Sorry, you need to enable JavaScript to visit this website.

Polkit actions installed by Update Tool break other calls to dnf, yum, or rpm with pkexec

2 posts / 0 new
David Ward's picture
David Ward

Apr 16, 2017 - 02:45pm

  • On Fedora 25 64-bit, the Intel Graphics Update Tool 2.0.4 installs a set of polkit actions in the following file: /usr/share/polkit-1/actions/org.01.linuxgraphics.policy

    Some actions in this file are written to match any invocation of the yumdnf, or rpm command, respectively. Before installing the Intel Graphics Update Tool, running the command pkexec dnf update at a terminal would work fine; but after installing it, this error is returned instead:

    Error executing command as another user: Not authorized
    This incident has been reported.

    If the polkit actions file installed by the Intel Graphics Update Tool is deleted, then the command above works again.

    The polkit actions in the installed file need to be specified very narrowly to apply only to the specific commands that are run by the Intel Graphics Update Tool. This may mean that the exact command line arguments need to be specified as part of the action, using syntax such as this:

    <annotate key="org.freedesktop.policykit.exec.path">/usr/bin/dnf</annotate>
    <annotate key="org.freedesktop.policykit.exec.argv1">-y</annotate>
    <annotate key="org.freedesktop.policykit.exec.argv2">remove</annotate>
    <annotate key="org.freedesktop.policykit.exec.argv3">intellinuxgraphics-repo</annotate>
    Apr 16, 2017 - 02:45pm
  • I see: Thanks for the info, I'll see about updating the polkit files in the next release.

    Apr 18, 2017 - 05:31am
  • Hm. In my testing here the argv annotations aren't having the desired effect (and wouldn't help if they did as one of the arguments is probably a package name or names we don't know in advance).

    So I'm not sure I'll be able to fix it for this release, which is due to go to the second QA round soon.
    I'll have to figure out how to fix this properly for the next release.

    Apr 18, 2017 - 12:21pm