Embed Notice

@jamesh @pid_eins @mariusor With basic unix access controls, there is also testability. You know the extremely limited set of variables that the result of permission checks can depend on, and can test what happens with those. Polkit on the other hand has a nearly unbounded set of possible inputs to make its decisions based on, making the security of a configuration effectively untestable.