ArchWiki
wiki.archlinux.org › title › Polkit
polkit - ArchWiki
Polkit works by delimiting distinct actions, e.g. running GParted, and delimiting users by group or by name, e.g. members of the wheel group. It then defines how – if at all – those users are allowed those actions, e.g.
GitHub
github.com › polkit-org › polkit
GitHub - polkit-org/polkit: polkit (formerly PolicyKit) is a toolkit for defining and handling authorizations. It is used for allowing unprivileged processes to speak to privileged processes. · GitHub
polkit is a toolkit for defining and handling authorizations.
Starred by 222 users
Forked by 82 users
Languages C 93.4% | Meson 2.5% | Shell 2.5% | JavaScript 0.9% | Python 0.7% | Perl 0.0%
Who or what is "polkit"
Not even for my best friend. A little investigation found this is coming from polkit-mate authentication-agent. Have I been hacked or is this legitimate. And, in any event, can I get rid of it or un-install it? This is my first post on a forum like this. Thanks for your help. More on ubuntu-mate.community
0
0
March 20, 2022Why polkit is needed?
Not everything can be managed by groups. For example when the user chris should be allowed to shutdown the pc when he is sitting in front of the pc, but not be allowed when he is using ssh.
More on reddit.com 99
28
July 23, 2017Polkit and its varieties
I run linux mint, but most of what I learnt about polkits came from the arch wiki. I would expect no difference across distros. Want to see what polkits are installed have a look in /usr/share/polkit-1/actions. One of the first things I do on a fresh install is amend the polkit for gparted so it runs without asking for a password. You can amend or add new actions, I believe you can also do it for the local user, but my knowledge does not extend that far, I just add/amend the contents of /usr/share/polkit-1/actions. More on reddit.com
4
4
October 16, 2022Which polkit?
There is only one polkit. If you're talking about polkit authentication agents, then please say so. More on reddit.com
10
7
May 1, 2024Videos
01:49
polkit: Authenticating Applications - YouTube
09:04
PolKit Is Broken On Window Managers: How To Fix It!! - YouTube
09:20
Using PolKit to rescue sudoers failure - YouTube
35:21
Enterprise Linux Security Episode 17 - Polkit & LUKS CVE's - YouTube
24:25
Polkit Exploit (CVE-2021-3560) in CTFs: Quick Pen Testing Guide!
Wikipedia
en.wikipedia.org › wiki › Polkit
Polkit - Wikipedia
2 weeks ago - Polkit (formerly PolicyKit) is a component for controlling system-wide privileges in Unix-like operating systems. It provides an organized way for non-privileged processes to communicate with privileged ones, allowing a level of control of centralized system policy.
freedesktop.org
freedesktop.org › software › polkit › docs › latest › polkit.8.html
polkit: polkit Reference Manual
The system architecture of polkit is comprised of the Authority (implemented as a service on the system message bus) and an Authentication Agent per user session (provided and started by the user's graphical environment). Actions are defined by applications.
Ubuntu MATE Community
ubuntu-mate.community › support & help requests
Who or what is "polkit" - Support & Help Requests - Ubuntu MATE Community
March 20, 2022 - For the last week or so, when I start my computer a mysterious request appears that a /bin/sh process requests root privileges and would I please authenticate. Not even for my best friend. A little investigation found this is coming from polkit-mate authentication-agent.
Debian
wiki.debian.org › PolicyKit
PolicyKit - Debian Wiki
While PolicyKit has been replaced by polkit (which rewrote system component, breaking backwards compatibility) in many distributions, Debian continues to use PolicyKit from Debian 7 wheezy through Debian 10 buster.
Reddit
reddit.com › r/linux › why polkit is needed?
r/linux on Reddit: Why polkit is needed?
July 23, 2017 -
Simple question, what is the problem that polkit tried to solve? Why dbus method calls should go in a series of polkit policy checks before performing the required action? Why not just that upower checks the caller groups, if he/she belongs to "power" then it is okay, otherwise permission denied? Same goes for mount/umount/... on "plugdev" group for example.
Why retaining the Unix groups simple concept is not enough in the case dbus daemons/polkit world? What are the advantages of implementing something like polkit?
BTW: I do develop system bus daemons with desktop clients, and I do see polkit as an abuse.
Top answer 1 of 8
47
Not everything can be managed by groups. For example when the user chris should be allowed to shutdown the pc when he is sitting in front of the pc, but not be allowed when he is using ssh.
2 of 8
20
Because just having groups isn't always enough. For example, you may want to allow the user to mount external drives, but not internal ones, etc. You can create 1000 groups, one for each very specific action, and then allow/deny based on that, but that just becomes maintenance hell.
SUSE
documentation.suse.com › sles › 15-SP6 › html › SLES-all › cha-security-polkit.html
The Polkit authentication framework | Security and Hardening Guide | SLES 15 SP6
March 30, 2026 - Polkit is an authentication framework used in graphical Linux desktop environments, for fine-grained management of access rights on the system. Traditionally, there is a strong separation of privileges on Linux between the root user as the fully ...
