Daan De Meyer 3150c34270 run0: Never ask --empower sessions for polkit auth ...

A --empower session is effectively root without being UID 0, so it
doesn't make sense to enforce polkit authentication in those. Let's
add the empower group, add --empower sessions to that group and ship
a polkit rule to skip authentication for all users in the empower
group.

(As a side-effect this will also allow users to add themselves to this
group outside of 'run0 --empower' to mimick NOPASSWD from sudo)

2025-11-12 19:55:35 +01:00

32 KiB

Raw Blame History

View Raw