I won the struggle against hal and policykit

Question

Mwhahaha... 'me so happy'...
Well, the point is I manage in certain way to restore the old behavior of hal using policykit, that is to 'force' hal to do *what I say* and nothing else than that. I restored the functionality of having power and storage groups to shutdown/reboot and mount/umount using a policykit trick that I'm going to explain now.
(1) Create /etc/Policykit/Policykit.conf as follows
<?xml version="1.0" encoding="UTF-8"?> <!-- -*- XML -*- -->
<config version="0.1">
<match user="$storage_users">
<match action="org.freedesktop.hal.storage.*">
<return result="yes"/>
</match>
<match action="hal-storage-mount-fixed-extra-options">
<return result="yes" />
</match>
<match action="hal-storage-mount-removable-extra-options">
<return result="yes" />
</match>
</match>
<match user="$power_users">
<match action="org.freedesktop.hal.power-management.shutdown">
<return result="yes"/>
</match>
<match action="org.freedesktop.hal.power-management.reboot">
<return result="yes"/>
</match>
</match>
</config>
(2) Create /etc/rc.d/polkitparser and chmod +x it
#!/bin/bash
# general config
. /etc/rc.conf
. /etc/rc.d/functions
stat_busy "Parsing groups for policykit handling"
export storage_users=$(cat /etc/group | grep -i storage | cut -d ':' -f 4 | sed 's/,/|/')
export power_users=$(cat /etc/group | grep -i power | cut -d ':' -f 4 | sed 's/,/|/')
stat_done
exit 0
(3) Add polkitparser to your DAEMONS list on rc.conf *before* hal.
(4) Enjoy!
I hope it helps.
P.S. For slim users: **its very important** to add
session optional ck_connector.so
to /etc/pam/login and modify .xinitrc to start your X session with
exec ck-launch-session YOUR-WM
p.s. Hell, my fault: /etc/pam/login -> /etc/pam.d/login (sorry )
Edit 2: Please double check the change I made on the header of PolicyKit.conf. There was a weird token that, when copied, generated an invalid file. Please copy this new file. For checking your configuration use polkit-config-file-validate
Last edited by kjon (2009-02-13 17:50:15)

Answer 1

The point I want to mention is upgrade fails when already hal policy is there in /usr/share/Policykit/policy.After moving the files upgrade went smooth.Like pacman why this did not put the files with .new or so in the directory?
where do you move those files to?
i did everything as suggested in the original post but still same problem:
org.freedesktop.hal.storage.mount-removable no <-- (action, result).
this happens with flash and external HD's that had worked before
i DO have the files listed by kgas in  /usr/share/Policykit/policy , perhaps i need to fix that?
/etc/Policykit/Policykit.conf :
<?xml version="1.0" encoding="UTF-8"?> <!-- -*- XML -*- -->
<!DOCTYPE pkconfig PUBLIC "-//freedesktop//DTD PolicyKit Configuration 1.0//EN"
"http://hal.freedesktop.org/releases/PolicyKit/1.0/config.dtd">
<config version="0.1">
<match user="$storage_users">
<match action="org.freedesktop.hal.storage.*">
<return result="yes"/>
</match>
<match action="hal-storage-mount-fixed-extra-options">
<return result="yes" />
</match>
<match action="hal-storage-mount-removable-extra-options">
<return result="yes" />
</match>
</match>
<match user="$power_users">
<match action="org.freedesktop.hal.power-management.shutdown">
<return result="yes"/>
</match>
<match action="org.freedesktop.hal.power-management.reboot">
<return result="yes"/>
</match>
</match>
</config>
/etc/rc.d/polkitparser: (which i did chmod +x)
#!/bin/bash
# general config
. /etc/rc.conf
. /etc/rc.d/functions
stat_busy "Parsing groups for policykit handling"
export storage_users=$(cat /etc/group | grep -i storage | cut -d ':' -f 4 | sed 's/,/|/')
export power_users=$(cat /etc/group | grep -i power | cut -d ':' -f 4 | sed 's/,/|/')
stat_done
exit 0
/etc/pam.d/login: (i use slim)( i didnt see etc/pam/login only etc/pam.d/login)
#%PAM-1.0
auth required pam_securetty.so
auth requisite pam_nologin.so
auth required pam_unix.so nullok
auth required pam_tally.so onerr=succeed file=/var/log/faillog
# use this to lockout accounts for 10 minutes after 3 failed attempts
#auth required pam_tally.so deny=2 unlock_time=600 onerr=succeed file=/var/log/faillog
account required pam_access.so
account required pam_time.so
account required pam_unix.so
#password required pam_cracklib.so difok=2 minlen=8 dcredit=2 ocredit=2 retry=3
#password required pam_unix.so md5 shadow use_authtok
session required pam_unix.so
session required pam_env.so
session required pam_motd.so
session required pam_limits.so
session optional pam_mail.so dir=/var/spool/mail standard
session optional pam_lastlog.so
session optional ck_connector.so
,xinitrc:
#!/bin/sh
# ~/.xinitrc
# Executed by startx (run your window manager from here)
exec ck-launch-session openbox-session
thanks for any help