小编Joh*_*ash的帖子

polkit:禁用除组轮以外的所​​有用户?

是否可以使用 1 个 polkit .pkla 文件执行以下操作?

  1. 禁止所有用户使用 polkit,但轮组中的用户除外。
  2. 使用 polkit 时,wheel 组中的用户需要提供 root 密码。

/etc/polkit-1/localauthority/50-local.d/99-wheel-only.pkla

[禁用除wheel组之外的所有用户]
身份=unix-group:wheel
行动=*
结果Any=???
结果无效=???
结果活动=???

以下文件有效,但您需要提供 /etc/group 中的所有用户:

[禁用除wheel组以外的所有用户:root和myuser]
身份=unix-user:daemon;unix-user:bin;unix-user:sys;unix-user:adm;unix-user:tty;unix-user:disk;unix-user:lp;unix-user:mail; unix-user:news;unix-user:uucp;unix-user:man;unix-user:proxy;unix-user:kmem;unix-user:dialout;unix-user:fax;unix-user:voice;unix-用户:cdrom;unix-user:floppy;unix-user:tape;unix-user:sudo;unix-user:audio;unix-user:dip;unix-user:www-data;unix-user:backup;unix-用户:操作员;unix-user:list;unix-user:irc;unix-user:src;unix-user:gnats;unix-user:shadow;unix-user:utmp;unix-user:video;unix-user: sasl;unix-user:plugdev;unix-user:staff;unix-user:games;unix-user:users;unix-user:nogroup;unix-user:libuuid;unix-user:crontab;unix-user:messagebus; unix-user:Debian-exim;unix-user:mlocate;unix-user:avahi;unix-user:netdev;unix-user:bluetooth;unix-user:lpadmin;unix-user:ssl-cert;unix-user:保险丝;unix-user:utempter;unix-user:Debian-gdm;unix-user:扫描仪;unix-user:saned;unix-user:i2c;unix-user:haldaemon;unix-user:powerdev
行动=*
结果任意=否
结果无效=否
结果活动=否

permissions policykit

5
推荐指数
1
解决办法
2810
查看次数

标签 统计

permissions ×1

policykit ×1