PKEXEC(1) pkexec PKEXEC(1)
>>> (NAME)
pkexec - >>>>> >> >>>>> >> >>>>
>>>>>> >>>>
>>>>> >>>>> (SYNOPSIS)
pkexec [--version] [--disable-internal-agent] [--help]
pkexec [--keep-cwd] [--user username] PROGRAM [ARGUMENTS...]
>>>>>>> (DESCRIPTION)
>>>>> pkexec >> >> >>>>> >>>>
>>>>> >>>>>> >> PROGRAM >> >>
>>>> >>>>>> >>>> >>>> >>>.
>>> PROGRAM >>>> >>>> >>>>> >>
>>>>>>> >>>> >>>>> >>. >>>
username >>>>> >>>> >>>>>
>>>>>> >> >>>> >>>>> >>>>
>>>>>> >>>> root> >>>> >>>>>
>>.
>>>>> >>>>>>> (RETURN VALUE)
>> >>>> >>>>>
>>>>>>>>>>>> >>>>>
>>>>>>> >>>> >>>>>
>>>>>>> PROGRAM >>>>> >>>.
>>>>>> >>>>>> >>>>>>>>>>
>>>> >>>>>> >> >>>> >>>> >>
>>>> >>>>> >>>> >>> >>>>>
>> >>>>> >> >>>> pkexec >>
>>>>> >>>>>>> 127 >>>>
>>>>>>. >>> >> >>>> >>>
>>>> >>>> >>>>>> >>>>>
>>>> >>>> >>>>>> >>>>>
>>>> >>>>> pkexec >> >>>>>
>>>>>>> 126 >>>> >>>>> >>.
>>>> >>>>> >>>> (AUTHENTICATION AGENT)
>>>>> pkexec> >>>>> >> >>>>>>>
polkit >>>>>> >> >>>> >>>>>
>>>> >>>>>>> >>>> >>>>>>
>> >>>> (session) >>>>>>>>>>
>>>>>>> >>>>> >>>. >> >>>
>>>> >>> >>> >>>> >>>>>
>>>>> >> >>>>> >>>>>> pkexec
>>>> >>>>> >>>> >>>>>
>>>>> >>> >> >>> >>>>>>.
>>> >>>>> >> >>>>>>> >>
>>>>> >>>>>> --disable-internal-agent
>>>>>>> >>>.
>>>> >>>>>> (SECURITY NOTES)
>>>>> >> >>>>>> >> >>>>
>>>>>> >>>>> >> >>>>>>
>>>>> (privileged) >>>. >>>>>>
>>>>>>>> >>>> >> >>>> >>>>
>> >>>>> >>>>> >>> (>>>
">>>>>> > >>>>>> (ACTION AND AUTHORIZATIONS)"
>> >>>>>>) >>>>>>> >>>>>
>>>> >>>> >>>>> >>>. >>>>>
>> >>>> >>>> >>>>>> >>>>>
>>>> >> >> >>>>> >>>> >>>>
>>>>>>> >>>> >>>> >>>>>>
>>>> >>>> >> >>>>> >>>>>>
>> >>>>> >> >>>> >> >>>>>
>>> >>>> >>>>.
>>>>> >> PROGRAM >> >> >>>>
>>>>> >>> >> >>>>> >>>>>>>
>> >>>>> >> >> >>>> LD_LIBRARY_PATH
>> >>>>>>>>>> >>>>>> >>
>>> >> >>>> >>>>>>
>>>>>>>>>> > >>> >>>>>
>>>>>>. >>>>> >> >>>> >>>>>
>>>>> PKEXEC_UID >>> >>>>>>
>>>>>> (UID) >>>>>>> >> pkexec >>
>>>>>>>>> >>> >>>>>
>>>>>>. >> >>>>>> pkexec >>>>>>
>>>>>>> >>>>>> >>>>>
>>>>>>>>>> X11 >> >> >>>>
>>>>>> >>>> >>>>>> >>>>
>>> >> >>>>>>>> >>>>> $DISPLAY >
$XAUTHORITY >>>>> >>>>>>>>. >>
>>>>> >> >>>>>>>>>>>
org.freedesktop.policykit.exec.allow_gui >>> >> >>>
>> >>>>>> >>>>>>>
>>>>>>>> >>> >>>>> >>> >>
>>>>> >>> >>>>>> >>> >> >>>
>>>> >>>>>>> >> >>> >>>
>>>>> >>>>>>> > >>> >>>>
>>>> >>>>>>>>>> >>>>> >
>>>>>> (legacy) >> >>> >>>.
>>>>> pkexec >>>>>>> PROGRAM >> >>
>>>>>>>>> >>>>> username >>>>
>>>>> >>>> >>> >>>>> >>
>>>>>> --keep-cwd >>>> >>>>> >>>
>>>>> >>>>>>> >>>.
>>>> >>>>> >>>>> >> pkexec >>>
>>>>>>>>>>>>> >>> ARGUMENTS
>>>>>>>>> >> PROGRAM >>>>>
>>>>>>>. >> >>>> >>>> (>> >>
>> >>>>> >>>> >>>> >>>>> >>
>> >>> >>>>>>> >> pkexec >>>>>>
>>>)> >>> >>> >>>>> >> >>>>
>>>>>>>> >>>> >>> >>>>>
>>>> >>>>> >>>>> >>>>>>>>
>>>>>>>> pkexec bash >> >>>>
>>>>>> >> root >>>> >>>.
