LeadaxeLxBox / sing-box-lx 开发者

作者发言

GitHub·2026.09.18 08:47:39（UTC+8）

Leadaxe：说明 Linux 下 systemd-resolved 与 Polkit 权限机制及配置指引

Leadaxe 说明 Linux 下通过 resolvectl 配置 DNS 时 CAP_NET_ADMIN 权限不足的根因在于 systemd-resolved 经由 D-Bus 且由 Polkit 独立鉴权；启动器不会静默安装系统规则，改由文档提供发行版通用的配置指引。

作者原文@Leadaxe

Thanks — this is a clean, well-scoped fix, and the diagnosis is right: CAP_NET_ADMIN cannot help because resolvectl does the work through systemd-resolved over D-Bus, and Polkit authorizes each of the four actions on its own.

Your rule is now documented as-is in docs/LINUX_DNS_POLKIT.md (and .ru.md): group setup, the rule, pkaction/id verification, the security reasoning and the uninstall steps; linked from docs/BUILD_LINUX.md Troubleshooting and from the README (develop, ships with the next release).

We deliberately do not install the rule from the launcher — it is a system-level change and stays an explicit administrator action; documenting it also keeps it distribution-agnostic.