source: postlfs/security/polkit.xml@ 85ec85ef

gnome
Last change on this file since 85ec85ef was cae7a6fb, checked in by Christopher Gregory <cjg@…>, 10 years ago

Converted acpid at autofs bluez fcron gpm sysstat udisks2 upower dhcp nfs-utils cyrus-sasl mitkrb openssh polkit and stunnel pages to systemd

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/branches/gnome@13413 af4574ff-66df-0310-9fd7-8a98e5e911e0
  • Property mode set to 100644
File size: 10.1 KB
Line 
1<?xml version="1.0" encoding="ISO-8859-1"?>
2<!DOCTYPE sect1 PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN"
3 "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
4 <!ENTITY % general-entities SYSTEM "../../general.ent">
5 %general-entities;
6
7 <!ENTITY polkit-download-http
8 "http://www.freedesktop.org/software/polkit/releases/polkit-&polkit-version;.tar.gz">
9 <!ENTITY polkit-download-ftp " ">
10 <!ENTITY polkit-md5sum "b0f2fa00a55f47c6a5d88e9b73f80127">
11 <!ENTITY polkit-size "1.4 MB">
12 <!ENTITY polkit-buildsize "17 MB">
13 <!ENTITY polkit-time "0.2 SBU">
14]>
15
16<sect1 id="polkit" xreflabel="Polkit-&polkit-version;">
17 <?dbhtml filename="polkit.html"?>
18
19 <sect1info>
20 <othername>$LastChangedBy$</othername>
21 <date>$Date$</date>
22 </sect1info>
23
24 <title>Polkit-&polkit-version;</title>
25
26 <indexterm zone="polkit">
27 <primary sortas="a-Polkit">Polkit</primary>
28 </indexterm>
29
30 <sect2 role="package">
31 <title>Introduction to Polkit</title>
32
33 <para>
34 <application>Polkit</application> is a toolkit for defining and handling
35 authorizations. It is used for allowing unprivileged processes to
36 communicate with privileged processes.
37 </para>
38
39 &lfs75_checked;
40
41 <bridgehead renderas="sect3">Package Information</bridgehead>
42 <itemizedlist spacing="compact">
43 <listitem>
44 <para>
45 Download (HTTP): <ulink url="&polkit-download-http;"/>
46 </para>
47 </listitem>
48 <listitem>
49 <para>
50 Download (FTP): <ulink url="&polkit-download-ftp;"/>
51 </para>
52 </listitem>
53 <listitem>
54 <para>
55 Download MD5 sum: &polkit-md5sum;
56 </para>
57 </listitem>
58 <listitem>
59 <para>
60 Download size: &polkit-size;
61 </para>
62 </listitem>
63 <listitem>
64 <para>
65 Estimated disk space required: &polkit-buildsize;
66 </para>
67 </listitem>
68 <listitem>
69 <para>
70 Estimated build time: &polkit-time;
71 </para>
72 </listitem>
73 </itemizedlist>
74
75 <bridgehead renderas="sect3">Polkit Dependencies</bridgehead>
76
77 <bridgehead renderas="sect4">Required</bridgehead>
78 <para role="required">
79 <xref linkend="glib2"/>, and
80 <xref linkend="JS"/>
81 </para>
82
83 <bridgehead renderas="sect4">Optional (Required if building GNOME)</bridgehead>
84 <para role="optional">
85 <xref linkend="gobject-introspection"/>
86 </para>
87
88 <bridgehead renderas="sect4">Optional</bridgehead>
89 <para role="optional">
90 <xref linkend="DocBook"/>,
91 <xref linkend="docbook-xsl"/>,
92 <xref linkend="gtk-doc"/>, and
93 <xref linkend="libxslt"/>
94 </para>
95
96 <bridgehead renderas="sect4">Optional (Required for GNOME)</bridgehead>
97 <para role="optional">
98 <xref linkend="linux-pam"/>
99 </para>
100
101 <note>
102 <para>
103 If <xref linkend="libxslt"/> is installed, then <xref linkend="DocBook"/>
104 and <xref linkend="docbook-xsl"/> are required. If you have installed
105 <xref linkend="libxslt"/>, but you do not want to install any of the
106 DocBook packages mentioned, you will need to use
107 <option>--disable-man-pages</option> in the instructions below.
