Leadaxe：Linux DNS 经 resolvectl 需 Polkit，非 CAP_NET_ADMIN
Leadaxe 说明通过 resolvectl 配 DNS 时权限不足的根因是 systemd-resolved 走 D-Bus 并由 Polkit 鉴权，CAP_NET_ADMIN 帮不上；启动器不静默装系统规则，改由文档提供发行版指引。
作者原文@LeadaxeThanks — this is a clean, well-scoped fix, and the diagnosis is right:
CAP_NET_ADMINcannot help becauseresolvectldoes the work throughsystemd-resolvedover D-Bus, and Polkit authorizes each of the four actions on its own.Your rule is now documented as-is in
docs/LINUX_DNS_POLKIT.md(and.ru.md): group setup, the rule,pkaction/idverification, the security reasoning and the uninstall steps; linked fromdocs/BUILD_LINUX.mdTroubleshooting and from the README (develop, ships with the next release).We deliberately do not install the rule from the launcher — it is a system-level change and stays an explicit administrator action; documenting it also keeps it distribution-agnostic.
