source: postlfs/security/polkit.xml@ bc92a1a

10.0 10.1 11.0 11.1 11.2 11.3 12.0 12.1 12.2 7.10 7.4 7.5 7.6 7.6-blfs 7.6-systemd 7.7 7.8 7.9 8.0 8.1 8.2 8.3 8.4 9.0 9.1 basic bdubbs/svn elogind gimp3 gnome kde5-13430 kde5-14269 kde5-14686 kea ken/TL2024 ken/inkscape-core-mods ken/tuningfonts krejzi/svn lazarus lxqt nosym perl-modules plabs/newcss plabs/python-mods python3.11 qt5new rahul/power-profiles-daemon renodr/vulkan-addition systemd-11177 systemd-13485 trunk upgradedb xry111/for-12.3 xry111/intltool xry111/llvm18 xry111/soup3 xry111/spidermonkey128 xry111/test-20220226 xry111/xf86-video-removal
Last change on this file since bc92a1a was bc92a1a, checked in by Krejzi <krejzi@…>, 12 years ago

Mark some packages as 7.2 checked. Part 11 - SGML and Polkit.

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@10559 af4574ff-66df-0310-9fd7-8a98e5e911e0

  • Property mode set to 100644
File size: 10.2 KB
Line 
1<?xml version="1.0" encoding="ISO-8859-1"?>
2<!DOCTYPE sect1 PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN"
3 "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
4 <!ENTITY % general-entities SYSTEM "../../general.ent">
5 %general-entities;
6
7 <!ENTITY polkit-download-http
8 "http://www.freedesktop.org/software/polkit/releases/polkit-&polkit-version;.tar.gz">
9 <!ENTITY polkit-download-ftp " ">
10 <!ENTITY polkit-md5sum "0e4f9c53f43fd1b25ac3f0d2e09b2ae1">
11 <!ENTITY polkit-size "1.3 MB">
12 <!ENTITY polkit-buildsize "13 MB">
13 <!ENTITY polkit-time "0.5 SBU">
14]>
15
16<sect1 id="polkit" xreflabel="Polkit-&polkit-version;">
17 <?dbhtml filename="polkit.html"?>
18
19 <sect1info>
20 <othername>$LastChangedBy$</othername>
21 <date>$Date$</date>
22 </sect1info>
23
24 <title>Polkit-&polkit-version;</title>
25
26 <indexterm zone="polkit">
27 <primary sortas="a-Polkit">Polkit</primary>
28 </indexterm>
29
30 <sect2 role="package">
31 <title>Introduction to Polkit</title>
32
33 <para>
34 <application>Polkit</application> is a toolkit for defining and handling
35 authorizations. It is used for allowing unprivileged processes to speak
36 to privileged processes.
37 </para>
38
39 &lfs72_checked;
40
41 <bridgehead renderas="sect3">Package Information</bridgehead>
42 <itemizedlist spacing="compact">
43 <listitem>
44 <para>
45 Download (HTTP): <ulink url="&polkit-download-http;"/>
46 </para>
47 </listitem>
48 <listitem>
49 <para>
50 Download (FTP): <ulink url="&polkit-download-ftp;"/>
51 </para>
52 </listitem>
53 <listitem>
54 <para>
55 Download MD5 sum: &polkit-md5sum;
56 </para>
57 </listitem>
58 <listitem>
59 <para>
60 Download size: &polkit-size;
61 </para>
62 </listitem>
63 <listitem>
64 <para>
65 Estimated disk space required: &polkit-buildsize;
66 </para>
67 </listitem>
68 <listitem>
69 <para>
70 Estimated build time: &polkit-time;
71 </para>
72 </listitem>
73 </itemizedlist>
74
75 <bridgehead renderas="sect3">Polkit Dependencies</bridgehead>
76
77 <bridgehead renderas="sect4">Required</bridgehead>
78 <para role="required">
79 <xref linkend="glib2"/>,
80 <xref linkend="intltool"/> and
81 <xref linkend="SpiderMonkey"/>
82 </para>
83
84 <bridgehead renderas="sect4">Optional (Required if building GNOME)</bridgehead>
85 <para role="optional">
86 <xref linkend="gobject-introspection"/>
87 </para>
88
89 <bridgehead renderas="sect4">Optional</bridgehead>
90 <para role="optional">
91 <xref linkend="DocBook"/>,
92 <xref linkend="docbook-xsl"/>,
93 <xref linkend="gtk-doc"/>,
94 <xref linkend="libxslt"/> and
95 <xref linkend="linux-pam"/>
96 </para>
97
98 <note>
99 <para>
100 If <xref linkend="libxslt"/> is installed then <xref linkend="DocBook"/>
101 and <xref linkend="docbook-xsl"/> are required. If you have installed
102 <xref linkend="libxslt"/>, but you do not want to install any of the
103 DocBook packages mentioned, you will need to use
104 <option>--disable-man-pages</option> in the instructions below.
