Novell LINUX ENTERPRISE DESKTOP 11 - SECURITY GUIDE 17-03-2009 Manual page 98

Explicit Authorizations
In this section you can Grant privileges to existing users or Block users. In both
cases, choose a user and a Constraint. Users with a UID of less than 1000 are only
shown when Show System Users is checked. To delete an authorization, choose it
from the list and click Revoke.
NOTE: Restrictions of the Revert to Defaults function on SUSE Linux
Enterprise Desktop
When using Revert to Defaults, the Authorization tool always operates on the
upstream defaults, so it is not possible to list or restore the defaults shipped
with SUSE Linux Enterprise Desktop. Refer to
fault Privileges"
9.3.2 Using the Command Line Tools
PolicyKit comes with two command line tools for changing implicit privileges and for
assigning explicit privileges. Each existing policy has got a speaking, unique name with
which it can be identified and which is used with the command line tools. List all
available policies with the command polkit-action.
polkit-action
List and modify implicit privileges. Using this command you can also reset all
policies to the default value. When invoked with no parameters, The command
polkit-action shows a list of all policies. See man 1 polkit-action
for more information.
polkit-auth
Inspect, grant, block and revoke explicit privileges. To print a list of explicit privi-
leges for a specific user, use the command polkit-auth
--explicit-detail --user USER where USER has to be replaced by a
valid username. If the --user option is left out, privileges for the user executing
the command are shown. See man 1 polkit-auth for more information.
NOTE: Restrictions of polkit-action on SUSE Linux Enterprise Desktop
Using the option --show-overrides, polkit-action lists all policies that
differ from the default values. With --reset-defaults action one can
86 Security Guide
(page 90) for further information.
Section 9.3.4, "Restoring the De-