- PolicyKit is an application-level toolkit for defining and handling the policy that allows unprivileged processes to speak to privileged processes: It is a framework for centralizing the decision making process with respect to granting access to privileged operations for unprivileged applications. PolicyKit is specifically targeting applications in rich desktop environments on multi-user UNIX-like operating systems. It does not imply or rely on any exotic kernel features.
PolicyKit is used for controlling system-wide privileges. It provides an organized way for non-privileged processes to communicate with privileged ones. In contrast to systems such as sudo, it does not grant root permission to an entire process, but rather allows a finer level of control of centralized system policy.
PolicyKit works by delimiting distinct actions, e.g. running GParted, and delimiting users by group or by name, e.g. members of the wheel group. It then defines how -- if at all -- those users are allowed those actions, e.g. by identifying as members of the group by typing in their passwords.
PolicyKit vs. polkit
In the development of PolicyKit, major changes were introduced around version 0.92. In order to make the distinction clear between the way the old and the new versions worked, the new ones are referred to as 'polkit' rather than PolicyKit. Searching for PolicyKit on the web will mostly point to outdated documentation and lead to confusion and frustration, e.g. . The main distinction between PolicyKit and polkit is the abandonment of single-file configuration in favour of directory-based configuration, i.e. there is no PolicyKit.conf.
Please note: to correct issues with automount and shutdown, please check the ConsoleKit page.
How to let all users in the group
wheel have the same privileges as root (so you do not have to enter the root password, but the wheel user's password):
Installing AUR will create this file automatically.AUR from the
Create the following file:
To let users alice and bob perform all PackageKit actions (but not necessarily other PolicyKit actions), create the following file:
[Let Wheel Use PackageKit] Identity=unix-user:alice;unix-user:bob Action=org.freedesktop.packagekit.* ResultAny=no ResultInactive=no ResultActive=auth_self_keep