]>
Commit | Line | Data |
---|---|---|
91f9dcaf LP |
1 | <?xml version="1.0" encoding="UTF-8"?> <!--*-nxml-*--> |
2 | <!DOCTYPE policyconfig PUBLIC "-//freedesktop//DTD PolicyKit Policy Configuration 1.0//EN" | |
3 | "http://www.freedesktop.org/standards/PolicyKit/1/policyconfig.dtd"> | |
4 | ||
5 | <!-- | |
d9215cd8 ZJS |
6 | SPDX-License-Identifier: LGPL-2.1+ |
7 | ||
91f9dcaf LP |
8 | This file is part of systemd. |
9 | ||
10 | systemd is free software; you can redistribute it and/or modify it | |
5430f7f2 LP |
11 | under the terms of the GNU Lesser General Public License as published by |
12 | the Free Software Foundation; either version 2.1 of the License, or | |
91f9dcaf LP |
13 | (at your option) any later version. |
14 | --> | |
15 | ||
16 | <policyconfig> | |
17 | ||
18 | <vendor>The systemd Project</vendor> | |
19 | <vendor_url>http://www.freedesktop.org/wiki/Software/systemd</vendor_url> | |
20 | ||
b14eda96 | 21 | <action id="org.freedesktop.login1.inhibit-block-shutdown"> |
c8121792 ZJS |
22 | <description>Allow applications to inhibit system shutdown</description> |
23 | <message>Authentication is required for an application to inhibit system shutdown.</message> | |
f8e2fb7b | 24 | <defaults> |
beaafb2e LP |
25 | <allow_any>no</allow_any> |
26 | <allow_inactive>yes</allow_inactive> | |
27 | <allow_active>yes</allow_active> | |
28 | </defaults> | |
39600155 | 29 | <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.inhibit-delay-shutdown org.freedesktop.login1.inhibit-block-sleep org.freedesktop.login1.inhibit-delay-sleep org.freedesktop.login1.inhibit-block-idle</annotate> |
beaafb2e LP |
30 | </action> |
31 | ||
32 | <action id="org.freedesktop.login1.inhibit-delay-shutdown"> | |
c8121792 ZJS |
33 | <description>Allow applications to delay system shutdown</description> |
34 | <message>Authentication is required for an application to delay system shutdown.</message> | |
beaafb2e LP |
35 | <defaults> |
36 | <allow_any>yes</allow_any> | |
f8e2fb7b LP |
37 | <allow_inactive>yes</allow_inactive> |
38 | <allow_active>yes</allow_active> | |
39 | </defaults> | |
39600155 | 40 | <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.inhibit-delay-sleep</annotate> |
f8e2fb7b LP |
41 | </action> |
42 | ||
b14eda96 | 43 | <action id="org.freedesktop.login1.inhibit-block-sleep"> |
c8121792 ZJS |
44 | <description>Allow applications to inhibit system sleep</description> |
45 | <message>Authentication is required for an application to inhibit system sleep.</message> | |
b14eda96 | 46 | <defaults> |
beaafb2e LP |
47 | <allow_any>no</allow_any> |
48 | <allow_inactive>yes</allow_inactive> | |
49 | <allow_active>yes</allow_active> | |
50 | </defaults> | |
39600155 | 51 | <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.inhibit-delay-sleep org.freedesktop.login1.inhibit-block-idle</annotate> |
beaafb2e LP |
52 | </action> |
53 | ||
54 | <action id="org.freedesktop.login1.inhibit-delay-sleep"> | |
c8121792 ZJS |
55 | <description>Allow applications to delay system sleep</description> |
56 | <message>Authentication is required for an application to delay system sleep.</message> | |
beaafb2e LP |
57 | <defaults> |
58 | <allow_any>yes</allow_any> | |
b14eda96 LP |
59 | <allow_inactive>yes</allow_inactive> |
60 | <allow_active>yes</allow_active> | |
61 | </defaults> | |
62 | </action> | |
63 | ||
64 | <action id="org.freedesktop.login1.inhibit-block-idle"> | |
c8121792 ZJS |
65 | <description>Allow applications to inhibit automatic system suspend</description> |
66 | <message>Authentication is required for an application to inhibit automatic system suspend.</message> | |
