> (In reply to comment #16) > > Having a graphical prompt asking for the root password is a security hole? > pkexec requests the currently running user's password (like sudo), and will > fail if the logged in user doesn't have authorization for the requested task > via PolicyKit. No, it will require the root password, and only this password, unless a specific PolicyKit conf. file is written to change this behaviour (according to « man pkexec »).