Remember authorization / disable password for some actions in PolicyKit

[kmccormick]

pocono: Did you go in and redo your edits after updating devicekit-disks?

Files under /usr/share are not generally intended to be configuration files, so the new package would probably overwrite any changes you made there.

Here's hoping these kinds of things get fixed before they call it an LTS.

[Hopalong]

[QUOTE=pjomega;8219205] . . .

2) Edit the file in your favorite editor and find the right action (e.g., org.freedesktop.devicekit.disks.filesystem-mount-system-internal).

But do it as root, otherwise it won't allow a save. In a terminal, cd to the named /usr/share/polkit-1/actions and use:
sudo gedit org.freedesktop.devicekit.disks.policy
- then add your password (again!). Now do the edit and save it: using sudo will allow this.

[scoon1329]

The new policykit-1 which supercedes the old policykit doesn't seem to have a gui for adjusting authorizations. The policies are stored as xml files in /usr/share/polkit-1/actions.

1) Note the service attempting the action and find the appropriate policy in the actions directory. In your case it's org.freedesktop.devicekit.disks.policy.

2) Edit the file in your favorite editor and find the right action (e.g., org.freedesktop.devicekit.disks.filesystem-mount-system-internal).

3) The defaults key controls the access. Check the manpage for polkit for all the details, but allow_any controls every client, allow_inactive controls clients outside of the currently active session and allow_active controls access in the active session. You care about the allow_active key

4) Selecting a key value of "no" denies access, "yes" implicitly permits access, "auth_user" requires user authentication, "auth_admin" requires admin authentication. "auth_user_keep" and "auth_admin_keep" function similarly but retain authentication for a few minutes afterward. Changing the allow_active key's value to "yes" should stop the authentication demands.

5) Save the file and it should take effect immediately.


Cheers

Is there any decent tutorial online that explains about editing the policies in more detail? I've looked through the policykit documentation and it doesn't seem to refer to these files and how to edit them at all unless I'm just not understanding it.

Thanks in advance!

Joe.

[mc4man]

Here is some docu. though maybe a hair outdated
http://hal.freedesktop.org/docs/Poli...-action.1.html

While it's possible to edit the actions files (some contain many actions), one needs to be very careful it doing so.
Some combinations of edits will produce unexpected results and or shouldn't be changed. (plus updates can undo them

For the most common desired edit - not have to authenticate mounting of internal partitions for admin. user, the best way is shown here

http://ubuntuforums.org/showthread.p...50#post8542850

based on the fix in lucid where it was recognized auth. in this case was unnecessary
https://bugs.launchpad.net/ubuntu/+s...ks/+bug/465054

A couple of other edits that are safe to do

http://ubuntuforums.org/showthread.p...55#post8158855

[wesswei]

Wow! This is the biggest waste of time ever.

Who wants to manually edit xml files all day, let alone find the documentation on what text options controls what! Good grief!

If anyone knows about any frontend management tool to this end, you would save many admins some trouble.

I mean I love editing kexts and plists and xmls and confs as much as the next guy, buy the polkit-gnome-authentication gui was THE BEST!

Nothing in Lynx as of yet... This winblows.

[bala150985]

WOW man thanks a lot I use Mandrive and this is the file which we need to edit as root.

#gedit org.freedesktop.udisks.policy