108 </para>
109 </note>
110
111 <para condition="html" role="usernotes">User Notes:
112 <ulink url="&blfs-wiki;/polkit"/>
113 </para>
114 </sect2>
115
116 <sect2 role="installation">
117 <title>Installation of Polkit</title>
118
119 <para>
120 There should be a dedicated user and group to take control
121 of the <command>polkitd</command> daemon after it is
122 started. Issue the following commands as the
123 <systemitem class="username">root</systemitem> user:
124 </para>
125
126<screen role="root"><userinput>groupadd -fg 27 polkitd &amp;&amp;
127useradd -c "PolicyKit Daemon Owner" -d /etc/polkit-1 -u 27 \
128 -g polkitd -s /bin/false polkitd</userinput></screen>
129
130 <para>
131 Install <application>Polkit</application> by running the following
132 commands:
133 </para>
134
135<screen><userinput>./configure --prefix=/usr \
136 --sysconfdir=/etc \
137 --localstatedir=/var \
138 --disable-static \
139 --enable-libsystemd-login=yes &amp;&amp;
140make</userinput></screen>
141
142 <para>
143 To test the results, issue: <command>make check</command>.
144 Note that system <application>D-Bus</application> daemon
145 must be running for the testsuite to complete. There is
146 also a warning about <application>ConsoleKit</application>
147 database not present, but that one can be safely ignored.
148 </para>
149
150 <para>
151 Now, as the <systemitem class="username">root</systemitem> user:
152 </para>
153
154<screen role="root"><userinput>make install</userinput></screen>
155
156 </sect2>
157
158 <sect2 role="commands">
159 <title>Command Explanations</title>
160
161 <para>
162 <parameter>--enable-libsystemd-login=yes</parameter>: This parameter fixes
163 building with <application>systemd</application>.
164 </para>
165
166 <xi:include xmlns:xi="http://www.w3.org/2001/XInclude"
167 href="../../xincludes/static-libraries.xml"/>
168
169 <xi:include xmlns:xi="http://www.w3.org/2001/XInclude"
170 href="../../xincludes/gtk-doc-rebuild.xml"/>
171
172 </sect2>
173
174 <sect2 role="configuration">
175 <title>Configuring Polkit</title>
176
177 <sect3>
178 <title>PAM Configuration</title>
179
180 <note>
181 <para>
182 If you did not build <application>Polkit</application> with
183 <application>Linux PAM</application> support, you can skip this section.
184 </para>
185 </note>
186
187 <para>
188 If you have built <application>Polkit</application> with
189 <application>Linux PAM</application> support, you need to modify
190 the default PAM configuration file which was installed by default to get
191 <application>Polkit</application> to work correctly with BLFS. Issue the
192 following commands as the <systemitem class="username">root</systemitem>
193 user to create the configuration file for <application>Linux PAM</application>:
194 </para>
195
196<screen role="root"><userinput>cat &gt; /etc/pam.d/polkit-1 &lt;&lt; "EOF"
197<literal># Begin /etc/pam.d/polkit-1
198
199auth include system-auth
200account include system-account
201password include system-password
202session include system-session
203
204# End /etc/pam.d/polkit-1</literal>
205EOF</userinput></screen>
206
207 </sect3>
208
209 </sect2>
210
211 <sect2 role="content">
212 <title>Contents</title>
213
214 <segmentedlist>
215 <segtitle>Installed Programs</segtitle>
216 <segtitle>Installed Libraries</segtitle>
217 <segtitle>Installed Directories</segtitle>
218
219 <seglistitem>
220 <seg>
221 pkaction, pkcheck, pk-example-frobnicate, pkexec,
222 pkttyagent and polkitd
223 </seg>
224 <seg>
225 libpolkit-agent-1.so and
226 libpolkit-gobject-1.so
227 </seg>
228 <seg>
229 /etc/polkit-1,
230 /usr/include/polkit-1,
231 /usr/lib/polkit-1,
232 /usr/share/gtk-doc/html/polkit-1 and
233 /usr/share/polkit-1
234 </seg>
235 </seglistitem>
236 </segmentedlist>
237
238 <variablelist>
239 <bridgehead renderas="sect3">Short Descriptions</bridgehead>
240 <?dbfo list-presentation="list"?>
241 <?dbhtml list-presentation="table"?>
242
243 <varlistentry id="pkaction">
244 <term><command>pkaction</command></term>
245 <listitem>
246 <para>
247 is used to obtain information about registered PolicyKit actions.
