Re: [PATCH] gnu: services: Install policies for polkit service.

[ludo@gnu.org (Ludovic Courtès)]

Andy Wingo <wingo@igalia.com> skribis:

> The polkit service wasn't installing its own .policy files.  This adds
> the configured polkit package to the list of services to scan for
> .policy files.

Ouch, indeed.

> Incidentally there are a few more:
>
> $ for i in `find /gnu/store -name '*.policy'`; do basename $i; done | sort -u
> org.freedesktop.color.policy
> org.freedesktop.login1.policy
> org.freedesktop.policykit.examples.pkexec.policy
> org.freedesktop.policykit.policy
> org.freedesktop.udisks2.policy
> org.gnome.settings-daemon.plugins.power.policy
> org.gnome.settings-daemon.plugins.wacom.policy
> org.xfce.session.policy
> org.xfce.thunar.policy
> org.x.xf86-video-intel.backlight-helper.policy
>
> $ ls /etc/polkit-1/actions/
> org.freedesktop.color.policy   org.freedesktop.policykit.examples.pkexec.policy  org.freedesktop.udisks2.policy
> org.freedesktop.login1.policy  org.freedesktop.policykit.policy
>
> Should we add gnome-settings-daemon as a system service, just to get its
> policies into polkit?

Probably.  Same for Xfce I guess?

While at it these GNOME and Xfce services should probably do everything
needed to get a full-blown GNOME/Xfce environment.

> Incidentally I would *really* like the end result of this -- right now
> I can't change the backlight using the keys on my laptop.  The deal is
> that changing the backlight requires root privs, and
> org.gnome.settings-daemon.plugins.power.policy can give root privs to
> a helper in gnome-settings-daemon for this purpose.  That's how this
> works in GNOME.  It seems the xf86-video-intel backlight helper can do
> the same, and I don't think it's intel-specific
> (https://cgit.freedesktop.org/xorg/driver/xf86-video-intel/tree/tools/backlight_helper.c)
> but it isn't wired up to anything, as far as I can tell.

OK, interesting.  Same thing with the power-off button in Xfce/GNOME, I
guess?

> Concretely: what to do about gnome-settings-daemon, xfce4-session, and
> thunar?

What about adding a ‘gnome-session-service’ and an
‘xfce4-session-service’, each of which would extend polkit (the latter
would also pass the Thunar policies)?

Eventually, we could change the SLiM service to be extended by these two
things.

> From 01d5827d833452e91d5cffa4604aea6a44a78092 Mon Sep 17 00:00:00 2001
> From: Andy Wingo <wingo@igalia.com>
> Date: Sun, 21 Feb 2016 22:06:12 +0100
> Subject: [PATCH] gnu: services: Install policies for polkit service.
>
> * gnu/services/desktop.scm (polkit-etc-files): Add the polkit package
>   itself to the list of packages to scan for .policy files.  This add
>   support for pkexec.

OK!

Thanks,
Ludo’.