]> git.ipfire.org Git - thirdparty/systemd.git/blame - src/login/org.freedesktop.login1.policy
nss: prevent PROTECT_ERRNO from squashing changes to *errnop
[thirdparty/systemd.git] / src / login / org.freedesktop.login1.policy
CommitLineData
91f9dcaf
LP
1<?xml version="1.0" encoding="UTF-8"?> <!--*-nxml-*-->
2<!DOCTYPE policyconfig PUBLIC "-//freedesktop//DTD PolicyKit Policy Configuration 1.0//EN"
3 "http://www.freedesktop.org/standards/PolicyKit/1/policyconfig.dtd">
4
5<!--
d9215cd8
ZJS
6 SPDX-License-Identifier: LGPL-2.1+
7
91f9dcaf
LP
8 This file is part of systemd.
9
10 systemd is free software; you can redistribute it and/or modify it
5430f7f2
LP
11 under the terms of the GNU Lesser General Public License as published by
12 the Free Software Foundation; either version 2.1 of the License, or
91f9dcaf
LP
13 (at your option) any later version.
14-->
15
16<policyconfig>
17
18 <vendor>The systemd Project</vendor>
19 <vendor_url>http://www.freedesktop.org/wiki/Software/systemd</vendor_url>
20
b14eda96 21 <action id="org.freedesktop.login1.inhibit-block-shutdown">
264d8dcc
GH
22 <description gettext-domain="systemd">Allow applications to inhibit system shutdown</description>
23 <message gettext-domain="systemd">Authentication is required for an application to inhibit system shutdown.</message>
f8e2fb7b 24 <defaults>
beaafb2e
LP
25 <allow_any>no</allow_any>
26 <allow_inactive>yes</allow_inactive>
27 <allow_active>yes</allow_active>
28 </defaults>
39600155 29 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.inhibit-delay-shutdown org.freedesktop.login1.inhibit-block-sleep org.freedesktop.login1.inhibit-delay-sleep org.freedesktop.login1.inhibit-block-idle</annotate>
beaafb2e
LP
30 </action>
31
32 <action id="org.freedesktop.login1.inhibit-delay-shutdown">
264d8dcc
GH
33 <description gettext-domain="systemd">Allow applications to delay system shutdown</description>
34 <message gettext-domain="systemd">Authentication is required for an application to delay system shutdown.</message>
beaafb2e
LP
35 <defaults>
36 <allow_any>yes</allow_any>
f8e2fb7b
LP
37 <allow_inactive>yes</allow_inactive>
38 <allow_active>yes</allow_active>
39 </defaults>
39600155 40 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.inhibit-delay-sleep</annotate>
f8e2fb7b
LP
41 </action>
42
b14eda96 43 <action id="org.freedesktop.login1.inhibit-block-sleep">
264d8dcc
GH
44 <description gettext-domain="systemd">Allow applications to inhibit system sleep</description>
45 <message gettext-domain="systemd">Authentication is required for an application to inhibit system sleep.</message>
b14eda96 46 <defaults>
beaafb2e
LP
47 <allow_any>no</allow_any>
48 <allow_inactive>yes</allow_inactive>
49 <allow_active>yes</allow_active>
50 </defaults>
39600155 51 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.inhibit-delay-sleep org.freedesktop.login1.inhibit-block-idle</annotate>
beaafb2e
LP
52 </action>
53
54 <action id="org.freedesktop.login1.inhibit-delay-sleep">
264d8dcc
GH
55 <description gettext-domain="systemd">Allow applications to delay system sleep</description>
56 <message gettext-domain="systemd">Authentication is required for an application to delay system sleep.</message>
beaafb2e
LP
57 <defaults>
58 <allow_any>yes</allow_any>
b14eda96
LP
59 <allow_inactive>yes</allow_inactive>
60 <allow_active>yes</allow_active>
61 </defaults>
62 </action>
63
64 <action id="org.freedesktop.login1.inhibit-block-idle">
264d8dcc
GH
65 <description gettext-domain="systemd">Allow applications to inhibit automatic system suspend</description>
66 <message gettext-domain="systemd">Authentication is required for an application to inhibit automatic system suspend.</message>
b14eda96
LP
67 <defaults>
68 <allow_any>yes</allow_any>
69 <allow_inactive>yes</allow_inactive>
70 <allow_active>yes</allow_active>
71 </defaults>
72 </action>
73
