diff --git a/data/daemon.conf b/data/daemon.conf index b5d5a77b7..88b6118e5 100644 --- a/data/daemon.conf +++ b/data/daemon.conf @@ -46,6 +46,5 @@ UriSchemes= # Ignore power levels of devices when running updates IgnorePower=false -# For systems using polkit for authorization, only support installing firmware -# signed with a trusted key +# Only support installing firmware signed with a trusted key OnlyTrusted=true diff --git a/src/fu-engine.c b/src/fu-engine.c index a056d2674..802963bbb 100644 --- a/src/fu-engine.c +++ b/src/fu-engine.c @@ -1709,7 +1709,6 @@ fu_engine_check_requirement(FuEngine *self, gboolean fu_engine_check_trust(FuEngine *self, FuInstallTask *task, GError **error) { -#ifdef HAVE_POLKIT if (fu_config_get_only_trusted(self->config) && (fu_install_task_get_trust_flags(task) & FWUPD_TRUST_FLAG_PAYLOAD) == 0) { g_autofree gchar *sysconfdir = fu_common_get_path(FU_PATH_KIND_SYSCONFDIR_PKG); @@ -1722,15 +1721,6 @@ fu_engine_check_trust(FuEngine *self, FuInstallTask *task, GError **error) fn); return FALSE; } -#else - if ((fu_install_task_get_trust_flags(task) & FWUPD_TRUST_FLAG_PAYLOAD) == 0) { - g_set_error_literal(error, - FWUPD_ERROR, - FWUPD_ERROR_INVALID_FILE, - "firmware signature missing or not trusted"); - return FALSE; - } -#endif return TRUE; }