b14eda96 LP |
67 | <defaults> |
68 | <allow_any>yes</allow_any> | |
69 | <allow_inactive>yes</allow_inactive> | |
70 | <allow_active>yes</allow_active> | |
71 | </defaults> | |
72 | </action> | |
73 | ||
beaafb2e | 74 | <action id="org.freedesktop.login1.inhibit-handle-power-key"> |
c8121792 ZJS |
75 | <description>Allow applications to inhibit system handling of the power key</description> |
76 | <message>Authentication is required for an application to inhibit system handling of the power key.</message> | |
b14eda96 | 77 | <defaults> |
beaafb2e | 78 | <allow_any>no</allow_any> |
b14eda96 LP |
79 | <allow_inactive>yes</allow_inactive> |
80 | <allow_active>yes</allow_active> | |
81 | </defaults> | |
39600155 | 82 | <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.inhibit-handle-suspend-key org.freedesktop.login1.inhibit-handle-hibernate-key org.freedesktop.login1.inhibit-handle-lid-switch</annotate> |
b14eda96 LP |
83 | </action> |
84 | ||
8e7fd6ad | 85 | <action id="org.freedesktop.login1.inhibit-handle-suspend-key"> |
c8121792 ZJS |
86 | <description>Allow applications to inhibit system handling of the suspend key</description> |
87 | <message>Authentication is required for an application to inhibit system handling of the suspend key.</message> | |
8e7fd6ad LP |
88 | <defaults> |
89 | <allow_any>no</allow_any> | |
90 | <allow_inactive>yes</allow_inactive> | |
91 | <allow_active>yes</allow_active> | |
92 | </defaults> | |
39600155 | 93 | <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.inhibit-handle-hibernate-key org.freedesktop.login1.inhibit-handle-lid-switch</annotate> |
8e7fd6ad LP |
94 | </action> |
95 | ||
96 | <action id="org.freedesktop.login1.inhibit-handle-hibernate-key"> | |
c8121792 ZJS |
97 | <description>Allow applications to inhibit system handling of the hibernate key</description> |
98 | <message>Authentication is required for an application to inhibit system handling of the hibernate key.</message> | |
b14eda96 | 99 | <defaults> |
beaafb2e | 100 | <allow_any>no</allow_any> |
b14eda96 LP |
101 | <allow_inactive>yes</allow_inactive> |
102 | <allow_active>yes</allow_active> | |
103 | </defaults> | |
104 | </action> | |
105 | ||
beaafb2e | 106 | <action id="org.freedesktop.login1.inhibit-handle-lid-switch"> |
c8121792 ZJS |
107 | <description>Allow applications to inhibit system handling of the lid switch</description> |
108 | <message>Authentication is required for an application to inhibit system handling of the lid switch.</message> | |
eecd1362 | 109 | <defaults> |
beaafb2e | 110 | <allow_any>no</allow_any> |
eecd1362 LP |
111 | <allow_inactive>yes</allow_inactive> |
112 | <allow_active>yes</allow_active> | |
113 | </defaults> | |
114 | </action> | |
115 | ||
152199f2 | 116 | <action id="org.freedesktop.login1.set-self-linger"> |
c8121792 ZJS |
117 | <description>Allow non-logged-in user to run programs</description> |
118 | <message>Explicit request is required to run programs as a non-logged-in user.</message> | |
152199f2 ZJS |
119 | <defaults> |
120 | <allow_any>yes</allow_any> | |
ac3608cd MB |
121 | <allow_inactive>yes</allow_inactive> |
122 | <allow_active>yes</allow_active> | |
152199f2 ZJS |
123 | </defaults> |
124 | </action> | |
125 | ||
7f7bb946 | 126 | <action id="org.freedesktop.login1.set-user-linger"> |
c8121792 ZJS |
127 | <description>Allow non-logged-in users to run programs</description> |
128 | <message>Authentication is required to run programs as a non-logged-in user.</message> | |
91f9dcaf LP |
129 | <defaults> |
