about summary refs log tree commit diff
path: root/nixos/doc
diff options
context:
space:
mode:
authorMartin Weinelt <hexa@darmstadt.ccc.de>2022-01-26 15:04:03 +0100
committerMartin Weinelt <hexa@darmstadt.ccc.de>2022-01-27 01:45:44 +0100
commita813be071ceed15b9238373bd751ee99e2470357 (patch)
treed503109dab9a8062482dd88518c126485cb62ea2 /nixos/doc
parent071dbeb56deeb56028486048fc9062213d92135d (diff)
downloadnixlib-a813be071ceed15b9238373bd751ee99e2470357.tar
nixlib-a813be071ceed15b9238373bd751ee99e2470357.tar.gz
nixlib-a813be071ceed15b9238373bd751ee99e2470357.tar.bz2
nixlib-a813be071ceed15b9238373bd751ee99e2470357.tar.lz
nixlib-a813be071ceed15b9238373bd751ee99e2470357.tar.xz
nixlib-a813be071ceed15b9238373bd751ee99e2470357.tar.zst
nixlib-a813be071ceed15b9238373bd751ee99e2470357.zip
nixos/polkit: don't enable by default
SUID wrappers really shouldn't be enabled by default, unless a consumer
relies on them. So in my opinion this falls upon the desktop
environments if needed or a user to explicltly enable this if wanted.

Most desktop environments and services like CUPS already enable polkit
by default, that should really be sufficient.
Diffstat (limited to 'nixos/doc')
-rw-r--r--nixos/doc/manual/from_md/release-notes/rl-2205.section.xml8
-rw-r--r--nixos/doc/manual/release-notes/rl-2205.section.md2
2 files changed, 10 insertions, 0 deletions
diff --git a/nixos/doc/manual/from_md/release-notes/rl-2205.section.xml b/nixos/doc/manual/from_md/release-notes/rl-2205.section.xml
index 9f5279732fe4..437c78119d61 100644
--- a/nixos/doc/manual/from_md/release-notes/rl-2205.section.xml
+++ b/nixos/doc/manual/from_md/release-notes/rl-2205.section.xml
@@ -721,6 +721,14 @@
           <literal>tmux</literal>.
         </para>
       </listitem>
+      <listitem>
+        <para>
+          The polkit service, available at
+          <literal>security.polkit.enable</literal>, is now disabled by
+          default. It will automatically be enabled through services and
+          desktop environments as needed.
+        </para>
+      </listitem>
     </itemizedlist>
   </section>
 </section>
diff --git a/nixos/doc/manual/release-notes/rl-2205.section.md b/nixos/doc/manual/release-notes/rl-2205.section.md
index 629672259b21..43b04be49ce0 100644
--- a/nixos/doc/manual/release-notes/rl-2205.section.md
+++ b/nixos/doc/manual/release-notes/rl-2205.section.md
@@ -245,4 +245,6 @@ In addition to numerous new and upgraded packages, this release has the followin
 
 - `programs.tmux` has a new option `plugins` that accepts a list of packages from the `tmuxPlugins` group. The specified packages are added to the system and loaded by `tmux`.
 
+- The polkit service, available at `security.polkit.enable`, is now disabled by default. It will automatically be enabled through services and desktop environments as needed.
+
 <!-- To avoid merge conflicts, consider adding your item at an arbitrary place in the list instead. -->