Novell LINUX ENTERPRISE SERVER 11 - SECURITY Manual page 141

POLKIT_DEFAULT_PRIVS to restrictive in /etc/sysconfig/security
and run set_polkit_default_privs as root afterwards. Do not modify these
two files.
In order to define your custom set of privileges, use /etc/polkit-default-privs
.local. Privileges defined here will always take precedence over the ones defined in
the other configuration files. To define a privilege, add a line for each policy with the
following format:
<privilege
name> <any
session>:<inactive
session>:<active
session>
For a list of all privilege names available, run the command polkit-action. The
following values are valid for the session parameters:
yes
grant privilege
no
block
auth_self
user needs to authenticate with own password every time the privilege is requested
auth_self_keep_session
user needs to authenticate with own password once per session, privilege is granted
for the whole session
auth_self_keep_always
user needs to authenticate with own password once, privilege is granted for the
current and for future sessions
auth_admin
user needs to authenticate with root password every time the privilege is requested
auth_admin_keep_session
user needs to authenticate with root password once per session, privilege is
granted for the whole session
PolicyKit 127