.gconf.defaults.set
org.gnome.gnome
org.gnome.MultiWriter.probe
org.gnome.settings
org.gnome.Sysprof
org.gnome.Sysprof2
org.gnome.sysprof2.get
org.gnome.sysprof2.perf
org.gnome.sysprof3.profile
org.gnome.SystemMonitor
org.gtk.vfs.file
org.libvirt.api.connect.detect
org.libvirt.api.connect.getattr
org.libvirt.api.connect.interface
org.libvirt.api.connect.pm
org.libvirt.api.connect.read
org.libvirt.api.connect.search
org.libvirt.api.connect.write
org.libvirt.api.domain.block
org.libvirt.api.domain.checkpoint
org.libvirt.api.domain.core
org.libvirt.api.domain.delete
org.libvirt.api.domain.fs
org.libvirt.api.domain.getattr
org.libvirt.api.domain.hibernate
org.libvirt.api.domain.init
org.libvirt.api.domain.inject
org.libvirt.api.domain.mem
org.libvirt.api.domain.migrate
org.libvirt.api.domain.open
org.libvirt.api.domain.pm
org.libvirt.api.domain.read
org.libvirt.api.domain.reset
org.libvirt.api.domain.save
org.libvirt.api.domain.screenshot
org.libvirt.api.domain.send
org.libvirt.api.domain.set
org.libvirt.api.domain.snapshot
org.libvirt.api.domain.start
org.libvirt.api.domain.stop
org.libvirt.api.domain.suspend
org.libvirt.api.domain.write
org.libvirt.api.interface.delete
org.libvirt.api.interface.getattr
org.libvirt.api.interface.read
org.libvirt.api.interface.save
org.libvirt.api.interface.start
org.libvirt.api.interface.stop
org.libvirt.api.interface.write
org.libvirt.api.network
org.libvirt.api.network.delete
org.libvirt.api.network.getattr
org.libvirt.api.network.read
org.libvirt.api.network.save
org.libvirt.api.network.search
org.libvirt.api.network.start
org.libvirt.api.network.stop
org.libvirt.api.network.write
org.libvirt.api.node
org.libvirt.api.nwfilter
org.libvirt.api.nwfilter.delete
org.libvirt.api.nwfilter.getattr
org.libvirt.api.nwfilter.read
org.libvirt.api.nwfilter.save
org.libvirt.api.nwfilter.write
org.libvirt.api.secret.delete
org.libvirt.api.secret.getattr
org.libvirt.api.secret.read
org.libvirt.api.secret.save
org.libvirt.api.secret.write
org.libvirt.api.storage
org.libvirt.unix.manage
org.libvirt.unix.monitor
org.opensuse.cupspkhelper.mechanism.all
org.opensuse.cupspkhelper.mechanism.class
org.opensuse.cupspkhelper.mechanism.devices
org.opensuse.cupspkhelper.mechanism.job
org.opensuse.cupspkhelper.mechanism.printer
org.opensuse.cupspkhelper.mechanism.printeraddremove
org.opensuse.cupspkhelper.mechanism.server
org.spice
org.x.xf86

And I found org.libvirt.api.nwfilter but it seems it's not the right action because the popup still shows up.

I created the following rule in /etc/polkit-1/rules.d:

polkit.addRule(function(action, subject){
	if((action.id == "org.libvirt.api.nwfilter" 
		|| action.id == "org.libvirt.api.nwfilter.delete"
		|| action.id == "org.libvirt.api.nwfilter.getattr"
		|| action.id == "org.libvirt.api.nwfilter.read"
		|| action.id == "org.libvirt.api.nwfilter.save"
		|| action.id == "org.libvirt.api.nwfilter.write")
		 && subject.isInGroup("users")){
		return polkit.Result.YES;
	}
});

The permissions for the rules file are correct:

$ ls -l 50-appfilter.rules 
-rw-rw-r-- 1 root root 417 Abr  6 19:12 50-appfilter.rules

The user is in the users group:

$ id
uid=1000(spiri) gid=1000(spiri) groups=1000(spiri),984(systemd-journal),985(users),998(wheel)

Am I using the wrong actions to prevent this message from showing up? How to check from which action this is coming from?

Last edited by spiri (2020-04-11 08:52:35)

spiri

Guest

Re: [solved] [polkit] Authentication required to read your app filter

Just found the correct actions.

com.endlessm.ParentalControls.AppFilter.ChangeOwn
com.endlessm.ParentalControls.AppFilter.ReadOwn
com.endlessm.ParentalControls.AppFilter.ChangeAny
com.endlessm.ParentalControls.AppFilter.ReadAny