Tailscale hardening - no /etc/polkit-1 directory

I have searched the existing open and closed issues

Required Information

  • DietPi version: 9.4.2
  • Distro version: bookworm 0
  • Kernel version: Linux DietPi 6.1.21-v8+ #1642 SMP PREEMPT Mon Apr 3 17:24:16 BST 2023 aarch64 GNU/Linux
  • Architecture: arm64
  • SBC model: RPi 3 Model B (aarch64)

Additional Information (if applicable)

  • Software title: Tailscale 1.66.4

Steps to reproduce

  1. I use tailscale (installed using dietpi-software). Works like a charm.

  2. I like to harden tailscale following this guide:
    Suggested hardening configuration based on systemd, section no. 2
    and FR: Documentation Improvement: Use polkit rules in Node Hardening, Instead of pkla Format · Issue #10547 · tailscale/tailscale · GitHub

Expected behaviour

  • Directory /etc/polkit-1/rules.d/ should be there

Actual behaviour

  • Directory /etc/polkit-1/rules.d/ is missing on DietPi

Extra details

I found Kodi: Install requires polkit-1 #3164 but I’m not sure if this applies to me. apt search polkit shows several results. Which package is the right one?

Do you have policykit installed?

apt-cache policy policykit-1 
1 Like

Not knowingly … here’s the output:

root@DietPi:~# apt-cache policy policykit-1
policykit-1:
  Installiert:           (keine)
  Installationskandidat: 122-3
  Versionstabelle:
     122-3 500
        500 https://mirror.de.leaseweb.net/debian bookworm/main arm64 Packages

Thank you :slight_smile:

apt install policykit-1 did the job.

Just one more question: does this package support JavaScript format vs. deprecated pkla format?

1 Like

We don’t maintain this package as it is Global Debian one.

it’s JS only, pkla is not longer supported.

This topic was automatically closed 90 days after the last reply. New replies are no longer allowed.