Next steps for auth_keep

[bluca]

Hi @jrybar-rh - now that we have initial support for cross-process auth_keep merged in main (thanks!), we should decide if/how to expand it. I intentionally made it much stricter and fixed-behaviour than sudo or other alternatives, to start simple and get the basic infrastructure in place first.

Some possible options:

• auto-refresh timeout on each use
• configurable timeout
• extend session to child processes (eg: scripts)
• anything else?

[LordGrimmauld]

(cross-posting from systemd/systemd#33366 (comment))

For running run0 in a consistent shell, the polkit upstream fix works. However, following example:

#! /usr/bin/env bash
run0 whoami

Executing this twice will ask for authentication each time. Reason being (as far as i can tell) the shebang spawning a different process which won't be accepted as having authenticated before.

How would i keep authentication in such a scenario? Is that even possible currently?

I believe this qualifies as extend session to child processes (eg: scripts), and i believe that should be supported.

[danielzgtg]

Link: #604 for "configurable timeout"
Link: #533 for "initial support for cross-process auth_keep merged in main"