glfs/postlfs/security/polkit.xml

259 lines
9.1 KiB
XML
Raw Normal View History

<?xml version="1.0" encoding="ISO-8859-1"?>
<!DOCTYPE sect1 PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN"
"http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
<!ENTITY % general-entities SYSTEM "../../general.ent">
%general-entities;
<!ENTITY polkit-download-http "http://hal.freedesktop.org/releases/polkit-&polkit-version;.tar.gz">
<!ENTITY polkit-download-ftp " ">
<!ENTITY polkit-md5sum "5abc9f858e7b614ef41161db36d53915">
<!ENTITY polkit-size "986 KB">
<!ENTITY polkit-buildsize "17 MB">
<!ENTITY polkit-time "0.3 SBU">
]>
<sect1 id="polkit" xreflabel="polkit-&polkit-version;">
<?dbhtml filename="polkit.html"?>
<sect1info>
<othername>$LastChangedBy$</othername>
<date>$Date$</date>
</sect1info>
<title>polkit-&polkit-version;</title>
<indexterm zone="polkit">
<primary sortas="a-polkit">polkit</primary>
</indexterm>
<sect2 role="package">
<title>Introduction to polkit</title>
<para>The <application>polkit</application> package is an
application-level toolkit for defining and handling the policy that allows
unprivileged processes to speak to privileged processes.</para>
&lfs65_checked;
<bridgehead renderas="sect3">Package Information</bridgehead>
<itemizedlist spacing="compact">
<listitem>
<para>Download (HTTP): <ulink url="&polkit-download-http;"/></para>
</listitem>
<listitem>
<para>Download (FTP): <ulink url="&polkit-download-ftp;"/></para>
</listitem>
<listitem>
<para>Download MD5 sum: &polkit-md5sum;</para>
</listitem>
<listitem>
<para>Download size: &polkit-size;</para>
</listitem>
<listitem>
<para>Estimated disk space required: &polkit-buildsize;</para>
</listitem>
<listitem>
<para>Estimated build time: &polkit-time;</para>
</listitem>
</itemizedlist>
<bridgehead renderas="sect3">polkit Dependencies</bridgehead>
<bridgehead renderas="sect4">Required</bridgehead>
<para role="required"><xref linkend="eggdbus"/>,
<xref linkend="intltool"/>,
<xref linkend="linux-pam"/>,
<xref linkend="gobject-introspection"/>, and
<xref linkend="DocBook"/></para>
<bridgehead renderas="sect4">Optional</bridgehead>
<para role="optional"><xref linkend="expat"/> and
<xref linkend="gtk-doc"/></para>
<para condition="html" role="usernotes">User Notes:
<ulink url="&blfs-wiki;/polkit"/></para>
</sect2>
<sect2 role="installation">
<title>Installation of polkit</title>
<para>It is a requirement to have a dedicated user and group for
<application>polkit</application> to function correctly. Issue the
following commands as the <systemitem class="username">root</systemitem>
user:</para>
<screen role="root"><userinput>groupadd -fg 27 polkituser &amp;&amp;
useradd -c "Policy Kit Daemon User" -d /dev/null -u 27 \
-g polkituser -s /bin/false polkituser || [ $? == 9 ]</userinput></screen>
<para>Install <application>polkit</application> by running the following
commands as an unprivileged user:</para>
<screen><userinput>./configure --prefix=/usr --sysconfdir=/etc \
--libexecdir=/usr/lib/polkit-1 --localstatedir=/var &amp;&amp;
make</userinput></screen>
<para>This package does not come with a test suite.</para>
<para>Now, as the <systemitem class="username">root</systemitem> user:</para>
<screen role="root"><userinput>make install</userinput></screen>
</sect2>
<sect2 role="commands">
<title>Command Explanations</title>
<xi:include xmlns:xi="http://www.w3.org/2003/XInclude"
href="../../xincludes/gtk-doc-rebuild.xml"/>
</sect2>
<sect2 role="content">
<title>Contents</title>
<segmentedlist>
<segtitle>Installed Programs</segtitle>
<segtitle>Installed Libraries</segtitle>
<segtitle>Installed Directories</segtitle>
<seglistitem>
<seg>pkaction, pkcheck, pk-example-frobnicate, pkexec,
polkit-agent-helper-1, and polkitd</seg>
<seg>libpolkit-agent-1.{so,a}, libpolkit-backend-1.{so,a},
libpolkit-gobject-1.{so,a}, libnullbackend.{so,a}, and
libpkexec-action-lookup.{so,a}</seg>
<seg>/etc/polkit-1/{localauthority.conf.d,nullbackend.conf.d},
