New authorization required for mundane activities

silver.bullet at zoho.com silver.bullet at zoho.com
Mon Sep 28 02:22:57 UTC 2015


You at least should provide some information, such as

# lsb_release -dr
# tail --lines=30 /var/log/apt/history.log

On Sun, 27 Sep 2015 18:02:29 -0700, MR ZenWiz wrote:
>This appears to come from org.freedesktop.udisks2.filesystem-mount,
>except that that is (obviously) not a valid URL, nor is it just
>backwards..

This belongs to a polkit rule.

[root at moonstudio ~]# dpkg -L udisks2 | grep polkit
/usr/share/polkit-1
/usr/share/polkit-1/actions
/usr/share/polkit-1/actions/org.freedesktop.udisks2.policy

[root at moonstudio ~]# grep "org.freedesktop.udisks2.filesystem-mount-system" -A70 /usr/share/polkit-1/actions/org.freedesktop.udisks2.policy | grep -v description | grep -v message
  <action id="org.freedesktop.udisks2.filesystem-mount-system">
    <defaults>
      <allow_any>auth_admin</allow_any>
      <allow_inactive>auth_admin</allow_inactive>
      <allow_active>auth_admin_keep</allow_active>
    </defaults>
  </action>

"Each of the allow_any, allow_inactive and allow_active elements can
contain the following values:

no
	

Not authorized.

yes
	

Authorized.

auth_self
	

Authentication by the owner of the session that the client originates
from is required. Note that this is not restrictive enough for most uses o
 multi-user systems; auth_admin* is generally recommended.

auth_admin
	

Authentication by an administrative user is required.

auth_self_keep
	

Like auth_self but the authorization is kept for a brief period (e.g. five
minutes). The warning about auth_self above applies likewise.

auth_admin_keep
	

Like auth_admin but the authorization is kept for a brief period
(e.g. five minutes)."
- http://www.freedesktop.org/software/polkit/docs/latest/polkit.8.html

Other distros seem to use another location and another language.
http://www.dynacont.net/documentation/linux/udisks2_polkit_Allow_unauthenticated_mounting/

For Arch Linux I e.g. want that the password is required for shutdowns:

[root at archlinux rocketmouse]# cat /etc/polkit-1/rules.d/10-admin-shutdown-reboot.rules 
polkit.addRule(function(action, subject) {
    if (action.id == "org.freedesktop.login1.power-off" ||
        action.id == "org.freedesktop.login1.power-off-ignore-inhibit" ||
        action.id == "org.freedesktop.login1.power-off-multiple-sessions" ||
        action.id == "org.freedesktop.login1.reboot" ||
        action.id == "org.freedesktop.login1.reboot-ignore-inhibit" ||
        action.id == "org.freedesktop.login1.reboot-multiple-sessions"
    ) {
        return polkit.Result.AUTH_SELF_KEEP;
    }
});







More information about the ubuntu-users mailing list