105 </para>
106 </note>
107
108 <para condition="html" role="usernotes">User Notes:
109 <ulink url="&blfs-wiki;/polkit"/>
110 </para>
111 </sect2>
112
113 <sect2 role="installation">
114 <title>Installation of Polkit</title>
115
116 <para>
117 There should be a dedicated user and group to take control
118 of the <command>polkitd</command> daemon after it is
119 started. Issue the following commands as the
120 <systemitem class="username">root</systemitem> user:
121 </para>
122
123<screen role="root"><userinput>groupadd -fg 27 polkitd &amp;&amp;
124useradd -c "PolicyKit Daemon Owner" -d /etc/polkit-1 -u 27 \
125 -g polkitd -s /bin/false polkitd</userinput></screen>
126
127 <para>
128 Install <application>Polkit</application> by running the following
129 commands:
130 </para>
131
132<screen><userinput>./configure --prefix=/usr \
133 --sysconfdir=/etc \
134 --localstatedir=/var \
135 --libexecdir=/usr/lib/polkit-1 \
136 --with-authfw=shadow \
137 --disable-static &amp;&amp;
138make</userinput></screen>
139
140 <para>
141 To test the results, issue: <command>make check</command>.
142 Note that system <application>D-Bus</application> daemon
143 must be running for the testsuite to complete. There is
144 also a warning about <application>ConsoleKit</application>
145 database not present, but that one can be safely ignored.
146 </para>
147
148 <para>
149 Now, as the <systemitem class="username">root</systemitem> user:
150 </para>
151
152<screen role="root"><userinput>make install</userinput></screen>
153
154 </sect2>
155
156 <sect2 role="commands">
157 <title>Command Explanations</title>
158
159 <para>
160 <parameter>--with-authfw=shadow</parameter>: This parameter configures the
161 package to use the <application>Shadow</application> rather than the
162 <application>Linux PAM</application> Authentication framework. Remove it if
163 you would like to use <application>Linux PAM</application>.
164 </para>
165
166 <xi:include xmlns:xi="http://www.w3.org/2001/XInclude"
167 href="../../xincludes/static-libraries.xml"/>
168
169 <xi:include xmlns:xi="http://www.w3.org/2001/XInclude"
170 href="../../xincludes/gtk-doc-rebuild.xml"/>
171
172 </sect2>
173
174 <sect2 role="configuration">
175 <title>Configuring Polkit</title>
176
177 <sect3>
178 <title>PAM Configuration</title>
179
180 <note>
181 <para>
182 If you did not build <application>Polkit</application> with
183 <application>Linux PAM</application> support, you can skip this section.
184 </para>
185 </note>
186
187 <para>
188 If you have built <application>Polkit</application> with
189 <application>Linux PAM</application> support, you need to modify
190 default PAM configuration file which was installed by default to get
191 <application>Polkit</application> to work correctly with BLFS.