/usr/{include/polkit-1/{polkit,polkitagent,polkitbackend},
lib/polkit-1/extensions,share/polkit-1/actions},
/var/lib/polkit-1/localauthority/{10-vendor.d,20-org.d,30-site.d,
50-local.d,90-mandatory.d}</seg>
</seglistitem>
</segmentedlist>
<variablelist>
<bridgehead renderas="sect3">Short Descriptions</bridgehead>
<?dbfo list-presentation="list"?>
<?dbhtml list-presentation="table"?>
<varlistentry id="pkaction">
<term><command>pkaction</command></term>
<listitem>
<para>is used to obtain information about registered PolicyKit actions.</para>
<indexterm zone="polkit pkaction">
<primary sortas="b-pkaction">pkaction</primary>
</indexterm>
</listitem>
</varlistentry>
<varlistentry id="pkcheck">
<term><command>pkcheck</command></term>
<listitem>
<para>is used to check whether a process is authorized for action.</para>
<indexterm zone="polkit pkcheck">
<primary sortas="b-pkcheck">pkcheck</primary>
</indexterm>
</listitem>
</varlistentry>
<!-- <varlistentry id="pk-example-frobnicate">
<term><command>pk-example-frobnicate</command></term>
<listitem>
<para>does this .....</para>
<indexterm zone="polkit pk-example-frobnicate">
<primary sortas="b-pk-example-frobnicate">pk-example-frobnicate</primary>
</indexterm>
</listitem>
</varlistentry>-->
<varlistentry id="pkexec">
<term><command>pkexec</command></term>
<listitem>
<para>allows an authorized user to execute a command as another user.</para>
<indexterm zone="polkit pkexec">
<primary sortas="b-pkexec">pkexec</primary>
</indexterm>
</listitem>
</varlistentry>
<!-- <varlistentry id="polkit-agent-helper-1">
<term><command>polkit-agent-helper-1</command></term>
<listitem>
<para>does this .....</para>
<indexterm zone="polkit polkit-agent-helper-1">
<primary sortas="b-polkit-agent-helper-1">polkit-agent-helper-1</primary>
</indexterm>
</listitem>
</varlistentry>-->
<varlistentry id="polkitd-0.94">
<term><command>polkitd</command></term>
<listitem>
<para>provides the org.freedesktop.PolicyKit1
<application>D-Bus</application> service on the system message bus.</para>
<indexterm zone="polkit polkitd-0.94">
<primary sortas="b-polkitd">polkitd</primary>
</indexterm>
</listitem>
</varlistentry>
<varlistentry id="libpolkit-agent-1">
<term><filename class='libraryfile'>libpolkit-agent-1.{so,a}</filename></term>
<listitem>
<para>contains the <application>polkit</application> authentication
agent API functions.</para>
<indexterm zone="polkit libpolkit-agent-1">
<primary sortas="c-libpolkit-agent-1">libpolkit-agent-1.{so,a}</primary>
</indexterm>
</listitem>
</varlistentry>
<varlistentry id="libpolkit-backend-1">
<term><filename class='libraryfile'>libpolkit-backend-1.{so,a}</filename></term>
<listitem>
<para>contains the <application>polkit</application> backend API
functions.</para>
<indexterm zone="polkit libpolkit-backend-1">
<primary sortas="c-libpolkit-backend-1">libpolkit-backend-1.{so,a}</primary>
</indexterm>
</listitem>
</varlistentry>
<varlistentry id="libpolkit-gobject-1">
<term><filename class='libraryfile'>libpolkit-gobject-1.{so,a}</filename></term>
<listitem>
<para>contains the <application>polkit</application> authorization API
functions.</para>
<indexterm zone="polkit libpolkit-gobject-1">
<primary sortas="c-libpolkit-gobject-1">libpolkit-gobject-1.{so,a}</primary>
</indexterm>
</listitem>
</varlistentry>
<varlistentry id="libnullbackend">
<term><filename class='libraryfile'>libnullbackend.{so,a}</filename></term>
<listitem>
<para>is an extension library.</para>
<indexterm zone="polkit libnullbackend">
<primary sortas="c-libnullbackend">libnullbackend.{so,a}</primary>
</indexterm>
</listitem>
</varlistentry>
<varlistentry id="libpkexec-action-lookup">
<term><filename class='libraryfile'>libpkexec-action-lookup.{so,a}</filename></term>
<listitem>
<para>is an extension library.</para>
<indexterm zone="polkit libpkexec-action-lookup">
<primary sortas="c-libpkexec-action-lookup">libpkexec-action-lookup.{so,a}</primary>
</indexterm>
</listitem>
</varlistentry>
</variablelist>
</sect2>
</sect1>