run0

Posted Dec 22, 2025 7:04 UTC (Mon) by mchapman (subscriber, #66589)
In reply to: run0 by intelfx
Parent article: Conill: Rethinking sudo with object capabilities

Ah, you're right. Polkit explicitly asks logind for the user's current "display" session if a session can't be identified for the process.

Perhaps it shouldn't do that, since it thwarts any attempt by that process to provide a fallback agent (which all the systemd tools do when they're using polkit).