Re: pkexec doesn't bring up a graphical password prompt

On October 23, 2025 2:08:16 PM PDT, "Cliff mcDiarmid" <[email protected]> wrote:
>Hi
>
>I'm not big on pexec, pam and polkit so I need some advice here please.
>
>I have a program(Tuxedo Control Centre)that requires the root password to save
>any settings.   This not achieved with ssh-askpass as with gparted but, (I
>think) with pexec and pam through polkit.
>
>The program works fine on the distro that I used for LFS.   When settings are
>saved the following appears in the journal:
>
>Oct 20 21:33:22 tuxedo-14 pkexec[7933]: pam_unix(polkit-1:session): session
>opened for user root(uid=0) by cliffhanger(uid=1000)
>Oct 20 21:33:22 tuxedo-14 pkexec[7933]: cliffhanger: Executing command
>[USER=root] [TTY=unknown] [CWD=/home/cliffhanger] [COMMAND=/opt/tuxedo-
>control-center/resources/dist/tuxedo-control-center/data/service/tccd --
>new_profiles /tmp/tmptccprofiles --new_settings /tmp/tmptccsettings]
>
>I have compared the .policy files, .rules files etc from the distro and LFS
>and can't see any thing different that would influence the error I get under
>LFS when saving, which is:
>
>Oct 23 16:42:47 cliffhanger pkexec[8626]: pam_warn(polkit-1:session):
>function=[pam_sm_open_session] flags=0 service=[polkit-1] terminal=[<unknown>]
>user=[root] ruser=[<unknown>] rhost=[<unknown>]
>
>Both the distro and LFS do have two .policy files under  /usr/share/polkit-1/
>actions
>
>com.tuxedocomputers.tccd.policy - I thought this was responsible
>com.tuxedocomputers.tomte.policy
>
>But both are identical under both OS.
>
>Can someone see what might be wrong here?  It seems it might be a pam issue
>with authentication?
>
>Cliff

For polkit to bring up a graphical prompt it needs a graphical connector to be started with the desktop. On LFS we have polkit-qt and polkit-gnome. Make sure that those are installed and if you don't use KDE or Gnome add this to your desktops auto start (for gnome it is similar for qt iirc)



 /usr/libexec/polkit-gnome-authentication-agent-1

You can try running this in your terminal before adding it to auto start and make sure that the gui pops up for apps that need escalation.

Rahul

-- 
http://lists.linuxfromscratch.org/sympa/info/blfs-support
Unsubscribe: See the above information page