Latest revision as of 04:53, 14 May 2010

Download Source:	http://hal.freedesktop.org/releases/PolicyKit-0.9.tar.gz

Introduction to PolicyKit

PolicyKit is a framework for defining policy for system-wide components and for desktop pieces to configure it. It is used by HAL. Note that this is not compatible with later versions; see Polkit if you need such a version.

Project Homepage: http://www.freedesktop.org/wiki/Software/PolicyKit

Dependencies

Required

Optional

PolKit User/Group

groupadd -g 26 polkit &&
useradd -c "Policy Kit Daemon User" -d /dev/null \
        -u 26 -g polkit -s /bin/false polkit

Non-Multilib

Compile the package:

./configure --prefix=/usr --sysconfdir=/etc \
    --libexecdir=/usr/lib/PolicyKit --localstatedir=/var \
    --with-polkit-user=polkit --with-polkit-group=polkit &&
make

Install the package

make install

Multilib

32Bit

Compile the package:

CC="gcc ${BUILD32}" PKG_CONFIG_PATH="${PKG_CONFIG_PATH32}" \
./configure --prefix=/usr --sysconfdir=/etc \
    --libexecdir=/usr/lib/PolicyKit --localstatedir=/var \
    --with-polkit-user=polkit --with-polkit-group=polkit &&
make

Install the package

make install

N32

Compile the package:

CC="gcc ${BUILDN32}" PKG_CONFIG_PATH="${PKG_CONFIG_PATHN32}" \
./configure --prefix=/usr --sysconfdir=/etc \
    --libexecdir=/usr/lib32/PolicyKit --localstatedir=/var \
    --libdir=/usr/lib32 --with-pam-module-dir=/lib32/security \
    --with-polkit-user=polkit --with-polkit-group=polkit &&
make

Install the package

make install

64Bit

Compile the package:

CC="gcc ${BUILD64}" PKG_CONFIG_PATH="${PKG_CONFIG_PATH64}" \
./configure --prefix=/usr --sysconfdir=/etc \
    --libexecdir=/usr/lib64/PolicyKit --localstatedir=/var \
    --libdir=/usr/lib64 --with-pam-module-dir=/lib64/security \
    --with-polkit-user=polkit --with-polkit-group=polkit &&
make

Install the package

make install

Configuration

To allow HAL to automount removable drives such a thumbdrives, edit /etc/PolicyKit/PolicyKit.conf and add the following between the <config></config> tags:

<match action="org.freedesktop.hal.storage.mount-removable">
    <return result="yes" />
</match>

Without this you will receive an error similar to org.freedesktop.Hal.Device.PermissionDeniedByPolicy: org.freedesktop.hal.storage.mount-removable no <--(action,result) when you "plug in" your thumb drive.

You then must upgrade your util-linux to the latest version or HAL automounting will fail with the following error FAT: Unrecognized mount option "uhelper=hal" or missing value. Instructions for building the latest version of util-linux can be found the development CLFS books.

