···

       
14
       
14
       
 
       


     

       
15
       
15
       
 
       
    security.polkit.enable = mkEnableOption (lib.mdDoc "polkit");

     

       
16
       
16
       
 
       


     

       
17
       
17
       
+
       
    security.polkit.debug = mkEnableOption (lib.mdDoc "debug logs from polkit. This is required in order to see log messages from rule definitions.");

     

       
18
       
18
       
+
       


     

       
17
       
19
       
 
       
    security.polkit.extraConfig = mkOption {

     

       
18
       
20
       
 
       
      type = types.lines;

     

       
19
       
21
       
 
       
      default = "";

     
···

       
21
       
23
       
 
       
        ''

     

       
22
       
24
       
 
       
          /* Log authorization checks. */

     

       
23
       
25
       
 
       
          polkit.addRule(function(action, subject) {

     

       
26
       
26
       
+
       
            // Make sure to set { security.polkit.debug = true; } in configuration.nix

     

       
24
       
27
       
 
       
            polkit.log("user " +  subject.user + " is attempting action " + action.id + " from PID " + subject.pid);

     

       
25
       
28
       
 
       
          });

     

       
26
       
29
       
 
       


     
···

       
57
       
60
       
 
       
    environment.systemPackages = [ pkgs.polkit.bin pkgs.polkit.out ];

     

       
58
       
61
       
 
       


     

       
59
       
62
       
 
       
    systemd.packages = [ pkgs.polkit.out ];

     

       
63
       
63
       
+
       


     

       
64
       
64
       
+
       
    systemd.services.polkit.serviceConfig.ExecStart = [

     

       
65
       
65
       
+
       
      ""

     

       
66
       
66
       
+
       
      "${pkgs.polkit.out}/lib/polkit-1/polkitd ${optionalString (!cfg.debug) "--no-debug"}"

     

       
67
       
67
       
+
       
    ];

     

       
60
       
68
       
 
       


     

       
61
       
69
       
 
       
    systemd.services.polkit.restartTriggers = [ config.system.path ];

     

       
62
       
70
       
 
       
    systemd.services.polkit.stopIfChanged = false;