Linux From Scratch
linuxfromscratch.org › blfs › view › svn › postlfs › polkit.html
Polkit-127
Polkit is a toolkit for defining and handling authorizations.
Linux Man Pages
linux.die.net › man › 8 › polkit
polkit(8): Authorization Framework - Linux man page
A mechanism need to declare a set of "ACTIONS" in order to use PolicyKit. Actions correspond to operations that clients can request the mechanism to carry out and are defined in XML files that the mechanism installs into the /usr/share/polkit-1/actions directory.
NixOS Wiki
wiki.nixos.org › wiki › Polkit
Polkit - Official NixOS Wiki
February 19, 2026 - Polkit is used for controlling system-wide privileges. It provides an organized way for non-privileged processes to communicate with privileged ones. In contrast to sudo, it does not grant root permission to an entire process, but rather allows a finer level of control of centralized system policy.
Red Hat
docs.redhat.com › en › documentation › red_hat_enterprise_linux › 7 › html › desktop_migration_and_administration_guide › policykit
Chapter 4. PolicyKit | Desktop Migration and Administration Guide | Red Hat Enterprise Linux | 7 | Red Hat Documentation
The PolicyKit utility is a framework that provides an authorization API used by privileged programs (also called mechanisms) offering services to unprivileged programs (also called subjects). The following are details on the changes PolicyKit, or its system name polkit, has undergone.
Gentoo Wiki
wiki.gentoo.org › wiki › Polkit
polkit - Gentoo wiki
Privileged programs (in the following called daemons) with polkit support offload the decision as to whether a program is allowed to use some function of the daemon. The daemon keeps an incoming request on hold, asks polkit if the program is authorized, and then allows or denies the request ...
Red Hat
docs.redhat.com › en › documentation › red_hat_enterprise_linux › 10 › html › security_hardening › controlling-access-to-smart-cards-by-using-polkit
Chapter 4. Controlling access to smart cards by using polkit | Security hardening | Red Hat Enterprise Linux | 10 | Red Hat Documentation
Because access-control mechanisms built into smart cards, such as PINs, PIN pads, and biometrics, do not cover all possible threats, RHEL uses the polkit framework for more robust access control. The polkit authorization manager can grant access to privileged operations.
Reddit
reddit.com › r/linux4noobs › polkit and its varieties
r/linux4noobs on Reddit: Polkit and its varieties
October 16, 2022 -
Hello guys, as usual, after the fresh installation of arch I noticed, that I can't reboot or shutdown without sudo. All of this can be fixed with polkit. But there are so many versions of it: gnome, mate, xfce, just a standard package named "polkit" etc. What's the difference between all of them? Should I tweak them, or all of them are already preconfigured?
Top answer 1 of 4
2
I run linux mint, but most of what I learnt about polkits came from the arch wiki. I would expect no difference across distros. Want to see what polkits are installed have a look in /usr/share/polkit-1/actions. One of the first things I do on a fresh install is amend the polkit for gparted so it runs without asking for a password. You can amend or add new actions, I believe you can also do it for the local user, but my knowledge does not extend that far, I just add/amend the contents of /usr/share/polkit-1/actions.
2 of 4
1
There's a resources page in our wiki you might find useful! Try this search for more information on this topic. ✻ Smokey says: take regular backups, try stuff in a VM, and understand every command before you press Enter! :) Comments, questions or suggestions regarding this autoresponse? Please send them here . I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.
Ubuntu
manpages.ubuntu.com › focal › man(8)
Ubuntu Manpage: polkit - Authorization Framework
Applications that do not run under a desktop environment (for example, if launched from a ssh(1) login) may not have have an authentication agent associated with them. Such applications may use the PolkitAgentTextListener type or the pkttyagent(1) helper so the user can authenticate using a ...
Lynx
lynx.com › blog › linux-polkit-implementing-user-space-authorization-on-embedded-platforms
Linux Polkit: Implementing user space authorization on embedded platforms
May 26, 2025 - Deterministic infrastructure for integrating AI and advanced edge workloads into mission-critical systems · Discover a modular open system platform for mission-critical applications
Arch Linux Man Pages
man.archlinux.org › man › polkit.8.en
polkit(8) — Arch manual pages
The system architecture of polkit is comprised of the Authority (implemented as a service on the system message bus) and an Authentication Agent per user session (provided and started by the user's graphical environment). Actions are defined by applications.
Xfce Forums
forum.xfce.org › viewtopic.php
Polkit Authentication Agent / General discussion / Xfce Forums
April 25, 2022 - There is the freedesktop polkit agent.
Ubuntu
launchpad.net › ubuntu › +source › policykit-1
policykit-1 package : Ubuntu
1-dev: polkit Authorization API - development files pkexec: run commands as another user with polkit authorization pkexec-dbgsym: debug symbols for pkexec policykit-1-doc: documentation for polkit polkitd: framework for managing administrative policies and privileges polkitd-dbgsym: debug symbols ...