130 | <allow_any>auth_admin_keep</allow_any> | |
131 | <allow_inactive>auth_admin_keep</allow_inactive> | |
132 | <allow_active>auth_admin_keep</allow_active> | |
133 | </defaults> | |
134 | </action> | |
135 | ||
47a26690 | 136 | <action id="org.freedesktop.login1.attach-device"> |
c8121792 ZJS |
137 | <description>Allow attaching devices to seats</description> |
138 | <message>Authentication is required for attaching a device to a seat.</message> | |
47a26690 LP |
139 | <defaults> |
140 | <allow_any>auth_admin_keep</allow_any> | |
141 | <allow_inactive>auth_admin_keep</allow_inactive> | |
142 | <allow_active>auth_admin_keep</allow_active> | |
143 | </defaults> | |
39600155 | 144 | <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.flush-devices</annotate> |
47a26690 LP |
145 | </action> |
146 | ||
b668e064 | 147 | <action id="org.freedesktop.login1.flush-devices"> |
c8121792 ZJS |
148 | <description>Flush device to seat attachments</description> |
149 | <message>Authentication is required for resetting how devices are attached to seats.</message> | |
55af3897 LP |
150 | <defaults> |
151 | <allow_any>auth_admin_keep</allow_any> | |
152 | <allow_inactive>auth_admin_keep</allow_inactive> | |
153 | <allow_active>auth_admin_keep</allow_active> | |
154 | </defaults> | |
155 | </action> | |
156 | ||
157 | <action id="org.freedesktop.login1.power-off"> | |
c8121792 ZJS |
158 | <description>Power off the system</description> |
159 | <message>Authentication is required for powering off the system.</message> | |
55af3897 LP |
160 | <defaults> |
161 | <allow_any>auth_admin_keep</allow_any> | |
162 | <allow_inactive>auth_admin_keep</allow_inactive> | |
163 | <allow_active>yes</allow_active> | |
164 | </defaults> | |
9ef15026 | 165 | <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.set-wall-message</annotate> |
55af3897 LP |
166 | </action> |
167 | ||
168 | <action id="org.freedesktop.login1.power-off-multiple-sessions"> | |
c8121792 ZJS |
169 | <description>Power off the system while other users are logged in</description> |
170 | <message>Authentication is required for powering off the system while other users are logged in.</message> | |
55af3897 LP |
171 | <defaults> |
172 | <allow_any>auth_admin_keep</allow_any> | |
173 | <allow_inactive>auth_admin_keep</allow_inactive> | |
eb6d2338 | 174 | <allow_active>yes</allow_active> |
55af3897 | 175 | </defaults> |
39600155 | 176 | <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.power-off</annotate> |
55af3897 LP |
177 | </action> |
178 | ||
f8e2fb7b | 179 | <action id="org.freedesktop.login1.power-off-ignore-inhibit"> |
c8121792 ZJS |
180 | <description>Power off the system while an application asked to inhibit it</description> |
181 | <message>Authentication is required for powering off the system while an application asked to inhibit it.</message> | |
f8e2fb7b LP |
182 | <defaults> |
183 | <allow_any>auth_admin_keep</allow_any> | |
184 | <allow_inactive>auth_admin_keep</allow_inactive> | |
185 | <allow_active>auth_admin_keep</allow_active> | |
186 | </defaults> | |
39600155 | 187 | <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.power-off</annotate> |
f8e2fb7b LP |
188 | </action> |
189 | ||
55af3897 | 190 | <action id="org.freedesktop.login1.reboot"> |
c8121792 ZJS |
191 | <description>Reboot the system</description> |
192 | <message>Authentication is required for rebooting the system.</message> | |
55af3897 LP |
193 | <defaults> |
194 | <allow_any>auth_admin_keep</allow_any> | |
195 | <allow_inactive>auth_admin_keep</allow_inactive> | |
196 | <allow_active>yes</allow_active> | |
