Apr 16, 2017 - 02:45pm
On Fedora 25 64-bit, the Intel Graphics Update Tool 2.0.4 installs a set of polkit actions in the following file: /usr/share/polkit-1/actions/org.01.linuxgraphics.policy
Some actions in this file are written to match any invocation of the yum, dnf, or rpm command, respectively. Before installing the Intel Graphics Update Tool, running the command pkexec dnf update at a terminal would work fine; but after installing it, this error is returned instead:
pkexec dnf update
Error executing command as another user: Not authorized
This incident has been reported.
If the polkit actions file installed by the Intel Graphics Update Tool is deleted, then the command above works again.
The polkit actions in the installed file need to be specified very narrowly to apply only to the specific commands that are run by the Intel Graphics Update Tool. This may mean that the exact command line arguments need to be specified as part of the action, using syntax such as this:
I see: Thanks for the info, I'll see about updating the polkit files in the next release.
Hm. In my testing here the argv annotations aren't having the desired effect (and wouldn't help if they did as one of the arguments is probably a package name or names we don't know in advance).
So I'm not sure I'll be able to fix it for this release, which is due to go to the second QA round soon.
I'll have to figure out how to fix this properly for the next release.