From mboxrd@z Thu Jan 1 00:00:00 1970 From: Andy Wingo Subject: [PATCH] gnu: services: Install policies for polkit service. Date: Sun, 21 Feb 2016 22:17:38 +0100 Message-ID: <87egc54vbh.fsf@pobox.com> Mime-Version: 1.0 Content-Type: multipart/mixed; boundary="=-=-=" Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:45587) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1aXbOh-0001CY-4e for guix-devel@gnu.org; Sun, 21 Feb 2016 16:18:32 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1aXbOc-0004iY-A4 for guix-devel@gnu.org; Sun, 21 Feb 2016 16:18:28 -0500 Received: from pb-sasl0.int.icgroup.com ([208.72.237.25]:57377 helo=sasl.smtp.pobox.com) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1aXbOc-0004h1-47 for guix-devel@gnu.org; Sun, 21 Feb 2016 16:18:26 -0500 Received: from sasl.smtp.pobox.com (unknown [127.0.0.1]) by pb-sasl0.pobox.com (Postfix) with ESMTP id C9C30463AD for ; Sun, 21 Feb 2016 16:17:47 -0500 (EST) Received: from pb-sasl0.int.icgroup.com (unknown [127.0.0.1]) by pb-sasl0.pobox.com (Postfix) with ESMTP id C0DE5463AC for ; Sun, 21 Feb 2016 16:17:47 -0500 (EST) Received: from clucks (unknown [88.160.190.192]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by pb-sasl0.pobox.com (Postfix) with ESMTPSA id B1D6C463AB for ; Sun, 21 Feb 2016 16:17:46 -0500 (EST) List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org To: guix-devel@gnu.org --=-=-= Content-Type: text/plain The polkit service wasn't installing its own .policy files. This adds the configured polkit package to the list of services to scan for .policy files. Incidentally there are a few more: $ for i in `find /gnu/store -name '*.policy'`; do basename $i; done | sort -u org.freedesktop.color.policy org.freedesktop.login1.policy org.freedesktop.policykit.examples.pkexec.policy org.freedesktop.policykit.policy org.freedesktop.udisks2.policy org.gnome.settings-daemon.plugins.power.policy org.gnome.settings-daemon.plugins.wacom.policy org.xfce.session.policy org.xfce.thunar.policy org.x.xf86-video-intel.backlight-helper.policy $ ls /etc/polkit-1/actions/ org.freedesktop.color.policy org.freedesktop.policykit.examples.pkexec.policy org.freedesktop.udisks2.policy org.freedesktop.login1.policy org.freedesktop.policykit.policy Should we add gnome-settings-daemon as a system service, just to get its policies into polkit? Incidentally I would *really* like the end result of this -- right now I can't change the backlight using the keys on my laptop. The deal is that changing the backlight requires root privs, and org.gnome.settings-daemon.plugins.power.policy can give root privs to a helper in gnome-settings-daemon for this purpose. That's how this works in GNOME. It seems the xf86-video-intel backlight helper can do the same, and I don't think it's intel-specific (https://cgit.freedesktop.org/xorg/driver/xf86-video-intel/tree/tools/backlight_helper.c) but it isn't wired up to anything, as far as I can tell. Concretely: what to do about gnome-settings-daemon, xfce4-session, and thunar? Andy --=-=-= Content-Type: text/plain Content-Disposition: inline; filename=0001-gnu-services-Install-policies-for-polkit-service.patch >From 01d5827d833452e91d5cffa4604aea6a44a78092 Mon Sep 17 00:00:00 2001 From: Andy Wingo Date: Sun, 21 Feb 2016 22:06:12 +0100 Subject: [PATCH] gnu: services: Install policies for polkit service. * gnu/services/desktop.scm (polkit-etc-files): Add the polkit package itself to the list of packages to scan for .policy files. This add support for pkexec. --- gnu/services/desktop.scm | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/gnu/services/desktop.scm b/gnu/services/desktop.scm index e4f0736..02bcf1b 100644 --- a/gnu/services/desktop.scm +++ b/gnu/services/desktop.scm @@ -378,7 +378,7 @@ site} for more information." (define polkit-etc-files (match-lambda (($ polkit packages) - `(("polkit-1" ,(polkit-directory packages)))))) + `(("polkit-1" ,(polkit-directory (cons polkit packages))))))) (define polkit-setuid-programs (match-lambda -- 2.6.3 --=-=-=--