-
-
Notifications
You must be signed in to change notification settings - Fork 9
SysD Manager Proxy
SysD Manager uses a privileged proxy daemon to perform system-level operations that require root access. Because the SysD Manager, as a GTK4 GUI can't run directly as root.
The /usr/share/dbus-1/system.d/org.freedesktop.systemd1.conf file is a D-Bus policy configuration file used by systemd, the system and service manager for Linux. It defines access permissions for the org.freedesktop.systemd1 D-Bus interface, which is central to controlling and monitoring systemd-managed units, jobs, and system state.
The Proxy is systemd service running as root on the system bus. It forwards Sysd Manager B-Bus calls to systemd.
see Architecture
The first Proxy call raise a polkit identification window. Subsequent calls does't require authentication.
Each operation is individually configurable through Preferences. Users can choose per-operation whether to use the Proxy or fall back to default calls as configured by the local environment (D-Bus policy configuration, Polkit policies).
D-Bus Methods
- start
- stop
- restart
- clean
- freeze
- thaw
- enable-unit-file
- disable-unit-file
- reload-daemon
- create-drop-in
File action
- save-file
- revert-unit-file
Note user session calls doesn't pass trough the Proxy. i.e. If the Unit is on the System bus, the operation (user congigured) goes trough the Proxy.
Q: Why there is no proxy with Flatpak?
Because Flakpak can't run as root.
Q: Is the Proxy is safe and secure?
No
Q: Why the Proxy isn't safe and secure?
For many reasons:
- As GNU General Public License v3.0 it offers no warranties
- As a program running as root, it increase the attract surface
- It accesses with read and write permission local files at root level