197 | </defaults> | |
9ef15026 | 198 | <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.set-wall-message</annotate> |
55af3897 LP |
199 | </action> |
200 | ||
201 | <action id="org.freedesktop.login1.reboot-multiple-sessions"> | |
c8121792 ZJS |
202 | <description>Reboot the system while other users are logged in</description> |
203 | <message>Authentication is required for rebooting the system while other users are logged in.</message> | |
b668e064 LP |
204 | <defaults> |
205 | <allow_any>auth_admin_keep</allow_any> | |
206 | <allow_inactive>auth_admin_keep</allow_inactive> | |
299404a1 | 207 | <allow_active>yes</allow_active> |
b668e064 | 208 | </defaults> |
39600155 | 209 | <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.reboot</annotate> |
b668e064 LP |
210 | </action> |
211 | ||
f8e2fb7b | 212 | <action id="org.freedesktop.login1.reboot-ignore-inhibit"> |
c8121792 ZJS |
213 | <description>Reboot the system while an application asked to inhibit it</description> |
214 | <message>Authentication is required for rebooting the system while an application asked to inhibit it.</message> | |
d889a206 LP |
215 | <defaults> |
216 | <allow_any>auth_admin_keep</allow_any> | |
217 | <allow_inactive>auth_admin_keep</allow_inactive> | |
218 | <allow_active>auth_admin_keep</allow_active> | |
219 | </defaults> | |
39600155 | 220 | <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.reboot</annotate> |
d889a206 LP |
221 | </action> |
222 | ||
36b69c31 | 223 | <action id="org.freedesktop.login1.halt"> |
c8121792 ZJS |
224 | <description>Halt the system</description> |
225 | <message>Authentication is required for halting the system.</message> | |
36b69c31 LP |
226 | <defaults> |
227 | <allow_any>auth_admin_keep</allow_any> | |
228 | <allow_inactive>auth_admin_keep</allow_inactive> | |
229 | <allow_active>auth_admin_keep</allow_active> | |
230 | </defaults> | |
231 | <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.set-wall-message</annotate> | |
232 | </action> | |
233 | ||
234 | <action id="org.freedesktop.login1.halt-multiple-sessions"> | |
c8121792 ZJS |
235 | <description>Halt the system while other users are logged in</description> |
236 | <message>Authentication is required for halting the system while other users are logged in.</message> | |
36b69c31 LP |
237 | <defaults> |
238 | <allow_any>auth_admin_keep</allow_any> | |
239 | <allow_inactive>auth_admin_keep</allow_inactive> | |
240 | <allow_active>auth_admin_keep</allow_active> | |
241 | </defaults> | |
242 | <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.halt</annotate> | |
243 | </action> | |
244 | ||
245 | <action id="org.freedesktop.login1.halt-ignore-inhibit"> | |
c8121792 ZJS |
246 | <description>Halt the system while an application asked to inhibit it</description> |
247 | <message>Authentication is required for halting the system while an application asked to inhibit it.</message> | |
36b69c31 LP |
248 | <defaults> |
249 | <allow_any>auth_admin_keep</allow_any> | |
250 | <allow_inactive>auth_admin_keep</allow_inactive> | |
251 | <allow_active>auth_admin_keep</allow_active> | |
252 | </defaults> | |
253 | <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.halt</annotate> | |
254 | </action> | |
255 | ||
d889a206 | 256 | <action id="org.freedesktop.login1.suspend"> |
c8121792 ZJS |
257 | <description>Suspend the system</description> |
258 | <message>Authentication is required for suspending the system.</message> | |
d889a206 LP |
259 | <defaults> |
260 | <allow_any>auth_admin_keep</allow_any> | |
261 | <allow_inactive>auth_admin_keep</allow_inactive> | |
