[About] Package: policykit-desktop-privileges

[samwhelp]

========================================================

I found that "Package: policykit-desktop-privileges" has some additional settings for permissions.

Although I haven't explored these settings in depth,

but I found a more obvious difference.

After installing "Package: policykit-desktop-privileges",

in the file manager, to view other partitions, you don't need to enter an additional password before mounting and viewing.

========================================================

我發現到「Package: policykit-desktop-privileges」對於權限，有做一些額外的設定。

雖然我還沒有深究這些設定，

但是我發現到比較明顯的差異，

安裝完「Package: policykit-desktop-privileges」後，

在檔案管理器，要觀看其他的分割區，就不需要先額外輸入密碼，才能掛載觀看。

========================================================

policykit-desktop-privileges

run to install Package: policykit-desktop-privileges

sudo apt install policykit-desktop-privileges

run to show filelist of Package: policykit-desktop-privileges

dpkg -L policykit-desktop-privileges

show

/.
/usr
/usr/share
/usr/share/doc
/usr/share/doc/policykit-desktop-privileges
/usr/share/doc/policykit-desktop-privileges/changelog.gz
/usr/share/doc/policykit-desktop-privileges/copyright
/usr/share/polkit-1
/usr/share/polkit-1/rules.d
/usr/share/polkit-1/rules.d/com.ubuntu.desktop.rules
/var
/var/lib
/var/lib/polkit-1
/var/lib/polkit-1/localauthority
/var/lib/polkit-1/localauthority/10-vendor.d
/var/lib/polkit-1/localauthority/10-vendor.d/com.ubuntu.desktop.pkla

/usr/share/polkit-1/rules.d/com.ubuntu.desktop.rules

run

cat /usr/share/polkit-1/rules.d/com.ubuntu.desktop.rules

show

// Allow admin users to change error reporting settings
polkit.addRule(function(action, subject) {
    if (action.id == "com.ubuntu.whoopsiepreferences.change" &&
        subject.active == true && subject.local == true &&
        subject.isInGroup("sudo")) {
            return polkit.Result.YES;
    }
});

// Mounting, checking, etc. of internal drives
polkit.addRule(function(action, subject) {
    if ((action.id == "org.freedesktop.udisks2.filesystem-mount-system" ||
         action.id == "org.freedesktop.udisks2.encrypted-unlock-system" ||
         action.id == "org.freedesktop.udisks2.filesystem-fstab") &&
        subject.active == true && subject.local == true &&
        subject.isInGroup("sudo")) {
            return polkit.Result.YES;
    }
});

// Change CPU Frequency scaling
polkit.addRule(function(action, subject) {
    if ((action.id == "org.gnome.cpufreqselector" ||
         action.id == "org.mate.cpufreqselector" ) &&
        subject.active == true && subject.local == true &&
        subject.isInGroup("sudo")) {
            return polkit.Result.YES;
    }
});

// Setting the clock
polkit.addRule(function(action, subject) {
    if ((action.id == "org.gnome.controlcenter.datetime.configure" ||
         action.id == "org.kde.kcontrol.kcmclock.save" ||
         action.id == "org.freedesktop.timedate1.set-time" ||
         action.id == "org.freedesktop.timedate1.set-timezone" ||
         action.id == "org.freedesktop.timedate1.set-local-rtc" ||
         action.id == "org.freedesktop.timedate1.set-ntp" ||
         action.id == "com.canonical.controlcenter.datetime.configure" ||
         action.id == "org.mate.settingsdaemon.datetimemechanism.settime") &&
        subject.active == true && subject.local == true &&
        subject.isInGroup("sudo")) {
            return polkit.Result.YES;
    }
});

// Update already installed software
polkit.addRule(function(action, subject) {
    if (action.id == "org.debian.apt.upgrade-packages" &&
        subject.active == true && subject.local == true &&
        subject.isInGroup("sudo")) {
            return polkit.Result.YES;
    }
});

// Printer administration
polkit.addRule(function(action, subject) {
    if (action.id.indexOf("org.opensuse.cupspkhelper.mechanism.") == 0 &&
        subject.active == true && subject.local == true &&
        (subject.isInGroup("sudo") || subject.isInGroup("lpadmin"))) {
            return polkit.Result.YES;
    }
});