192 </para>
193
194 <para>
195 Issue the following commands as the <systemitem class="username">root</systemitem>
196 user to create the configuration file for <application>Linux PAM</application>:
197 </para>
198
199<screen role="root"><userinput>cat &gt; /etc/pam.d/polkit-1 &lt;&lt; "EOF"
200<literal># Begin /etc/pam.d/polkit-1
201
202auth include system-auth
203account include system-account
204password include system-password
205session include system-session
206
207# End /etc/pam.d/polkit-1</literal>
208EOF</userinput></screen>
209
210 </sect3>
211
212 </sect2>
213
214 <sect2 role="content">
215 <title>Contents</title>
216
217 <segmentedlist>
218 <segtitle>Installed Programs</segtitle>
219 <segtitle>Installed Libraries</segtitle>
220 <segtitle>Installed Directories</segtitle>
221
222 <seglistitem>
223 <seg>
224 pkaction, pkcheck, pk-example-frobnicate, pkexec,
225 pkttyagent and polkitd
226 </seg>
227 <seg>
228 libpolkit-agent-1.so and
229 libpolkit-gobject-1.so
230 </seg>
231 <seg>
232 /etc/polkit-1,
233 /usr/include/polkit-1,
234 /usr/lib/polkit-1,
235 /usr/share/gtk-doc/html/polkit-1 and
236 /usr/share/polkit-1
237 </seg>
238 </seglistitem>
239 </segmentedlist>
240
241 <variablelist>
242 <bridgehead renderas="sect3">Short Descriptions</bridgehead>
243 <?dbfo list-presentation="list"?>
244 <?dbhtml list-presentation="table"?>
245
246 <varlistentry id="pkaction">
247 <term><command>pkaction</command></term>
248 <listitem>
249 <para>
250 is used to obtain information about registered PolicyKit actions.
251 </para>
252 <indexterm zone="polkit pkaction">
253 <primary sortas="b-pkaction">pkaction</primary>
254 </indexterm>
255 </listitem>
256 </varlistentry>
257
258 <varlistentry id="pkcheck">
259 <term><command>pkcheck</command></term>
260 <listitem>
261 <para>
262 is used to check whether a process is authorized for action.
263 </para>
264 <indexterm zone="polkit pkcheck">
265 <primary sortas="b-pkcheck">pkcheck</primary>
266 </indexterm>
267 </listitem>
268 </varlistentry>
269
270 <varlistentry id="pkexec">
271 <term><command>pkexec</command></term>
272 <listitem>
273 <para>
274 allows an authorized user to execute a command as another user.
275 </para>
276 <indexterm zone="polkit pkexec">
277 <primary sortas="b-pkexec">pkexec</primary>
278 </indexterm>
279 </listitem>
280 </varlistentry>
281
282 <varlistentry id="pkttyagent">
283 <term><command>pkttyagent</command></term>
284 <listitem>
285 <para>
286 is used to start a textual authentication agent for the subject.
287 </para>
288 <indexterm zone="polkit pkttyagent">
289 <primary sortas="b-pkttyagent">pkttyagent</primary>
290 </indexterm>
291 </listitem>
292 </varlistentry>
293
294 <varlistentry id="polkitd">
295 <term><command>polkitd</command></term>
296 <listitem>
297 <para>
298 provides the org.freedesktop.PolicyKit1 <application>D-Bus</application>
299 service on the system message bus.
300 </para>
301 <indexterm zone="polkit polkitd">
302 <primary sortas="b-polkitd">polkitd</primary>
303 </indexterm>
304 </listitem>
305 </varlistentry>
306
307 <varlistentry id="libpolkit-agent-1">
308 <term><filename class='libraryfile'>libpolkit-agent-1.so</filename></term>
309 <listitem>
310 <para>
311 contains the <application>Polkit</application> authentication
312 agent API functions.
313 </para>
314 <indexterm zone="polkit libpolkit-agent-1">
315 <primary sortas="c-libpolkit-agent-1">libpolkit-agent-1.so</primary>
316 </indexterm>
317 </listitem>
318 </varlistentry>
319
320 <varlistentry id="libpolkit-gobject-1">
321 <term><filename class='libraryfile'>libpolkit-gobject-1.so</filename></term>
322 <listitem>
323 <para>
324 contains the <application>Polkit</application> authorization API functions.
325 </para>
326 <indexterm zone="polkit libpolkit-gobject-1">
327 <primary sortas="c-libpolkit-gobject-1">libpolkit-gobject-1.so</primary>
328 </indexterm>
329 </listitem>
330 </varlistentry>
331
332 </variablelist>
333
334 </sect2>
335
336</sect1>
Note: See TracBrowser for help on using the repository browser.