Privileged subprocess must not be user-writable

and therefore must be launched with pkexec

Author: purejava

extension.js

@@ -44,7 +44,7 @@ let BOOT_WAIT          = 15;      // 15s
 let CHECK_INTERVAL     = 60*60;   // 1h
 let NOTIFY             = false;
 let HOWMUCH            = 0;
-let UPDATE_CMD         = "ptyxis -- /bin/sh -c \"run0 dnf upgrade; echo Done - Press enter to exit; read _\" ";
+let UPDATE_CMD         = "ptyxis -- /bin/sh -c \"pkexec dnf upgrade; echo Done - Press enter to exit; read _\" ";
 let CHECK_CMD          = "/bin/bash -c \"/usr/bin/dnf check-update -yq | grep -E 'x86_64|i686|noarch|aarch64' | awk '{print $1,$2}'\"";
 let MANAGER_CMD        = "";
 let PACKAGE_CACHE_DIR  = "";

schemas/gschemas.compiled

@@ -65,7 +65,7 @@
     </key>
 
     <key name="update-cmd" type="s">
-      <default>"ptyxis -- /bin/sh -c \"run0 dnf upgrade; echo Done - Press enter to exit; read _\" "</default>
+      <default>"ptyxis -- /bin/sh -c \"pkexec dnf upgrade; echo Done - Press enter to exit; read _\" "</default>
       <summary>Command to run to update packages.</summary>
       <description>Command to run to update packages.</description>
     </key>