source: postlfs/security/polkit.xml@ 78e2a40

10.0 10.1 11.0 11.1 11.2 11.3 12.0 12.1 12.2 7.10 7.4 7.5 7.6 7.6-blfs 7.6-systemd 7.7 7.8 7.9 8.0 8.1 8.2 8.3 8.4 9.0 9.1 basic bdubbs/svn elogind gimp3 gnome kde5-13430 kde5-14269 kde5-14686 kea ken/TL2024 ken/inkscape-core-mods ken/tuningfonts krejzi/svn lazarus lxqt nosym perl-modules plabs/newcss plabs/python-mods python3.11 qt5new rahul/power-profiles-daemon renodr/vulkan-addition systemd-11177 systemd-13485 trunk upgradedb xry111/for-12.3 xry111/intltool xry111/llvm18 xry111/soup3 xry111/spidermonkey128 xry111/test-20220226 xry111/xf86-video-removal
Last change on this file since 78e2a40 was 78e2a40, checked in by Krejzi <krejzi@…>, 12 years ago

Package updates.

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@10899 af4574ff-66df-0310-9fd7-8a98e5e911e0

  • Property mode set to 100644
File size: 10.3 KB
Line 
1<?xml version="1.0" encoding="ISO-8859-1"?>
2<!DOCTYPE sect1 PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN"
3 "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
4 <!ENTITY % general-entities SYSTEM "../../general.ent">
5 %general-entities;
6
7 <!ENTITY polkit-download-http
8 "http://www.freedesktop.org/software/polkit/releases/polkit-&polkit-version;.tar.gz">
9 <!ENTITY polkit-download-ftp " ">
10 <!ENTITY polkit-md5sum "8c3f08287dd3e1e546e3c2ae00090908">
11 <!ENTITY polkit-size "1.4 MB">
12 <!ENTITY polkit-buildsize "17 MB">
13 <!ENTITY polkit-time "0.5 SBU">
14]>
15
16<sect1 id="polkit" xreflabel="Polkit-&polkit-version;">
17 <?dbhtml filename="polkit.html"?>
18
19 <sect1info>
20 <othername>$LastChangedBy$</othername>
21 <date>$Date$</date>
22 </sect1info>
23
24 <title>Polkit-&polkit-version;</title>
25
26 <indexterm zone="polkit">
27 <primary sortas="a-Polkit">Polkit</primary>
28 </indexterm>
29
30 <sect2 role="package">
31 <title>Introduction to Polkit</title>
32
33 <para>
34 <application>Polkit</application> is a toolkit for defining and handling
35 authorizations. It is used for allowing unprivileged processes to speak
36 to privileged processes.
37 </para>
38
39 &lfs72_checked;
40
41 <bridgehead renderas="sect3">Package Information</bridgehead>
42 <itemizedlist spacing="compact">
43 <listitem>
44 <para>
45 Download (HTTP): <ulink url="&polkit-download-http;"/>
46 </para>
47 </listitem>
48 <listitem>
49 <para>
50 Download (FTP): <ulink url="&polkit-download-ftp;"/>
51 </para>
52 </listitem>
53 <listitem>
54 <para>
55 Download MD5 sum: &polkit-md5sum;
56 </para>
57 </listitem>
58 <listitem>
59 <para>
60 Download size: &polkit-size;
61 </para>
62 </listitem>
63 <listitem>
64 <para>
65 Estimated disk space required: &polkit-buildsize;
66 </para>
67 </listitem>
68 <listitem>
69 <para>
70 Estimated build time: &polkit-time;
71 </para>
72 </listitem>
73 </itemizedlist>
74
75 <bridgehead renderas="sect3">Polkit Dependencies</bridgehead>
76
77 <bridgehead renderas="sect4">Required</bridgehead>
78 <para role="required">
79 <xref linkend="glib2"/> and
80 <xref linkend="intltool"/>
81 </para>
82
83 <bridgehead renderas="sect4">Optional (Required if building GNOME)</bridgehead>
84 <para role="optional">
85 <xref linkend="gobject-introspection"/>
86 </para>
87
88 <bridgehead renderas="sect4">Optional</bridgehead>
89 <para role="optional">
90 <xref linkend="DocBook"/>,
91 <xref linkend="docbook-xsl"/>,
92 <xref linkend="gtk-doc"/>,
93 <xref linkend="libxslt"/> and
94 <xref linkend="linux-pam"/>
95 </para>
96
97 <bridgehead renderas="sect4">Required (Runtime)</bridgehead>
98 <para role="required">
99 <xref linkend="SpiderMonkey"/>
100 </para>
101
102 <note>
103 <para>
104 If <xref linkend="libxslt"/> is installed then <xref linkend="DocBook"/>
105 and <xref linkend="docbook-xsl"/> are required. If you have installed
106 <xref linkend="libxslt"/>, but you do not want to install any of the
107 DocBook packages mentioned, you will need to use
108 <option>--disable-man-pages</option> in the instructions below.
