Tailscale hardening - no /etc/polkit-1 directory

[huidbui25]

I have searched the existing open and closed issues

Required Information

• DietPi version: 9.4.2
• Distro version: bookworm 0
• Kernel version: Linux DietPi 6.1.21-v8+ #1642 SMP PREEMPT Mon Apr 3 17:24:16 BST 2023 aarch64 GNU/Linux
• Architecture: arm64
• SBC model: RPi 3 Model B (aarch64)

Additional Information (if applicable)

• Software title: Tailscale 1.66.4

Steps to reproduce

1. I use tailscale (installed using dietpi-software). Works like a charm.

2. I like to harden tailscale following this guide:
   Suggested hardening configuration based on systemd, section no. 2
   and FR: Documentation Improvement: Use polkit rules in Node Hardening, Instead of pkla Format · Issue #10547 · tailscale/tailscale · GitHub

Expected behaviour

• Directory /etc/polkit-1/rules.d/ should be there

Actual behaviour

• Directory /etc/polkit-1/rules.d/ is missing on DietPi

Extra details

I found Kodi: Install requires polkit-1 #3164 but I’m not sure if this applies to me. apt search polkit shows several results. Which package is the right one?

[Jappe]

@huidbui25

Directory /etc/polkit-1/rules.d/ is missing on DietPi

Do you have policykit installed?

apt-cache policy policykit-1 

[huidbui25]

Not knowingly … here’s the output:

root@DietPi:~# apt-cache policy policykit-1
policykit-1:
  Installiert:           (keine)
  Installationskandidat: 122-3
  Versionstabelle:
     122-3 500
        500 https://mirror.de.leaseweb.net/debian bookworm/main arm64 Packages

[huidbui25]

Thank you

apt install policykit-1 did the job.

Just one more question: does this package support JavaScript format vs. deprecated pkla format?

[Joulinar]

We don’t maintain this package as it is Global Debian one.

[Jappe]

it’s JS only, pkla is not longer supported.