source: postlfs/security/polkit.xml@ 39ac53f0

<?xml version="1.0" encoding="ISO-8859-1"?>
<!DOCTYPE sect1 PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN"
   "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
  <!ENTITY % general-entities SYSTEM "../../general.ent">
  %general-entities;

  <!ENTITY polkit-download-http "http://hal.freedesktop.org/releases/polkit-&polkit-version;.tar.gz">
  <!ENTITY polkit-download-ftp  " ">
  <!ENTITY polkit-md5sum        "5abc9f858e7b614ef41161db36d53915">
  <!ENTITY polkit-size          "986 KB">
  <!ENTITY polkit-buildsize     "17 MB">
  <!ENTITY polkit-time          "0.3 SBU">
]>

<sect1 id="polkit" xreflabel="polkit-&polkit-version;">
  <?dbhtml filename="polkit.html"?>

  <sect1info>
    <othername>$LastChangedBy$</othername>
    <date>$Date$</date>
  </sect1info>

  <title>polkit-&polkit-version;</title>

  <indexterm zone="polkit">
    <primary sortas="a-polkit">polkit</primary>
  </indexterm>

  <sect2 role="package">
    <title>Introduction to polkit</title>

    <para>The <application>polkit</application> package is an
    application-level toolkit for defining and handling the policy that allows
    unprivileged processes to speak to privileged processes.</para>

    &lfs65_checked;

    <bridgehead renderas="sect3">Package Information</bridgehead>
    <itemizedlist spacing="compact">
      <listitem>
        <para>Download (HTTP): <ulink url="&polkit-download-http;"/></para>
      </listitem>
      <listitem>
        <para>Download (FTP): <ulink url="&polkit-download-ftp;"/></para>
      </listitem>
      <listitem>
        <para>Download MD5 sum: &polkit-md5sum;</para>
      </listitem>
      <listitem>
        <para>Download size: &polkit-size;</para>
      </listitem>
      <listitem>
        <para>Estimated disk space required: &polkit-buildsize;</para>
      </listitem>
      <listitem>
        <para>Estimated build time: &polkit-time;</para>
      </listitem>
    </itemizedlist>

    <bridgehead renderas="sect3">polkit Dependencies</bridgehead>

    <bridgehead renderas="sect4">Required</bridgehead>
    <para role="required"><xref linkend="eggdbus"/>,
    <xref linkend="intltool"/>,
    <xref linkend="linux-pam"/>,
    <xref linkend="gobject-introspection"/>, and
    <xref linkend="DocBook"/></para>

    <bridgehead renderas="sect4">Optional</bridgehead>
    <para role="optional"><xref linkend="gtk-doc"/></para>

    <para condition="html" role="usernotes">User Notes:
    <ulink url="&blfs-wiki;/polkit"/></para>

  </sect2>

  <sect2 role="installation">
    <title>Installation of polkit</title>

    <para>It is a requirement to have a dedicated user and group for
    <application>polkit</application> to function correctly. Issue the
    following commands as the <systemitem class="username">root</systemitem>
    user:</para>

<screen role="root"><userinput>groupadd -fg 27 polkituser &amp;&amp;
useradd -c "Policy Kit Daemon User" -d /dev/null -u 27 \
    -g polkituser -s /bin/false polkituser || [ $? == 9 ]</userinput></screen>

    <para>Install <application>polkit</application> by running the following
    commands as an unprivileged user:</para>

<screen><userinput>./configure --prefix=/usr --sysconfdir=/etc \
    --libexecdir=/usr/lib/polkit-1 --localstatedir=/var &amp;&amp;
make</userinput></screen>

    <para>This package does not come with a test suite.</para>

    <para>Now, as the <systemitem class="username">root</systemitem> user:</para>

<screen role="root"><userinput>make install</userinput></screen>

  </sect2>

  <sect2 role="commands">
    <title>Command Explanations</title>

    <xi:include xmlns:xi="http://www.w3.org/2001/XInclude"
    href="../../xincludes/gtk-doc-rebuild.xml"/>

  </sect2>

  <sect2 role="content">
    <title>Contents</title>

    <segmentedlist>
      <segtitle>Installed Programs</segtitle>
      <segtitle>Installed Libraries</segtitle>
      <segtitle>Installed Directories</segtitle>

      <seglistitem>
        <seg>pkaction, pkcheck, pk-example-frobnicate, pkexec,
        polkit-agent-helper-1, and polkitd</seg>
        <seg>libpolkit-agent-1.{so,a}, libpolkit-backend-1.{so,a},
        libpolkit-gobject-1.{so,a}, libnullbackend.{so,a}, and
        libpkexec-action-lookup.{so,a}</seg>
        <seg>/etc/polkit-1/{localauthority.conf.d,nullbackend.conf.d},
        /usr/{include/polkit-1/{polkit,polkitagent,polkitbackend},
        lib/polkit-1/extensions,share/polkit-1/actions},
        /var/lib/polkit-1/localauthority/{10-vendor.d,20-org.d,30-site.d,
        50-local.d,90-mandatory.d}</seg>
      </seglistitem>
    </segmentedlist>