109 </para>
110 </note>
111
112 <para condition="html" role="usernotes">User Notes:
113 <ulink url="&blfs-wiki;/polkit"/>
114 </para>
115 </sect2>
116
117 <sect2 role="installation">
118 <title>Installation of Polkit</title>
119
120 <para>
121 There should be a dedicated user and group to take control
122 of the <command>polkitd</command> daemon after it is
123 started. Issue the following commands as the
124 <systemitem class="username">root</systemitem> user:
125 </para>
126
127<screen role="root"><userinput>groupadd -fg 27 polkitd &amp;&amp;
128useradd -c "PolicyKit Daemon Owner" -d /etc/polkit-1 -u 27 \
129 -g polkitd -s /bin/false polkitd</userinput></screen>
130
131 <para>
132 Install <application>Polkit</application> by running the following
133 commands:
134 </para>
135
136<screen><userinput>./configure --prefix=/usr \
137 --sysconfdir=/etc \
138 --localstatedir=/var \
139 --libexecdir=/usr/lib/polkit-1 \
140 --with-authfw=shadow \
141 --disable-static &amp;&amp;
142make</userinput></screen>
143
144 <para>
145 To test the results, issue: <command>make check</command>.
146 Note that system <application>D-Bus</application> daemon
147 must be running for the testsuite to complete. There is
148 also a warning about <application>ConsoleKit</application>
149 database not present, but that one can be safely ignored.
150 </para>
151
152 <para>
153 Now, as the <systemitem class="username">root</systemitem> user:
154 </para>
155
156<screen role="root"><userinput>make install</userinput></screen>
157
158 </sect2>
159
160 <sect2 role="commands">
161 <title>Command Explanations</title>
162
163 <para>
164 <parameter>--with-authfw=shadow</parameter>: This parameter configures the
165 package to use the <application>Shadow</application> rather than the
166 <application>Linux PAM</application> Authentication framework. Remove it if
167 you would like to use <application>Linux PAM</application>.
168 </para>
169
170 <xi:include xmlns:xi="http://www.w3.org/2001/XInclude"
171 href="../../xincludes/static-libraries.xml"/>
172
173 <xi:include xmlns:xi="http://www.w3.org/2001/XInclude"
174 href="../../xincludes/gtk-doc-rebuild.xml"/>
175
176 </sect2>
177
178 <sect2 role="configuration">
179 <title>Configuring Polkit</title>
180
181 <sect3>
182 <title>PAM Configuration</title>
183
184 <note>
185 <para>
186 If you did not build <application>Polkit</application> with
187 <application>Linux PAM</application> support, you can skip this section.
188 </para>
189 </note>
190
191 <para>
192 If you have built <application>Polkit</application> with
193 <application>Linux PAM</application> support, you need to modify
194 default PAM configuration file which was installed by default to get
195 <application>Polkit</application> to work correctly with BLFS.
