Arch Linux

The filesystem package now ships a proc group for use with the hidepid mount option on /proc. The polkit daemon runs as non-root and needs to access information about processes owned by other users, so it needs to be added to the group to be granted an exception.

Adding `usermod -a -G proc polkitd` to post_upgrade() and `-G polkitd` to the `useradd` command in post_install is all that's required.



Bonus points: The shell might as well be changed from /bin/false to /usr/bin/nologin as was done for the users in the filesystem package too, but that's far from important - it's just a bit friendlier (just an additional `-s /usr/bin/nologin` for the usermod command + changing useradd).