Thorsten Glaser <tg@mirbsd.de> writes: > Right… and why does pkexec check against /etc/shells? pkexec checks against /etc/shells because this is the traditional way to determine whether the user is in a restricted shell, and pkexec is essentially a type of sudo and should be unavailable to anyone who is using a restricted shell. -- Russ Allbery (rra@debian.org) <https://www.eyrie.org/~eagle/>