196 </para>
197
198 <para>
199 Issue the following commands as the <systemitem class="username">root</systemitem>
200 user to create the configuration file for <application>Linux PAM</application>:
201 </para>
202
203<screen role="root"><userinput>cat &gt; /etc/pam.d/polkit-1 &lt;&lt; "EOF"
204<literal># Begin /etc/pam.d/polkit-1
205
206auth include system-auth
207account include system-account
208password include system-password
209session include system-session
210
211# End /etc/pam.d/polkit-1</literal>
212EOF</userinput></screen>
213
214 </sect3>
215
216 </sect2>
217
218 <sect2 role="content">
219 <title>Contents</title>
220
221 <segmentedlist>
222 <segtitle>Installed Programs</segtitle>
223 <segtitle>Installed Libraries</segtitle>
224 <segtitle>Installed Directories</segtitle>
225
226 <seglistitem>
227 <seg>
228 pkaction, pkcheck, pk-example-frobnicate, pkexec,
229 pkttyagent and polkitd
230 </seg>
231 <seg>
232 libpolkit-agent-1.so and
233 libpolkit-gobject-1.so
234 </seg>
235 <seg>
236 /etc/polkit-1,
237 /usr/include/polkit-1,
238 /usr/lib/polkit-1,
239 /usr/share/gtk-doc/html/polkit-1 and
240 /usr/share/polkit-1
241 </seg>
242 </seglistitem>
243 </segmentedlist>
244
245 <variablelist>
246 <bridgehead renderas="sect3">Short Descriptions</bridgehead>
247 <?dbfo list-presentation="list"?>
248 <?dbhtml list-presentation="table"?>
249
250 <varlistentry id="pkaction">
251 <term><command>pkaction</command></term>
252 <listitem>
253 <para>
254 is used to obtain information about registered PolicyKit actions.
255 </para>
256 <indexterm zone="polkit pkaction">
257 <primary sortas="b-pkaction">pkaction</primary>
258 </indexterm>
259 </listitem>
260 </varlistentry>
261
262 <varlistentry id="pkcheck">
263 <term><command>pkcheck</command></term>
264 <listitem>
265 <para>
266 is used to check whether a process is authorized for action.
267 </para>
268 <indexterm zone="polkit pkcheck">
269 <primary sortas="b-pkcheck">pkcheck</primary>
270 </indexterm>
271 </listitem>
272 </varlistentry>
273
274 <varlistentry id="pkexec">
275 <term><command>pkexec</command></term>
276 <listitem>
277 <para>
278 allows an authorized user to execute a command as another user.
279 </para>
280 <indexterm zone="polkit pkexec">
281 <primary sortas="b-pkexec">pkexec</primary>
282 </indexterm>
283 </listitem>
284 </varlistentry>
285
286 <varlistentry id="pkttyagent">
287 <term><command>pkttyagent</command></term>
288 <listitem>
289 <para>
290 is used to start a textual authentication agent for the subject.
291 </para>
292 <indexterm zone="polkit pkttyagent">
293 <primary sortas="b-pkttyagent">pkttyagent</primary>
294 </indexterm>
295 </listitem>
296 </varlistentry>
297
298 <varlistentry id="polkitd">
299 <term><command>polkitd</command></term>
300 <listitem>
301 <para>
302 provides the org.freedesktop.PolicyKit1 <application>D-Bus</application>
303 service on the system message bus.
304 </para>
305 <indexterm zone="polkit polkitd">
306 <primary sortas="b-polkitd">polkitd</primary>
307 </indexterm>
308 </listitem>
309 </varlistentry>
310
311 <varlistentry id="libpolkit-agent-1">
312 <term><filename class='libraryfile'>libpolkit-agent-1.so</filename></term>
313 <listitem>
314 <para>
315 contains the <application>Polkit</application> authentication
316 agent API functions.
317 </para>
318 <indexterm zone="polkit libpolkit-agent-1">
319 <primary sortas="c-libpolkit-agent-1">libpolkit-agent-1.so</primary>
320 </indexterm>
321 </listitem>
322 </varlistentry>
323
324 <varlistentry id="libpolkit-gobject-1">
325 <term><filename class='libraryfile'>libpolkit-gobject-1.so</filename></term>
326 <listitem>
327 <para>
328 contains the <application>Polkit</application> authorization API functions.
329 </para>
330 <indexterm zone="polkit libpolkit-gobject-1">
331 <primary sortas="c-libpolkit-gobject-1">libpolkit-gobject-1.so</primary>
332 </indexterm>
333 </listitem>
334 </varlistentry>
335
336 </variablelist>
337
338 </sect2>
339
340</sect1>
Note: See TracBrowser for help on using the repository browser.