// Disable hibernate by default in Ubuntu
polkit.addRule(function(action, subject) {
    if (action.id == "org.freedesktop.upower.hibernate" ||
         action.id == "org.freedesktop.login1.hibernate" ||
         action.id == "org.freedesktop.login1.handle-hibernate-key" ||
         action.id == "org.freedesktop.login1.hibernate-multiple-sessions") {
            return polkit.Result.NO;
    }
});

// Allow admins to set the hostname,locale,keyboard,date/time without prompting
polkit.addRule(function(action, subject) {
    if ((action.id == "org.freedesktop.locale1.set-locale" ||
         action.id == "org.freedesktop.locale1.set-keyboard" ||
         action.id == "org.freedesktop.hostname1.set-static-hostname" ||
         action.id == "org.freedesktop.hostname1.set-hostname") &&
        subject.active == true && subject.local == true &&
        subject.isInGroup("sudo")) {
            return polkit.Result.YES;
    }
});

/var/lib/polkit-1/localauthority/10-vendor.d/com.ubuntu.desktop.pkla

run

cat /var/lib/polkit-1/localauthority/10-vendor.d/com.ubuntu.desktop.pkla

show

[Mounting, checking, etc. of internal drives]
Identity=unix-group:admin;unix-group:sudo
Action=org.freedesktop.udisks2.filesystem-mount-system;org.freedesktop.udisks2.encrypted-unlock-system;org.freedesktop.udisks2.filesystem-fstab;
ResultActive=yes

[Change CPU Frequency scaling]
Identity=unix-group:admin;unix-group:sudo
Action=org.gnome.cpufreqselector;org.mate.cpufreqselector
ResultActive=yes

[Setting the clock]
Identity=unix-group:admin;unix-group:sudo
Action=org.gnome.clockapplet.mechanism.*;org.gnome.controlcenter.datetime.configure;org.kde.kcontrol.kcmclock.save;org.freedesktop.timedate1.set-time;org.freedesktop.timedate1.set-timezone;org.freedesktop.timedate1.set-local-rtc;org.freedesktop.timedate1.set-ntp;com.canonical.controlcenter.datetime.configure;org.mate.settingsdaemon.datetimemechanism.settime
ResultActive=yes

[Update already installed software]
Identity=unix-group:admin;unix-group:sudo
Action=org.debian.apt.upgrade-packages
ResultActive=yes

[Printer administration]
Identity=unix-group:lpadmin;unix-group:admin;unix-group:sudo
Action=org.opensuse.cupspkhelper.mechanism.*
ResultActive=yes

[Disable hibernate by default in upower]
Identity=unix-user:*
Action=org.freedesktop.upower.hibernate
ResultActive=no

[Disable hibernate by default in logind]
Identity=unix-user:*
Action=org.freedesktop.login1.hibernate;org.freedesktop.login1.handle-hibernate-key;org.freedesktop.login1;org.freedesktop.login1.hibernate-multiple-sessions;org.freedesktop.login1.hibernate-ignore-inhibit
ResultActive=no

[Modify error reporting settings]
Identity=unix-group:admin;unix-group:sudo
Action=com.ubuntu.whoopsiepreferences.change
ResultActive=yes

[Allow admins to set the hostname,locale,keyboard,date/time without prompting]
Identity=unix-group:admin;unix-group:sudo
Action=org.freedesktop.locale1.set-locale;org.freedesktop.locale1.set-keyboard;org.freedesktop.hostname1.set-static-hostname;org.freedesktop.hostname1.set-hostname
ResultActive=yes

rdepends

run

apt-cache rdepends policykit-desktop-privileges

show

policykit-desktop-privileges
Reverse Depends:
  ubuntu-desktop
  xubuntu-desktop-minimal
  xubuntu-desktop
  vanilla-gnome-desktop
  ubuntustudio-desktop-core
  ubuntustudio-desktop
  ubuntukylin-desktop-minimal
  ubuntukylin-desktop
  ubuntucinnamon-desktop-minimal
  ubuntu-unity-desktop
  ubuntu-mate-desktop
  ubuntu-mate-core
  ubuntu-budgie-desktop-minimal
  ubuntu-budgie-desktop
  lubuntu-desktop-minimal
  lubuntu-desktop
  lubuntu-default-settings
  kubuntu-desktop
  edubuntu-desktop-minimal
  ubuntu-desktop-minimal

[Anduin2017]

Ubuntu preinstalled this right?

[Domanffe]

It annoys me that I have to enter a password, even though I'm not required to do so on Windows.

[Anduin2017]

I added this to default packages list.

Please see this in:

1.1.6
1.1.5
1.3.3