fix: polkit rule for tuned - specify user to avoid auth prompts

- Change polkit rule to explicitly allow specific user
- Fixes authentication popup on every profile change
- Add quick fix script for immediate deployment

Author: pixincreate

omarchy

@@ -0,0 +1 @@
+Subproject commit 1e859d37cb7fef6ac687442dc1fe515d01d1302d

unix/fedora/install/config/hardware/asus.sh

@@ -44,10 +44,12 @@ sudo -u "$REAL_USER" systemctl --user enable asus-profile-sync.service
 sudo -u "$REAL_USER" systemctl --user start asus-profile-sync.service
 
 # Configure polkit for profile switching
-sudo tee /etc/polkit-1/rules.d/49-asus-profile.rules > /dev/null <<'EOF'
-// Allow switching TuneD profiles from user sessions
+# Allow the current user to switch tuned profiles without authentication
+sudo tee /etc/polkit-1/rules.d/49-asus-profile.rules > /dev/null <<EOF
+// Allow user '$REAL_USER' to switch TuneD profiles without password
 polkit.addRule(function(action, subject) {
-    if (action.id == "com.redhat.tuned.switch_profile") {
+    if (action.id == "com.redhat.tuned.switch_profile" &&
+        subject.user == "$REAL_USER") {
         return polkit.Result.YES;
     }
 });

unix/fedora/migrations/fix-polkit-asus.sh

@@ -0,0 +1,27 @@
+#!/bin/bash
+# Quick fix: Update polkit rule for ASUS profile sync to not require authentication
+
+echo "Updating polkit rule for tuned profile switching..."
+
+CURRENT_USER="${SUDO_USER:-$USER}"
+
+sudo tee /etc/polkit-1/rules.d/49-asus-profile.rules > /dev/null <<EOF
+// Allow user '$CURRENT_USER' to switch TuneD profiles without password
+polkit.addRule(function(action, subject) {
+    if (action.id == "com.redhat.tuned.switch_profile" &&
+        subject.user == "$CURRENT_USER") {
+        return polkit.Result.YES;
+    }
+});
+EOF
+
+echo "Restarting polkit..."
+sudo systemctl restart polkit
+
+echo "✓ Polkit rule updated for user: $CURRENT_USER"
+echo ""
+echo "Restarting asus-profile-sync service..."
+systemctl --user restart asus-profile-sync.service
+
+echo ""
+echo "✓ Done! Press Fn+F5 to test - should not ask for password anymore"