Bug 78276 - Packagekit polkit policy is completely desktop centric
Summary: Packagekit polkit policy is completely desktop centric
Alias: None
Product: PackageKit
Classification: Unclassified
Component: General (show other bugs)
Version: unspecified
Hardware: Other All
: medium normal
Assignee: Richard Hughes
QA Contact:
Depends on:
Reported: 2014-05-05 06:20 UTC by Stef Walter
Modified: 2014-05-06 08:23 UTC (History)
0 users

See Also:
i915 platform:
i915 features:

policy: Make the polkit policy not be desktop-centric (6.83 KB, patch)
2014-05-05 06:21 UTC, Stef Walter
Details | Splinter Review

Note You need to log in before you can comment on or make changes to this bug.
Description Stef Walter 2014-05-05 06:20:25 UTC
The Packagekit polkit policy is completely desktop-centric and expects that the user (admin or not) is logged in an active local session (ie: a seat in logind parlance, with a monitor and keyboard).

This prevents use of PackageKit when logged in via ssh (and using pkttyagent as your polkit agent) or via Cockpit.

The <allow_any> tag in polkit policy applies to non-local sessions. It should be set to something other than 'no' unless the action directly affects hardware of the login seat.

The attached patch fixes this issue.
Comment 1 Stef Walter 2014-05-05 06:21:07 UTC
Created attachment 98447 [details] [review]
policy: Make the polkit policy not be desktop-centric

    The polkit policy should allow admin users logged in via ssh
    or Cockpit (for example on a server) to perform the actions
    in question.  The <allow_any> applies non local sessions.
Comment 2 Richard Hughes 2014-05-06 08:23:01 UTC
Pushed to master, thanks.

Use of freedesktop.org services, including Bugzilla, is subject to our Code of Conduct. How we collect and use information is described in our Privacy Policy.