lys-polkitThe lys desktop's polkit agent

When a program asks polkitd for an action that needs authentication, lys-polkit runs the PAM conversation and asks in lys-shell's dialog. It replaces hyprpolkitagent.

Get started

Install

GitHub

Password or fingerprint

Whatever PAM asks for appears in lys-shell's authentication dialog, from a password prompt to a fingerprint reader's message.

Runs as a user service

A systemd user unit wanted by the graphical session. It finds the session polkitd expects it to serve, from inside a session or outside one.

Fails where you can see it

If another agent already serves the session it exits with polkitd's message and leaves a failed unit, instead of running unregistered.

Tested on a real polkit

A NixOS VM authenticates pkexec through lys-polkit against polkit 127, with the right password, a wrong one, a cancel and no agent.