    <variablelist>
      <bridgehead renderas="sect3">Short Descriptions</bridgehead>
      <?dbfo list-presentation="list"?>
      <?dbhtml list-presentation="table"?>

      <varlistentry id="pkaction">
        <term><command>pkaction</command></term>
        <listitem>
          <para>is used to obtain information about registered PolicyKit actions.</para>
          <indexterm zone="polkit pkaction">
            <primary sortas="b-pkaction">pkaction</primary>
          </indexterm>
        </listitem>
      </varlistentry>

      <varlistentry id="pkcheck">
        <term><command>pkcheck</command></term>
        <listitem>
          <para>is used to check whether a process is authorized for action.</para>
          <indexterm zone="polkit pkcheck">
            <primary sortas="b-pkcheck">pkcheck</primary>
          </indexterm>
        </listitem>
      </varlistentry>

<!--      <varlistentry id="pk-example-frobnicate">
        <term><command>pk-example-frobnicate</command></term>
        <listitem>
          <para>does this .....</para>
          <indexterm zone="polkit pk-example-frobnicate">
            <primary sortas="b-pk-example-frobnicate">pk-example-frobnicate</primary>
          </indexterm>
        </listitem>
      </varlistentry>-->

      <varlistentry id="pkexec">
        <term><command>pkexec</command></term>
        <listitem>
          <para>allows an authorized user to execute a command as another user.</para>
          <indexterm zone="polkit pkexec">
            <primary sortas="b-pkexec">pkexec</primary>
          </indexterm>
        </listitem>
      </varlistentry>

<!--      <varlistentry id="polkit-agent-helper-1">
        <term><command>polkit-agent-helper-1</command></term>
        <listitem>
          <para>does this .....</para>
          <indexterm zone="polkit polkit-agent-helper-1">
            <primary sortas="b-polkit-agent-helper-1">polkit-agent-helper-1</primary>
          </indexterm>
        </listitem>
      </varlistentry>-->

      <varlistentry id="polkitd-0.94">
        <term><command>polkitd</command></term>
        <listitem>
          <para>provides the org.freedesktop.PolicyKit1
          <application>D-Bus</application> service on the system message bus.</para>
          <indexterm zone="polkit polkitd-0.94">
            <primary sortas="b-polkitd">polkitd</primary>
          </indexterm>
        </listitem>
      </varlistentry>

      <varlistentry id="libpolkit-agent-1">
        <term><filename class='libraryfile'>libpolkit-agent-1.{so,a}</filename></term>
        <listitem>
          <para>contains the <application>polkit</application> authentication
          agent API functions.</para>
          <indexterm zone="polkit libpolkit-agent-1">
            <primary sortas="c-libpolkit-agent-1">libpolkit-agent-1.{so,a}</primary>
          </indexterm>
        </listitem>
      </varlistentry>

      <varlistentry id="libpolkit-backend-1">
        <term><filename class='libraryfile'>libpolkit-backend-1.{so,a}</filename></term>
        <listitem>
          <para>contains the <application>polkit</application> backend API
          functions.</para>
          <indexterm zone="polkit libpolkit-backend-1">
            <primary sortas="c-libpolkit-backend-1">libpolkit-backend-1.{so,a}</primary>
          </indexterm>
        </listitem>
      </varlistentry>

      <varlistentry id="libpolkit-gobject-1">
        <term><filename class='libraryfile'>libpolkit-gobject-1.{so,a}</filename></term>
        <listitem>
          <para>contains the <application>polkit</application> authorization API
          functions.</para>
          <indexterm zone="polkit libpolkit-gobject-1">
            <primary sortas="c-libpolkit-gobject-1">libpolkit-gobject-1.{so,a}</primary>
          </indexterm>
        </listitem>
      </varlistentry>

      <varlistentry id="libnullbackend">
        <term><filename class='libraryfile'>libnullbackend.{so,a}</filename></term>
        <listitem>
          <para>is an extension library.</para>
          <indexterm zone="polkit libnullbackend">
            <primary sortas="c-libnullbackend">libnullbackend.{so,a}</primary>
          </indexterm>
        </listitem>
      </varlistentry>

      <varlistentry id="libpkexec-action-lookup">
        <term><filename class='libraryfile'>libpkexec-action-lookup.{so,a}</filename></term>
        <listitem>
          <para>is an extension library.</para>
          <indexterm zone="polkit libpkexec-action-lookup">
            <primary sortas="c-libpkexec-action-lookup">libpkexec-action-lookup.{so,a}</primary>
          </indexterm>
        </listitem>
      </varlistentry>

    </variablelist>

  </sect2>

</sect1>