>> >>> >>>> >>> >>>>
>>>>>>> >>> >> >>>>>
>>>>>> >>>> >> >> >> >>>
>>> (>> >>> >>>>> >>>>>>
>>>> >>>> >>>>)> >>>
>>>>>>>> >> >>>>> >>>>>>
>>>>. >>>>>>>>> >> >>>>> >>
>>>>>> >>>> >>>>>>>>>>>
>> >>>> >>>> >>>> >>>>>>>
>>>>> >>>>> >>>>> >>>>
>>>> >>>>> >>>>>> >>>> >>
>>>>>>>>> >>>>> >>>>>>
>>>> (>> >>>>> >>>>> >>>>>
>> >>>>>>> >>>>>>>>>>>>>>
suid >>>>).
>>>>>> > >>>>>> (ACTION AND AUTHORIZATIONS)
>>>>>> >>>>>>>> >> >>>
org.freedesktop.policykit.exec >>>>>>>
>>>>>>. >>>> >>>>>>> >>
>>>> >>>>> >>
>>>>>>>>>>>>
org.freedesktop.policykit.exec.path >>> >> >>> >>
>>>>>> >> >>>>> >> >>>>
>>>> >>>>>> >>> >>>>>>>
>>>>. >>>>> >> >>>>>
>>>>>>> >>>>>>> >>>>
>>>>> >>>>> >>>> >>>>> >
>>>>>> >>>>>>> >> >>> >>>>
>>>. >>> >>>>>>>>>>>
org.freedesktop.policykit.exec.argv1 >>>> >>>>>
>>>>> >>> >>>> >> >>>>>
>>>>>> >>>>> >> >> >>>>>>>
>>> >>>>>> >> >>>>> >>>
>>>>>>>>>>> >>>>>> >>>>>
>>>>.
>>>> >>>>> >>>>> >>
>>>>>>>> >>>>> >>>> >>>>
>>> >> >>>>>>> >>>>> >>>>
(>>> ">>>>>>> (VARIABLES)" >>
>>>>>>)> >>>> >>>>>> $(user) >>
>>>>> >>>>> user >>> >>>>>>>.
>>>>>> >> >>>>> >>>> (WRAPPER USAGE)
>>>> >>>>>>> >> >>>>>
>>>>>>>>>>>> >>>>> >>>
>>>>>> >>>>>> pkexec >>
>>>>>>>>>>>> >> >>>>>
>>>>>> >>>>>>> >> pkexec >> >>
>>>> she-bang[1] >> >>> >>>>
>>>>>>> >>>:
#!/usr/bin/pkexec /usr/bin/python
import os
import sys
print "Hello, I'm running as uid %d"%(os.getuid())
for n in range(len(sys.argv)):
print "arg[%d]=`%s'"%(n, sys.argv[n])
>>> >>> >>>>>>> >> /usr/bin/my-pk-test
>>> >>> >>>>> >>>>>>
>>>>>>>>>>>>>>> >>>:
[...]
/usr/bin/python
/usr/bin/my-pk-test
[...]
>>>>>>>>> >>>> >>>>>> >>>
>>>>> polkit >>>>>>> >>>>. >>>
>>>> >> >>>>>>>>>>> >>> >>
>>>>>>>> >>>>> >>>>> >>
>>> >>> >>>> >> >> >>>>>>>>
pkexec >>>> >>>>>>>>>>> /usr/bin/python
>>>>> >>>> >>>>> >>.
>>>>>>> (VARIABLES)
>>>>>>>> >>> >>>> pkexec >>>>>
>>>>>>>. >>>>>>> >> >>>>>
>> >>>>> >>>> >>>> >
>>>>>>>> >>>>>>>>>>> >>
>>>>>>> >>>>>> >>>>> >>>>
>>>>>>> >>>:
program
>>>> >>>> > >>>>
>>>>>>>>> >> >>>> >>>>
>>>. >>>>: "/bin/cat"
command_line
>> >>>>> >>>>>>>>>>> (>>
>>> >>>>> >>>> >>>>>>>>>
>>>>>> >>>>>>> >>>>>>
>>> >> >>> >>>>). >>>>: "cat
/srv/xyz/foobar"
user
>>> >>>>>> >>>>>> >>
>>>>>> >> >>>> >> >>>>
>>>>>>. >>>>: "davidz"
user.gecos
>>> >>>> >>>>>> >> >>>>>>
>> >>>> >> >>>> >>>>>>.
>>>>: "David Zeuthen"
user.display
>>>>>> >> >>>>>
>>>>>>>>>> >>>>>> >>
>>>> >>>>> >> >>>> >>>>>>
>>>>> >>>> >>>>> >>>.
>>>>>>> >>>>>> >> >>>
>>>>>> > >>> >>>> >>>>>
>>>>>>. >>>>: "David Zeuthen (davidz)"
>>>>>>>>> (AUTHORS)
>>>>>>>>> >>>> David Zeuthen
>> >>>>>>> >>>>> >>
>>> >>>>> >>>>> >>>>.
>>>>> >>>>>> (BUGS)
>>>>> >>>>> >>>>>> >> >>
>>>>> >>> >> >> >>>>> >>>>
polkit-devel >>>>> >>>>> >>>>>>:
https://github.com/polkit-org/polkit#bugs-and-development.
>>>>>> >>>>>> (SEE ALSO)
polkit(8), polkitd(8), pkaction(1), pkcheck(1), pkttyagent(1)
>>>> (NOTES)
1. >>>> she-bang
http://en.wikipedia.org/wiki/Shebang_(Unix)
polkit May 2009 PKEXEC(1)