![]() |
![]() |
![]() |
PolicyKit Library Reference Manual | ![]() |
---|
polkit-authpolkit-auth — Manage authorizations |
polkit-auth
[--obtain
] [action
--show-obtainable
] [[
] [--user
] --explicituser
[
] [--user
] --explicit-detailuser
[
[--user
] --grant user
action
--constraint
]*] [constraint
[
[--user
] --block user
action
--constraint
]*] [constraint
[
] [--user
] --revoke user
action
--version
] [--help
]
polkit-auth is used to inspect, obtain, grant and revoke PolicyKit authorizations. If invoked without any options, the authorizations of the calling process will be printed.
|
Attempt to obtain an authorization through authentication
for the given action. This is only useful for implicit
authorizations requiring authentication; e.g. when an
appropriate stanza in the defaults section of the .policy
file for the action specifies
If an Authentication Agent (such as the one from PolicyKit-gnome) is available in the session, it will used for authentication unless the environment variable POLKIT_AUTH_FORCE_TEXT is set. If the environment variable POLKIT_AUTH_GRANT_TO_PID is set, the authorization will be granted to that process id instead of the invoking process (e.g. the shell from which polkit-auth is launched). |
|
Prints all actions that can be obtained via authentication and for which an authorization does not exist. |
|
Show explicit authorizations. Duplicates are not
printed. If used with the |
|
Show detailed information about explicit
authorizations. In contrast to
the |
|
Grant an authorization for an action. This is different
than |
|
Grant an negative authorization for an action. Negative
authorizations are normally used to block users that would
normally be authorized due to implicit
authorizations. Optionally, one or more constraints on the
granted negative authorization can be specified; allowed
values are: |
|
Revoke all authorizations for an action. If the user is
not specified the calling user is used. The
authorization |
|
Show version and exit. |
|
Show this information. |
PolicyKit ships with a collection of shell functions such that
completion on users and actions works when using the
bash(1)
shell. For completion to properly work for polkit-auth,
arguments should be entered in the order specified in this
manual page; for example. --user
should be
specified before --revoke
to complete only on
the authorizations the given user has. Note that if the calling
user lacks the org.freedesktop.policykit.read
authorization, the completion function will fall back to
completing on all registered actions.
Please send bug reports to either the distribution or the hal mailing list, see http://lists.freedesktop.org/mailman/listinfo/hal. to subscribe.