On Sat 09 Dec 2017 at 20:07:17 +0100, Dejan Jocic wrote: > On 09-12-17, Jonathan Dowland wrote: > > On Sat, 2017-12-09 at 10:00 +0000, Brian wrote: > > > Consistencey can be achieved by not installing policykit. The OP > > > appears to have chosen the wrong target.Consistencey can be achieved > by > > > not installing policykit. > > > > As Michael pointed out in [1], that's not the case; prior to polkit, > > there was no consistency. > > > > > > [1] <8430b277-3757-8261-0e1e-23e274a0b...@debian.org> > > > > Is it anywhere in Debian documentation described how to achieve > consistency in a way different than current defaults? Or, even better, > is there way that we could get some kind of configuration option to > achieve it? Polkit does not really have user friendly configuration and > is not really something that system administrators configure on a > everyday bases. At least not in my experience. Only thing that I did > find about configuring polkit was from some other distros. Debian wiki > page about PolicyKit is not really helpful.
Apart from not installing policykit, setting allow_active to "no" in /usr/share/polkit-1/actions/org.freedesktop.login1.policy would do it. Much better is to use /etc/polkit-1/localauthority. See the manual for pklocalauthority. -- Brian.