From d8f143f60146e847c673acceb1102417c3cd85a2 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?=C3=8D=C3=B1igo=20Huguet?= Date: Thu, 18 Sep 2025 09:29:40 +0200 Subject: [PATCH] spec: enable polkit_noauth_group for Fedora <= 43 and RHEL <= 10 In Fedora 44 and RHEL 11, admin users will need to type their password even on local consoles. --- contrib/fedora/rpm/NetworkManager.spec | 11 +++++++++++ 1 file changed, 11 insertions(+) diff --git a/contrib/fedora/rpm/NetworkManager.spec b/contrib/fedora/rpm/NetworkManager.spec index bfcc1089ae..bb2adca0e7 100644 --- a/contrib/fedora/rpm/NetworkManager.spec +++ b/contrib/fedora/rpm/NetworkManager.spec @@ -107,6 +107,11 @@ %else %bcond_without iwd %endif +%if 0%{?fedora} <= 43 || 0%{?rhel} <= 10 +%bcond_without polkit_noauth_group +%else +%bcond_with polkit_noauth_group +%endif ############################################################################### @@ -665,6 +670,9 @@ Preferably use nmcli instead. -Dselinux=true \ -Dpolkit=true \ -Dconfig_auth_polkit_default=true \ +%if %{with polkit_noauth_group} + -Dpolkit_noauth_group=wheel \ +%endif -Dconcheck=true \ %if 0%{?fedora} -Dlibpsl=true \ @@ -912,6 +920,9 @@ fi %{_datadir}/dbus-1/system-services/org.freedesktop.nm_dispatcher.service %{_datadir}/dbus-1/system-services/org.freedesktop.nm_priv_helper.service %{_datadir}/polkit-1/actions/*.policy +%if %{with polkit_noauth_group} +%{_datadir}/polkit-1/rules.d/org.freedesktop.NetworkManager.rules +%endif %{_prefix}/lib/udev/rules.d/*.rules %{_prefix}/lib/firewalld/zones/nm-shared.xml # systemd stuff