beaafb2e 74 <action id="org.freedesktop.login1.inhibit-handle-power-key">
264d8dcc
GH
75 <description gettext-domain="systemd">Allow applications to inhibit system handling of the power key</description>
76 <message gettext-domain="systemd">Authentication is required for an application to inhibit system handling of the power key.</message>
b14eda96 77 <defaults>
beaafb2e 78 <allow_any>no</allow_any>
b14eda96
LP
79 <allow_inactive>yes</allow_inactive>
80 <allow_active>yes</allow_active>
81 </defaults>
39600155 82 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.inhibit-handle-suspend-key org.freedesktop.login1.inhibit-handle-hibernate-key org.freedesktop.login1.inhibit-handle-lid-switch</annotate>
b14eda96
LP
83 </action>
84
8e7fd6ad 85 <action id="org.freedesktop.login1.inhibit-handle-suspend-key">
264d8dcc
GH
86 <description gettext-domain="systemd">Allow applications to inhibit system handling of the suspend key</description>
87 <message gettext-domain="systemd">Authentication is required for an application to inhibit system handling of the suspend key.</message>
8e7fd6ad
LP
88 <defaults>
89 <allow_any>no</allow_any>
90 <allow_inactive>yes</allow_inactive>
91 <allow_active>yes</allow_active>
92 </defaults>
39600155 93 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.inhibit-handle-hibernate-key org.freedesktop.login1.inhibit-handle-lid-switch</annotate>
8e7fd6ad
LP
94 </action>
95
96 <action id="org.freedesktop.login1.inhibit-handle-hibernate-key">
264d8dcc
GH
97 <description gettext-domain="systemd">Allow applications to inhibit system handling of the hibernate key</description>
98 <message gettext-domain="systemd">Authentication is required for an application to inhibit system handling of the hibernate key.</message>
b14eda96 99 <defaults>
beaafb2e 100 <allow_any>no</allow_any>
b14eda96
LP
101 <allow_inactive>yes</allow_inactive>
102 <allow_active>yes</allow_active>
103 </defaults>
104 </action>
105
beaafb2e 106 <action id="org.freedesktop.login1.inhibit-handle-lid-switch">
264d8dcc
GH
107 <description gettext-domain="systemd">Allow applications to inhibit system handling of the lid switch</description>
108 <message gettext-domain="systemd">Authentication is required for an application to inhibit system handling of the lid switch.</message>
eecd1362 109 <defaults>
beaafb2e 110 <allow_any>no</allow_any>
eecd1362
LP
111 <allow_inactive>yes</allow_inactive>
112 <allow_active>yes</allow_active>
113 </defaults>
114 </action>
115
152199f2 116 <action id="org.freedesktop.login1.set-self-linger">
264d8dcc
GH
117 <description gettext-domain="systemd">Allow non-logged-in user to run programs</description>
118 <message gettext-domain="systemd">Explicit request is required to run programs as a non-logged-in user.</message>
152199f2
ZJS
119 <defaults>
120 <allow_any>yes</allow_any>
ac3608cd
MB
121 <allow_inactive>yes</allow_inactive>
122 <allow_active>yes</allow_active>
152199f2
ZJS
123 </defaults>
124 </action>
125
7f7bb946 126 <action id="org.freedesktop.login1.set-user-linger">
264d8dcc
GH
127 <description gettext-domain="systemd">Allow non-logged-in users to run programs</description>
128 <message gettext-domain="systemd">Authentication is required to run programs as a non-logged-in user.</message>
91f9dcaf
LP
129 <defaults>
130 <allow_any>auth_admin_keep</allow_any>
131 <allow_inactive>auth_admin_keep</allow_inactive>
132 <allow_active>auth_admin_keep</allow_active>
133 </defaults>
134 </action>
135
47a26690 136 <action id="org.freedesktop.login1.attach-device">
264d8dcc
GH
137 <description gettext-domain="systemd">Allow attaching devices to seats</description>
138 <message gettext-domain="systemd">Authentication is required for attaching a device to a seat.</message>
47a26690
LP
139 <defaults>
140 <allow_any>auth_admin_keep</allow_any>
141 <allow_inactive>auth_admin_keep</allow_inactive>
