Bug 1121020

Summary:	RFE: use polkit for systemd DBus API authorization
Product:	[Fedora] Fedora	Reporter:	Jan Safranek <jsafrane>
Component:	systemd	Assignee:	systemd-maint
Status:	CLOSED NEXTRELEASE	QA Contact:	Fedora Extras Quality Assurance <extras-qa>
Severity:	medium	Docs Contact:
Priority:	unspecified
Version:	21	CC:	johannbg, lnykryn, msekleta, s, stefw, systemd-maint, vpavlin, zbyszek
Target Milestone:	---
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:	systemd-219	Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2015-03-13 05:06:42 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	1094121, 1144010

Description Jan Safranek 2014-07-18 07:56:16 UTC

Cockpit and OpenLMI system management projects need systemd DBus API [1] to be authorized by polkit instead of plain DBus authorization.

1: http://www.freedesktop.org/wiki/Software/systemd/dbus/

See http://lists.freedesktop.org/archives/systemd-devel/2014-July/021262.html (and whole thread) for more detailed method list.

Comment 1 Stef Walter 2014-09-18 12:53:09 UTC

A patch has landed in systemd git master for polkit support, but it has not yet been released:

http://cgit.freedesktop.org/systemd/systemd/commit/?id=283868e1dcd8ea7475850d9c6e7d4722c473dd50

In addition it does not enable interactive agent based re-reauthorization. systemd upstream would like to create a DBus flag for that, and is being discussed here:

http://lists.freedesktop.org/archives/dbus/2014-September/thread.html

Comment 2 Lennart Poettering 2014-12-09 02:36:10 UTC

Fully implemented in git btw.

Comment 3 Zbigniew Jędrzejewski-Szmek 2015-03-13 05:06:42 UTC

This is part of systemd 219 in F22+.