Blame platform-overview/oc/tech-polkit.page
|
Packit |
1470ea |
|
|
Packit |
1470ea |
<page xmlns="http://projectmallard.org/1.0/" xmlns:its="http://www.w3.org/2005/11/its" type="topic" id="tech-polkit" xml:lang="oc">
|
|
Packit |
1470ea |
|
|
Packit |
1470ea |
<info>
|
|
Packit |
1470ea |
<link type="guide" xref="tech" group="polkit"/>
|
|
Packit |
1470ea |
|
|
Packit |
1470ea |
<credit type="author copyright">
|
|
Packit |
1470ea |
<name>Federico Mena Quintero</name>
|
|
Packit |
1470ea |
<email its:translate="no">federico@gnome.org</email>
|
|
Packit |
1470ea |
<years>2013</years>
|
|
Packit |
1470ea |
</credit>
|
|
Packit |
1470ea |
|
|
Packit |
1470ea |
<include xmlns="http://www.w3.org/2001/XInclude" href="cc-by-sa-3-0.xml"/>
|
|
Packit |
1470ea |
|
|
Packit |
1470ea |
<desc>Access control for system-level services provided through D-Bus</desc>
|
|
Packit |
1470ea |
</info>
|
|
Packit |
1470ea |
|
|
Packit |
1470ea |
<title>Polkit</title>
|
|
Packit |
1470ea |
|
|
Packit |
1470ea |
Polkit, or Policy Kit, handles the policies that let unprivileged processes
|
|
Packit |
1470ea |
talk to privileged ones via <link xref="tech-d-bus">D-Bus</link> APIs. For
|
|
Packit |
1470ea |
example, not all programs should be allowed to request that the machine be
|
|
Packit |
1470ea |
disconnected from the network via the
|
|
Packit |
1470ea |
<link xref="tech-network-manager">NetworkManager</link> service.
|
|
Packit |
1470ea |
|
|
Packit |
1470ea |
|
|
Packit |
1470ea |
Polkit lets the system administrator define different policies for
|
|
Packit |
1470ea |
different services. For example, only a user with physical access to the
|
|
Packit |
1470ea |
console may mount/unmount drives and volumes; users that are not at the
|
|
Packit |
1470ea |
console will need to type an administrator password. On a machine for home
|
|
Packit |
1470ea |
users, most policies will be rather liberal, as the users can be trusted to
|
|
Packit |
1470ea |
take care of the machine. On corporate settings, policies may be more
|
|
Packit |
1470ea |
restricted.
|
|
Packit |
1470ea |
|
|
Packit |
1470ea |
|
|
Packit |
1470ea |
|
|
Packit |
1470ea |
GNOME uses PolicyKit whenever applications need to request privileged
|
|
Packit |
1470ea |
operations.
|
|
Packit |
1470ea |
|
|
Packit |
1470ea |
|
|
Packit |
1470ea |
<list style="compact">
|
|
Packit |
1470ea |
<item><link href="http://www.freedesktop.org/wiki/Software/polkit">Polkit home page</link> </item>
|
|
Packit |
1470ea |
</list>
|
|
Packit |
1470ea |
|
|
Packit |
1470ea |
</page>
|