142 <allow_active>auth_admin_keep</allow_active>
143 </defaults>
39600155 144 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.flush-devices</annotate>
47a26690
LP
145 </action>
146
b668e064 147 <action id="org.freedesktop.login1.flush-devices">
264d8dcc
GH
148 <description gettext-domain="systemd">Flush device to seat attachments</description>
149 <message gettext-domain="systemd">Authentication is required for resetting how devices are attached to seats.</message>
55af3897
LP
150 <defaults>
151 <allow_any>auth_admin_keep</allow_any>
152 <allow_inactive>auth_admin_keep</allow_inactive>
153 <allow_active>auth_admin_keep</allow_active>
154 </defaults>
155 </action>
156
157 <action id="org.freedesktop.login1.power-off">
264d8dcc
GH
158 <description gettext-domain="systemd">Power off the system</description>
159 <message gettext-domain="systemd">Authentication is required for powering off the system.</message>
55af3897
LP
160 <defaults>
161 <allow_any>auth_admin_keep</allow_any>
162 <allow_inactive>auth_admin_keep</allow_inactive>
163 <allow_active>yes</allow_active>
164 </defaults>
9ef15026 165 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.set-wall-message</annotate>
55af3897
LP
166 </action>
167
168 <action id="org.freedesktop.login1.power-off-multiple-sessions">
264d8dcc
GH
169 <description gettext-domain="systemd">Power off the system while other users are logged in</description>
170 <message gettext-domain="systemd">Authentication is required for powering off the system while other users are logged in.</message>
55af3897
LP
171 <defaults>
172 <allow_any>auth_admin_keep</allow_any>
173 <allow_inactive>auth_admin_keep</allow_inactive>
eb6d2338 174 <allow_active>yes</allow_active>
55af3897 175 </defaults>
39600155 176 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.power-off</annotate>
55af3897
LP
177 </action>
178
f8e2fb7b 179 <action id="org.freedesktop.login1.power-off-ignore-inhibit">
264d8dcc
GH
180 <description gettext-domain="systemd">Power off the system while an application asked to inhibit it</description>
181 <message gettext-domain="systemd">Authentication is required for powering off the system while an application asked to inhibit it.</message>
f8e2fb7b
LP
182 <defaults>
183 <allow_any>auth_admin_keep</allow_any>
184 <allow_inactive>auth_admin_keep</allow_inactive>
185 <allow_active>auth_admin_keep</allow_active>
186 </defaults>
39600155 187 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.power-off</annotate>
f8e2fb7b
LP
188 </action>
189
55af3897 190 <action id="org.freedesktop.login1.reboot">
264d8dcc
GH
191 <description gettext-domain="systemd">Reboot the system</description>
192 <message gettext-domain="systemd">Authentication is required for rebooting the system.</message>
55af3897
LP
193 <defaults>
194 <allow_any>auth_admin_keep</allow_any>
195 <allow_inactive>auth_admin_keep</allow_inactive>
196 <allow_active>yes</allow_active>
197 </defaults>
9ef15026 198 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.set-wall-message</annotate>
55af3897
LP
199 </action>
200
201 <action id="org.freedesktop.login1.reboot-multiple-sessions">
264d8dcc
GH
202 <description gettext-domain="systemd">Reboot the system while other users are logged in</description>
203 <message gettext-domain="systemd">Authentication is required for rebooting the system while other users are logged in.</message>
b668e064
LP
204 <defaults>
205 <allow_any>auth_admin_keep</allow_any>
206 <allow_inactive>auth_admin_keep</allow_inactive>
299404a1 207 <allow_active>yes</allow_active>
b668e064 208 </defaults>
39600155 209 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.reboot</annotate>
b668e064
LP
210 </action>
211
f8e2fb7b 212 <action id="org.freedesktop.login1.reboot-ignore-inhibit">
264d8dcc
GH
213 <description gettext-domain="systemd">Reboot the system while an application asked to inhibit it</description>
