Remember authorization / disable password for some actions in PolicyKit

[LoonyPhoenix]

Hey, everybody, I need some help tweaking my security options. I tried man pages of PolicyKit and Google, but couldn't find definitive answers, so here I am

Can I make some actions available automatically, without the password, with PolicyKit? For example, I don't want to have to enter my password every time I mount a partition. I understand I can configure permanent mounts with fstab, but I'd like to try it this way first Also, I would like to give Software Center permission to install and uninstall software without password authorization. And some other things. I understand it's a security risk, but hey, I don't have any sensitive data, and I'm not paranoid (so sue me). It's my call, isn't it?

PolicyKit is supposed to be the new and flexible system for organizing permissions, so I want it to do what I want it to do. But I can't figure out how

PS: I'm using Karmic

[batsali]

Same here. In jaunty there was a checkbox to remember authorisation for certain actions, in karmic a can't seem to find how to do that. Frankly, it's becoming very annoying.

[cariboo]

I have had the remember password option when automounting a drive or partition in Karmic since Alpha2. I just did a fresh install yesterday, and the option was still there.

[LoonyPhoenix]

I have had the remember password option when automounting a drive or partition in Karmic since Alpha2. I just did a fresh install yesterday, and the option was still there.

Well, I don't see it there.

[pjomega]

The new policykit-1 which supercedes the old policykit doesn't seem to have a gui for adjusting authorizations. The policies are stored as xml files in /usr/share/polkit-1/actions.

1) Note the service attempting the action and find the appropriate policy in the actions directory. In your case it's org.freedesktop.devicekit.disks.policy.

2) Edit the file in your favorite editor and find the right action (e.g., org.freedesktop.devicekit.disks.filesystem-mount-system-internal).

3) The defaults key controls the access. Check the manpage for polkit for all the details, but allow_any controls every client, allow_inactive controls clients outside of the currently active session and allow_active controls access in the active session. You care about the allow_active key

4) Selecting a key value of "no" denies access, "yes" implicitly permits access, "auth_user" requires user authentication, "auth_admin" requires admin authentication. "auth_user_keep" and "auth_admin_keep" function similarly but retain authentication for a few minutes afterward. Changing the allow_active key's value to "yes" should stop the authentication demands.

5) Save the file and it should take effect immediately.


Cheers

[pocono]

Thank you pjomega! Works great.

[matty83]

ok did every thing you said but problem when i try to save the edited org.freedesktop.devicekit.disks.policy.xml file it says cannot change you do not have permission root file ? so if i can't save the changes in make how am i supposed to change the file?

[Boibondas]

Ok LoonyPhoenix now it's clear.

Thanks

[Mr.Kappa]

You saved me pjomega! That was becoming VERY annoying!
Long life to ubuntu!!

[Hopalong]

[QUOTE=pjomega;8219205] . . .

2) Edit the file in your favorite editor and find the right action (e.g., org.freedesktop.devicekit.disks.filesystem-mount-system-internal).

But do it as root, otherwise it won't allow a save. In a terminal, cd to the named /usr/share/polkit-1/actions and use:
sudo gedit org.freedesktop.devicekit.disks.policy
- then add your password (again!). Now do the edit and save it: using sudo will allow this.