248 </para>
249 <indexterm zone="polkit pkaction">
250 <primary sortas="b-pkaction">pkaction</primary>
251 </indexterm>
252 </listitem>
253 </varlistentry>
254
255 <varlistentry id="pkcheck">
256 <term><command>pkcheck</command></term>
257 <listitem>
258 <para>
259 is used to check whether a process is authorized for action.
260 </para>
261 <indexterm zone="polkit pkcheck">
262 <primary sortas="b-pkcheck">pkcheck</primary>
263 </indexterm>
264 </listitem>
265 </varlistentry>
266
267 <varlistentry id="pkexec">
268 <term><command>pkexec</command></term>
269 <listitem>
270 <para>
271 allows an authorized user to execute a command as another user.
272 </para>
273 <indexterm zone="polkit pkexec">
274 <primary sortas="b-pkexec">pkexec</primary>
275 </indexterm>
276 </listitem>
277 </varlistentry>
278
279 <varlistentry id="pkttyagent">
280 <term><command>pkttyagent</command></term>
281 <listitem>
282 <para>
283 is used to start a textual authentication agent for the subject.
284 </para>
285 <indexterm zone="polkit pkttyagent">
286 <primary sortas="b-pkttyagent">pkttyagent</primary>
287 </indexterm>
288 </listitem>
289 </varlistentry>
290
291 <varlistentry id="polkitd">
292 <term><command>polkitd</command></term>
293 <listitem>
294 <para>
295 provides the org.freedesktop.PolicyKit1 <application>D-Bus</application>
296 service on the system message bus.
297 </para>
298 <indexterm zone="polkit polkitd">
299 <primary sortas="b-polkitd">polkitd</primary>
300 </indexterm>
301 </listitem>
302 </varlistentry>
303
304 <varlistentry id="libpolkit-agent-1">
305 <term><filename class='libraryfile'>libpolkit-agent-1.so</filename></term>
306 <listitem>
307 <para>
308 contains the <application>Polkit</application> authentication
309 agent API functions.
310 </para>
311 <indexterm zone="polkit libpolkit-agent-1">
312 <primary sortas="c-libpolkit-agent-1">libpolkit-agent-1.so</primary>
313 </indexterm>
314 </listitem>
315 </varlistentry>
316
317 <varlistentry id="libpolkit-gobject-1">
318 <term><filename class='libraryfile'>libpolkit-gobject-1.so</filename></term>
319 <listitem>
320 <para>
321 contains the <application>Polkit</application> authorization API functions.
322 </para>
323 <indexterm zone="polkit libpolkit-gobject-1">
324 <primary sortas="c-libpolkit-gobject-1">libpolkit-gobject-1.so</primary>
325 </indexterm>
326 </listitem>
327 </varlistentry>
328
329 </variablelist>
330
331 </sect2>
332
333</sect1>
Note: See TracBrowser for help on using the repository browser.