PolicyKit exports a number of extension points to replace/customize behavior of the PolicyKit daemon. Note that all extensions run with super user privileges in the same process as the PolicyKit daemon.

The PolicyKit daemons loads extensions from the /usr/lib64/polkit-1/extensions directory. See the GIO Extension Point documentation for more information about the extension system used by PolicyKit.

The following extension points are currently defined by PolicyKit:

POLKIT_BACKEND_AUTHORITY_EXTENSION_POINT_NAME.  Allows replacing the Authority – the entity responsible for making authorization decisions. Implementations of this extension point must be derived from the PolkitBackendAuthority class. See the src/nullbackend/ directory in the PolicyKit sources for an example.

POLKIT_BACKEND_ACTION_LOOKUP_EXTENSION_POINT_NAME.  Allows a mechanism to customize the contents of authentication dialogs. Implementations of this extension point must implement the #PolkitBackendActionLookup interface.