214 <message gettext-domain="systemd">Authentication is required for rebooting the system while an application asked to inhibit it.</message>
d889a206
LP
215 <defaults>
216 <allow_any>auth_admin_keep</allow_any>
217 <allow_inactive>auth_admin_keep</allow_inactive>
218 <allow_active>auth_admin_keep</allow_active>
219 </defaults>
39600155 220 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.reboot</annotate>
d889a206
LP
221 </action>
222
36b69c31 223 <action id="org.freedesktop.login1.halt">
264d8dcc
GH
224 <description gettext-domain="systemd">Halt the system</description>
225 <message gettext-domain="systemd">Authentication is required for halting the system.</message>
36b69c31
LP
226 <defaults>
227 <allow_any>auth_admin_keep</allow_any>
228 <allow_inactive>auth_admin_keep</allow_inactive>
229 <allow_active>auth_admin_keep</allow_active>
230 </defaults>
231 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.set-wall-message</annotate>
232 </action>
233
234 <action id="org.freedesktop.login1.halt-multiple-sessions">
264d8dcc
GH
235 <description gettext-domain="systemd">Halt the system while other users are logged in</description>
236 <message gettext-domain="systemd">Authentication is required for halting the system while other users are logged in.</message>
36b69c31
LP
237 <defaults>
238 <allow_any>auth_admin_keep</allow_any>
239 <allow_inactive>auth_admin_keep</allow_inactive>
240 <allow_active>auth_admin_keep</allow_active>
241 </defaults>
242 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.halt</annotate>
243 </action>
244
245 <action id="org.freedesktop.login1.halt-ignore-inhibit">
264d8dcc
GH
246 <description gettext-domain="systemd">Halt the system while an application asked to inhibit it</description>
247 <message gettext-domain="systemd">Authentication is required for halting the system while an application asked to inhibit it.</message>
36b69c31
LP
248 <defaults>
249 <allow_any>auth_admin_keep</allow_any>
250 <allow_inactive>auth_admin_keep</allow_inactive>
251 <allow_active>auth_admin_keep</allow_active>
252 </defaults>
253 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.halt</annotate>
254 </action>
255
d889a206 256 <action id="org.freedesktop.login1.suspend">
264d8dcc
GH
257 <description gettext-domain="systemd">Suspend the system</description>
258 <message gettext-domain="systemd">Authentication is required for suspending the system.</message>
d889a206
LP
259 <defaults>
260 <allow_any>auth_admin_keep</allow_any>
261 <allow_inactive>auth_admin_keep</allow_inactive>
262 <allow_active>yes</allow_active>
263 </defaults>
264 </action>
265
266 <action id="org.freedesktop.login1.suspend-multiple-sessions">
264d8dcc
GH
267 <description gettext-domain="systemd">Suspend the system while other users are logged in</description>
268 <message gettext-domain="systemd">Authentication is required for suspending the system while other users are logged in.</message>
d889a206
LP
269 <defaults>
270 <allow_any>auth_admin_keep</allow_any>
271 <allow_inactive>auth_admin_keep</allow_inactive>
9d17cf3e 272 <allow_active>yes</allow_active>
d889a206 273 </defaults>
39600155 274 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.suspend</annotate>
d889a206
LP
275 </action>
276
277 <action id="org.freedesktop.login1.suspend-ignore-inhibit">
264d8dcc
GH
278 <description gettext-domain="systemd">Suspend the system while an application asked to inhibit it</description>
279 <message gettext-domain="systemd">Authentication is required for suspending the system while an application asked to inhibit it.</message>
d889a206
LP
280 <defaults>
281 <allow_any>auth_admin_keep</allow_any>
282 <allow_inactive>auth_admin_keep</allow_inactive>
283 <allow_active>auth_admin_keep</allow_active>
284 </defaults>
39600155 285 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.suspend</annotate>
