Fedora and pkexec

Posted Feb 18, 2022 14:09 UTC (Fri) by cortana (subscriber, #24596)
In reply to: Fedora and pkexec by mjg59
Parent article: Fedora and pkexec

> How do traditional Unix permissions encode things like "Is this user currently logged in at a physical console"?

Another case where we could have learned from Windows. Handwaving a bit here but I believe you can create an ACE for S-1-2-1 ("Console logon"), which will be present in the token of all processes started by a user with a physical console logon session.

(I've no idea how this handles revocation).