@@ Line 2: / Line 2: @@
 |-valign="top"
 !Download Source:
-| http://people.freedesktop.org/~david/dist/PolicyKit-{{PolicyKit-Version}}.tar.gz
+| http://hal.freedesktop.org/releases/PolicyKit-{{PolicyKit-Version}}.tar.gz
 |}
 ----
-{{Package-Introduction|PolicyKit is a framework for defining policy for system-wide components and for desktop pieces to configure it. It is used by [[HAL]].}}
+{{Package-Introduction|PolicyKit is a framework for defining policy for system-wide components and for desktop pieces to configure it. It is used by [[HAL]]. Note that this is not compatible with later versions; see [[Polkit]] if you need such a version.|http://www.freedesktop.org/wiki/Software/PolicyKit}}
 == Dependencies ==
@@ Line 18: / Line 18: @@
 === Optional ===
-* [[GIT]] (To get the latest source)
 * [[Gtk-Doc]]
+* [[intltool]]
+* [[SELinux]]
 == PolKit User/Group ==
@@ Line 26: / Line 27: @@
   useradd -c "Policy Kit Daemon User" -d /dev/null \
           -u 26 -g polkit -s /bin/false polkit
-== Getting the latest source ==
-{{Note|This section is optional. You need this command only if you want to build latest development version.}}
-Check out the source from freedesktop.org:
- git clone git://anongit.freedesktop.org/git/PolicyKit &&
- cd PolicyKit &&
- git-checkout -b e97e945ee59320cb15ec81958b2fa1c08653a8f6 &&
- cd ..
-It couldn't hurt to make a tarball so you have an unmodified source around for the future:
- tar cvjf PolicyKit{-$(date +%Y%m%d).tar.bz2,}
-{{Note|Replace "./configure" to "./autogen.sh" in the commands follow if you build latest development version.}}
 == Non-Multilib ==
@@ Line 48: / Line 32: @@
 Compile the package:
-  ./configure --prefix=/usr --sysconfdir=/etc --localstatedir=/var &&
+  ./configure --prefix=/usr --sysconfdir=/etc \
+     --libexecdir=/usr/lib/PolicyKit --localstatedir=/var \
+     --with-polkit-user=polkit --with-polkit-group=polkit &&
   make
@@ Line 62: / Line 48: @@
   CC="gcc ${BUILD32}" PKG_CONFIG_PATH="${PKG_CONFIG_PATH32}" \
-  ./configure --prefix=/usr --sysconfdir=/etc --localstatedir=/var &&
+  ./configure --prefix=/usr --sysconfdir=/etc \
+     --libexecdir=/usr/lib/PolicyKit --localstatedir=/var \
+     --with-polkit-user=polkit --with-polkit-group=polkit &&
   make
@@ Line 74: / Line 62: @@
   CC="gcc ${BUILDN32}" PKG_CONFIG_PATH="${PKG_CONFIG_PATHN32}" \
-  ./configure --prefix=/usr --sysconfdir=/etc --localstatedir=/var \
+  ./configure --prefix=/usr --sysconfdir=/etc \
-      --libdir=/usr/lib32 --with-pam-module-dir=/lib32/security &&
+     --libexecdir=/usr/lib32/PolicyKit --localstatedir=/var \
+      --libdir=/usr/lib32 --with-pam-module-dir=/lib32/security \
+     --with-polkit-user=polkit --with-polkit-group=polkit &&
   make
@@ Line 87: / Line 77: @@
   CC="gcc ${BUILD64}" PKG_CONFIG_PATH="${PKG_CONFIG_PATH64}" \
-  ./configure --prefix=/usr --sysconfdir=/etc --localstatedir=/var \
+  ./configure --prefix=/usr --sysconfdir=/etc \
-      --libdir=/usr/lib64 --with-pam-module-dir=/lib64/security &&
+     --libexecdir=/usr/lib64/PolicyKit --localstatedir=/var \
+      --libdir=/usr/lib64 --with-pam-module-dir=/lib64/security \
+     --with-polkit-user=polkit --with-polkit-group=polkit &&
   make
@@ Line 97: / Line 89: @@
 == Configuration ==
-=== Bootscript ===
+To allow HAL to automount removable drives such a thumbdrives, edit /etc/PolicyKit/PolicyKit.conf and add the following between the <config></config> tags:
-Create the bootscript:
- cat > /etc/rc.d/init.d/polkitd << "EOF"
- #!/bin/sh
- # Begin $rc_base/init.d/polkitd
- . /etc/sysconfig/rc
- . ${rc_functions}
- case "${1}" in
-         start)
-                 boot_mesg "Starting PolicyKit..."
-                 loadproc /usr/sbin/polkitd
-                 ;;
-         stop)
-                 boot_mesg "Stopping PolicyKit..."
-                 killproc /usr/sbin/polkitd
-                 ;;
-         restart)
-                 ${0} stop
-                 sleep 1
-                 ${0} start
-                 ;;
-         status)
-                 statusproc /usr/sbin/polkitd
-                 ;;
-         *)
-                 echo "Usage: ${0} {start|stop|restart|status}"
-                 exit 1
-                 ;;
- esac
- # End $rc_base/init.d/polkitd
- EOF
- chmod -v 754 /etc/rc.d/init.d/polkitd
-Link it into the runlevels:
- for link in /etc/rc.d/rc{{0,1,6}.d/K29,{2,3,4,5}.d/S20}polkitd; do
-   ln -sfv ../init.d/polkitd $link;
- done
-== InitNG Bootscript ==
-Todo
-== Privileges ==
-PolicyKit installs '''desktop-console.privilege''' in /etc/PolicyKit/privilege.d which is the file that [[HAL]] will reference to see if the user can preform a specific operation (mount, cpufreq, hibernate, poweroff, reboot, suspend, etc...). Other privileges that manipulate a local device are most likely going to require this privilege.
-There are a few ways to configure a privilege. You can allow anybody by setting '''Allow=uid:__all__''', a specific user by setting '''Allow=uid:username''', or a specific group by setting '''Allow=gid:groupname'''. The same applies for '''Deny'''.
+ <match action="org.freedesktop.hal.storage.mount-removable">
+     <return result="yes" />
+ </match>
-The following command modifies the privilege file so that anyone in the '''users''' group is allowed to manipulate a local device:
+Without this you will receive an error similar to <b>org.freedesktop.Hal.Device.PermissionDeniedByPolicy:
+org.freedesktop.hal.storage.mount-removable no <--(action,result)</b> when you "plug in" your thumb drive.
- sed -i "s/^Allow=.*/Allow=gid:users/" \
+You then must upgrade your util-linux to the latest version or HAL automounting will fail with the following error <b>FAT: Unrecognized mount option "uhelper=hal" or missing value</b>.  Instructions for building the latest version of util-linux can be found the development [http://cross-lfs.org/view/svn/ CLFS books].
-     /etc/PolicyKit/privilege.d/desktop-console.privilege
 = Contents =
@@ Line 173: / Line 113: @@
 | /etc/PolicyKit/privilege.d /var/run/polkit-console
 |}
+[[Category:General Utilities]]

Installed Programs:	polkit-grant-privilege polkit-is-rivileged polkit-list-privileges polkit-revoke-privilege polkitd
Installed Libraries:	libpolkit.{so,a,la} libpolkit-grant.{so,a,la} /lib/security/pam_polkit_console.{so,a,la}
Installed Directories:	/etc/PolicyKit/privilege.d /var/run/polkit-console

Difference between revisions of "PolicyKit"

Latest revision as of 04:53, 14 May 2010

Contents

Introduction to PolicyKit

Dependencies

Required

Optional

PolKit User/Group

Non-Multilib

Multilib

32Bit

N32

64Bit

Configuration

Contents

Navigation menu

Page actions

Page actions

Personal tools

Navigation

Search

Tools