d889a206
LP
286 </action>
287
288 <action id="org.freedesktop.login1.hibernate">
264d8dcc
GH
289 <description gettext-domain="systemd">Hibernate the system</description>
290 <message gettext-domain="systemd">Authentication is required for hibernating the system.</message>
d889a206
LP
291 <defaults>
292 <allow_any>auth_admin_keep</allow_any>
293 <allow_inactive>auth_admin_keep</allow_inactive>
294 <allow_active>yes</allow_active>
295 </defaults>
296 </action>
297
298 <action id="org.freedesktop.login1.hibernate-multiple-sessions">
264d8dcc
GH
299 <description gettext-domain="systemd">Hibernate the system while other users are logged in</description>
300 <message gettext-domain="systemd">Authentication is required for hibernating the system while other users are logged in.</message>
d889a206
LP
301 <defaults>
302 <allow_any>auth_admin_keep</allow_any>
303 <allow_inactive>auth_admin_keep</allow_inactive>
301f9684 304 <allow_active>yes</allow_active>
d889a206 305 </defaults>
39600155 306 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.hibernate</annotate>
d889a206
LP
307 </action>
308
309 <action id="org.freedesktop.login1.hibernate-ignore-inhibit">
264d8dcc
GH
310 <description gettext-domain="systemd">Hibernate the system while an application asked to inhibit it</description>
311 <message gettext-domain="systemd">Authentication is required for hibernating the system while an application asked to inhibit it.</message>
f8e2fb7b
LP
312 <defaults>
313 <allow_any>auth_admin_keep</allow_any>
314 <allow_inactive>auth_admin_keep</allow_inactive>
315 <allow_active>auth_admin_keep</allow_active>
316 </defaults>
39600155 317 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.hibernate</annotate>
f8e2fb7b
LP
318 </action>
319
c529695e 320 <action id="org.freedesktop.login1.manage">
264d8dcc
GH
321 <description gettext-domain="systemd">Manage active sessions, users and seats</description>
322 <message gettext-domain="systemd">Authentication is required for managing active sessions, users and seats.</message>
c529695e
LP
323 <defaults>
324 <allow_any>auth_admin_keep</allow_any>
325 <allow_inactive>auth_admin_keep</allow_inactive>
326 <allow_active>auth_admin_keep</allow_active>
327 </defaults>
328 </action>
329
330 <action id="org.freedesktop.login1.lock-sessions">
264d8dcc
GH
331 <description gettext-domain="systemd">Lock or unlock active sessions</description>
332 <message gettext-domain="systemd">Authentication is required to lock or unlock active sessions.</message>
c529695e
LP
333 <defaults>
334 <allow_any>auth_admin_keep</allow_any>
335 <allow_inactive>auth_admin_keep</allow_inactive>
336 <allow_active>auth_admin_keep</allow_active>
337 </defaults>
338 </action>
339
5bdf2243 340 <action id="org.freedesktop.login1.set-reboot-to-firmware-setup">
264d8dcc
GH
341 <description gettext-domain="systemd">Allow indication to the firmware to boot to setup interface</description>
342 <message gettext-domain="systemd">Authentication is required to indicate to the firmware to boot to setup interface.</message>
5bdf2243
JJ
343 <defaults>
344 <allow_any>auth_admin_keep</allow_any>
345 <allow_inactive>auth_admin_keep</allow_inactive>
ba9778d9 346 <allow_active>yes</allow_active>
5bdf2243 347 </defaults>
c78e6f9e 348 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.reboot</annotate>
5bdf2243
JJ
349 </action>
350
9ef15026 351 <action id="org.freedesktop.login1.set-wall-message">
264d8dcc
GH
352 <description gettext-domain="systemd">Set a wall message</description>
353 <message gettext-domain="systemd">Authentication is required to set a wall message</message>
9ef15026
JS
354 <defaults>
355 <allow_any>auth_admin_keep</allow_any>
356 <allow_inactive>auth_admin_keep</allow_inactive>
357 <allow_active>auth_admin_keep</allow_active>
358 </defaults>
359 </action>
360
91f9dcaf 361</policyconfig>