[PATCH 4/4] gnu: Add polkit service.

[PATCH 4/4] gnu: Add polkit service.

[Andy Wingo]

[-- Warning: decoded text below may be mangled, UTF-8 assumed --]
[-- Attachment #1: Type: text/plain, Size: 3330 bytes --]

* gnu/services/polkit.scm: New file.
* gnu-system.am (GNU_SYSTEM_MODULES): Add polkit service definition.
---
 gnu-system.am           |  1 +
 gnu/services/polkit.scm | 67 +++++++++++++++++++++++++++++++++++++++++++++++++
 2 files changed, 68 insertions(+)
 create mode 100644 gnu/services/polkit.scm

diff --git a/gnu-system.am b/gnu-system.am
index 164564a..5a4d448 100644
--- a/gnu-system.am
+++ b/gnu-system.am
@@ -330,6 +330,7 @@ GNU_SYSTEM_MODULES =				\
   gnu/services/dmd.scm				\
   gnu/services/lirc.scm				\
   gnu/services/networking.scm			\
+  gnu/services/polkit.scm			\
   gnu/services/ssh.scm				\
   gnu/services/upower.scm			\
   gnu/services/xorg.scm				\
diff --git a/gnu/services/polkit.scm b/gnu/services/polkit.scm
new file mode 100644
index 0000000..56ed365
--- /dev/null
+++ b/gnu/services/polkit.scm
@@ -0,0 +1,67 @@
+;;; GNU Guix --- Functional package management for GNU
+;;; Copyright © 2014, 2015 Ludovic Courtès <ludo@gnu.org>
+;;; Copyright © 2015 Andy Wingo <wingo@igalia.com>
+;;;
+;;; This file is part of GNU Guix.
+;;;
+;;; GNU Guix is free software; you can redistribute it and/or modify it
+;;; under the terms of the GNU General Public License as published by
+;;; the Free Software Foundation; either version 3 of the License, or (at
+;;; your option) any later version.
+;;;
+;;; GNU Guix is distributed in the hope that it will be useful, but
+;;; WITHOUT ANY WARRANTY; without even the implied warranty of
+;;; MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+;;; GNU General Public License for more details.
+;;;
+;;; You should have received a copy of the GNU General Public License
+;;; along with GNU Guix.  If not, see <http://www.gnu.org/licenses/>.
+
+(define-module (gnu services polkit)
+  #:use-module (gnu services)
+  #:use-module (gnu system shadow)
+  #:use-module (gnu packages polkit)
+  #:use-module (ice-9 match)
+  #:use-module (guix monads)
+  #:use-module (guix store)
+  #:use-module (guix gexp)
+  #:export (polkit-application
+            %standard-polkit-applications
+            polkit-service))
+
+;;; Commentary:
+;;;
+;;; This module provides a service definition for Polkit, the privilege
+;;; management service.
+;;;
+;;; Code:
+
+(define (bool value)
+  (if value "true\n" "false\n"))
+
+(define* (polkit-service #:key (polkit polkit))
+  "Return a service that runs the @command{polkit} location service."
+  (with-monad %store-monad
+    (return
+     (service
+      (documentation "Run the Polkit privilege management.")
+      (provision '(polkit-daemon))
+      (requirement '(dbus-system))
+
+      (start #~(make-forkexec-constructor
+                (list (string-append #$polkit "/lib/polkit-1/polkitd"))))
+      (stop #~(make-kill-destructor))
+
+      (user-groups (list (user-group
+                          (name "polkitd")
+                          (system? #t))))
+      (user-accounts (list (user-account
+                            (name "polkitd")
+                            (group "polkitd")
+                            (system? #t)
+                            (comment "Polkit daemon user")
+                            (home-directory "/var/empty")
+                            (shell
+                             "/run/current-system/profile/sbin/nologin"))))))))
+
+;;; polkit.scm ends here
-- 
2.2.1

Re: [PATCH 4/4] gnu: Add polkit service.

[Ludovic Courtès]

Andy Wingo <wingo@pobox.com> skribis:

> * gnu/services/polkit.scm: New file.
> * gnu-system.am (GNU_SYSTEM_MODULES): Add polkit service definition.

[...]

> +  #:export (polkit-application
> +            %standard-polkit-applications

These two bindings are missing, but that makes me wonder whether there’s
a piece missing.  Does polkitd need to be given some sort of
configuration or a list of applications being managed?

TIA,
Ludo’.

Re: [PATCH 4/4] gnu: Add polkit service.

[Andy Wingo]

On Sat 18 Apr 2015 22:49, ludo@gnu.org (Ludovic Courtès) writes:

> Andy Wingo <wingo@pobox.com> skribis:
>
>> * gnu/services/polkit.scm: New file.
>> * gnu-system.am (GNU_SYSTEM_MODULES): Add polkit service definition.
>
> [...]
>
>> +  #:export (polkit-application
>> +            %standard-polkit-applications
>
> These two bindings are missing

Whoops :)  Copy/pasteo.

> but that makes me wonder whether there’s
> a piece missing.  Does polkitd need to be given some sort of
> configuration or a list of applications being managed?

It might need a list of applications or a profile directory.  The deal
is that applications install .conf snippets into a certain polkit
directory, which should probably be one of those symlink trees, like
dbus.  The "service" side of polkit is something of a work in progress,
but I figured works-in-progress aren't so bad given that polkit is
completely unusable currently (AFAICS).

Andy
-- 
http://wingolog.org/

Re: [PATCH 4/4] gnu: Add polkit service.

[Ludovic Courtès]

Andy Wingo <wingo@pobox.com> skribis:

> On Sat 18 Apr 2015 22:49, ludo@gnu.org (Ludovic Courtès) writes:

[...]

>> but that makes me wonder whether there’s
>> a piece missing.  Does polkitd need to be given some sort of
>> configuration or a list of applications being managed?
>
> It might need a list of applications or a profile directory.  The deal
> is that applications install .conf snippets into a certain polkit
> directory, which should probably be one of those symlink trees, like
> dbus.  The "service" side of polkit is something of a work in progress,
> but I figured works-in-progress aren't so bad given that polkit is
> completely unusable currently (AFAICS).

So does polkitd provide useful functionality when it is not passed a
list of application .conf files, as is the case with the current patch?

I’m happy to apply it if it does, but otherwise I guess we should add
the missing bits.

Thanks!

Ludo’.