Hi everyone,

After upgrading pkexec/polkitd to version 127-1+kali1, the file
/usr/lib/polkit-1/polkit-agent-helper-1 is missing the setuid bit.

This causes all PolicyKit authentication to fail with "Not authorized to
perform operation" errors, making it impossible to:

• Mount volumes via GUI (Thunar, file managers)
• Use "Open as Root" functionality

• Any operation requiring polkit authentication

  SYSTEM INFO:

• Kali GNU/Linux Rolling 2025.4
• Kernel: 6.17.10+kali-amd64
• Desktop: XFCE

• Affected packages:

  • pkexec 127-1+kali1
  • polkitd 127-1+kali1

  STEPS TO REPRODUCE:

  1. Upgrade system with apt update && apt dist-upgrade
  2. Reboot
  3. Try to mount a volume by double-clicking in Thunar
  4. Error: "Not authorized to perform operation"

  EXPECTED BEHAVIOR:
  /usr/lib/polkit-1/polkit-agent-helper-1 should have permissions -rwsr-xr-x
  (4755)

  ACTUAL BEHAVIOR:
  File has permissions -rwxr-xr-x (0755) - missing setuid bit

  WORKAROUND:
  sudo chmod 4755 /usr/lib/polkit-1/polkit-agent-helper-1

  RELATED:
  This is the same bug as Debian Bug#1125141:
  http://www.mail-archive.com/[email protected]/msg2078569.ht
  ml

  The upstream polkitd 127-1 package has this issue. The Kali package
  127-1+kali1 inherits the bug.

  Category: General Bug
  Reproducibility: Always
  Severity: Major
  Priority: High