[smb4k] doc: Add a remark regarding denied privilege escalation.

[Alexander Reinholdt]

Git commit ccaecebf117f7067230d08197eee5823a4efa7e6 by Alexander Reinholdt.
Committed on 31/07/2017 at 18:20.
Pushed by areinholdt into branch 'master'.

Add a remark regarding denied privilege escalation.

M  +28   -2    doc/index.docbook

https://commits.kde.org/smb4k/ccaecebf117f7067230d08197eee5823a4efa7e6

diff --git a/doc/index.docbook b/doc/index.docbook
index 958f05d..1bc678a 100644
--- a/doc/index.docbook
+++ b/doc/index.docbook
@@ -27,8 +27,8 @@
     <holder>Alexander Reinholdt</holder>
   </copyright>
   <legalnotice>&underFDL;</legalnotice>
-  <date>2017-03-03</date>
-  <releaseinfo>&smb4k; 2.0.0</releaseinfo><!--FIXME change releaseinfo number-->
+  <date>2017-07-25</date>
+  <releaseinfo>&smb4k; 2.0.2</releaseinfo><!--FIXME change releaseinfo number-->
   <abstract>
     <para>&smb4k; is an advanced network neighborhood browser and Samba share mounting utility.</para>
   </abstract>
@@ -1441,6 +1441,32 @@ client ipc max protocol = NT1
   
       <para>Unfortunately, this fix for &smb4k; breaks the possibility to connect to the network neighborhood with &dolphin; and maybe also other programs.</para>
     </sect2>
+    
+<!--
+    Using Smb4K : Special Remarks : Remarks Regarding polkit-1
+-->
+    
+    <sect2 id="special_remarks_polkit-1">
+      <title>Remarks Regarding Denied Privilege Escalation</title>
+      
+      <para>In case the mount and unmount actions fail with an <guilabel>AuthorizationDeniedError</guilabel>, your polkit-1 setup might need to be adjusted: Add a file, ⪚ named <filename>10-mounthelper.rules</filename>, to the <filename class="directory">$PREFIX/etc/polkit-1/rules.d/</filename> directory with the following content:</para>
+
+<programlisting>polkit.addRule(function(action, subject) {
+        if (action.id == "org.kde.smb4k.mounthelper.mount" && 
+            subject.isInGroup("wheel")) {
+                return polkit.Result.YES;
+        }
+});
+
+polkit.addRule(function(action, subject) {
+        if (action.id == "org.kde.smb4k.mounthelper.unmount" &&
+            subject.isInGroup("wheel")) {
+                return polkit.Result.YES;
+        }
+});</programlisting>
+      
+      <para>This allows all users in the Unix group <emphasis>wheel</emphasis> to execute the mount and unmount action. You may adjust the group of authorized users to any group you need (⪚ <emphasis>sudo</emphasis> or <emphasis>operator</emphasis>).</para>
+    </sect2>
   
 <!-- 
       Using Smb4K : Special Remarks : Remarks for FreeBSD Users