- PolicyKit is an application-level toolkit for defining and handling the policy that allows unprivileged processes to speak to privileged processes: It is a framework for centralizing the decision making process with respect to granting access to privileged operations for unprivileged applications. PolicyKit is specifically targeting applications in rich desktop environments on multi-user UNIX-like operating systems. It does not imply or rely on any exotic kernel features.
PolicyKit is used for controlling system-wide privileges. It provides an organized way for non-privileged processes to communicate with privileged ones. In contrast to systems such as sudo, it does not grant root permission to an entire process, but rather allows a finer level of control of centralized system policy.
How to let all users in the group "wheel" have the same admin rights as root (so you don't have to enter root password, but the wheel user's password):
Make a file like:
(higher numbers are prioritied over lower ones) containing:
To let users alice and bob perform all PackageKit actions (but not necessarily other PolicyKit actions), make a file in e.g.
[Let Wheel Use PackageKit] Identity=unix-user:alice;unix-user:bob Action=org.freedesktop.packagekit.* ResultAny=no ResultInactive=no ResultActive=auth_self_keep
(Use the command
pkaction to list all actions defined in your system.)