262 | <allow_active>yes</allow_active> | |
263 | </defaults> | |
264 | </action> | |
265 | ||
266 | <action id="org.freedesktop.login1.suspend-multiple-sessions"> | |
c8121792 ZJS |
267 | <description>Suspend the system while other users are logged in</description> |
268 | <message>Authentication is required for suspending the system while other users are logged in.</message> | |
d889a206 LP |
269 | <defaults> |
270 | <allow_any>auth_admin_keep</allow_any> | |
271 | <allow_inactive>auth_admin_keep</allow_inactive> | |
9d17cf3e | 272 | <allow_active>yes</allow_active> |
d889a206 | 273 | </defaults> |
39600155 | 274 | <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.suspend</annotate> |
d889a206 LP |
275 | </action> |
276 | ||
277 | <action id="org.freedesktop.login1.suspend-ignore-inhibit"> | |
c8121792 ZJS |
278 | <description>Suspend the system while an application asked to inhibit it</description> |
279 | <message>Authentication is required for suspending the system while an application asked to inhibit it.</message> | |
d889a206 LP |
280 | <defaults> |
281 | <allow_any>auth_admin_keep</allow_any> | |
282 | <allow_inactive>auth_admin_keep</allow_inactive> | |
283 | <allow_active>auth_admin_keep</allow_active> | |
284 | </defaults> | |
39600155 | 285 | <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.suspend</annotate> |
d889a206 LP |
286 | </action> |
287 | ||
288 | <action id="org.freedesktop.login1.hibernate"> | |
c8121792 ZJS |
289 | <description>Hibernate the system</description> |
290 | <message>Authentication is required for hibernating the system.</message> | |
d889a206 LP |
291 | <defaults> |
292 | <allow_any>auth_admin_keep</allow_any> | |
293 | <allow_inactive>auth_admin_keep</allow_inactive> | |
294 | <allow_active>yes</allow_active> | |
295 | </defaults> | |
296 | </action> | |
297 | ||
298 | <action id="org.freedesktop.login1.hibernate-multiple-sessions"> | |
c8121792 ZJS |
299 | <description>Hibernate the system while other users are logged in</description> |
300 | <message>Authentication is required for hibernating the system while other users are logged in.</message> | |
d889a206 LP |
301 | <defaults> |
302 | <allow_any>auth_admin_keep</allow_any> | |
303 | <allow_inactive>auth_admin_keep</allow_inactive> | |
301f9684 | 304 | <allow_active>yes</allow_active> |
d889a206 | 305 | </defaults> |
39600155 | 306 | <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.hibernate</annotate> |
d889a206 LP |
307 | </action> |
308 | ||
309 | <action id="org.freedesktop.login1.hibernate-ignore-inhibit"> | |
c8121792 ZJS |
310 | <description>Hibernate the system while an application asked to inhibit it</description> |
311 | <message>Authentication is required for hibernating the system while an application asked to inhibit it.</message> | |
f8e2fb7b LP |
312 | <defaults> |
313 | <allow_any>auth_admin_keep</allow_any> | |
314 | <allow_inactive>auth_admin_keep</allow_inactive> | |
315 | <allow_active>auth_admin_keep</allow_active> | |
316 | </defaults> | |
39600155 | 317 | <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.hibernate</annotate> |
f8e2fb7b LP |
318 | </action> |
319 | ||
c529695e | 320 | <action id="org.freedesktop.login1.manage"> |
c8121792 ZJS |
321 | <description>Manage active sessions, users and seats</description> |
322 | <message>Authentication is required for managing active sessions, users and seats.</message> | |
c529695e LP |
323 | <defaults> |
324 | <allow_any>auth_admin_keep</allow_any> | |
325 | <allow_inactive>auth_admin_keep</allow_inactive> | |
326 | <allow_active>auth_admin_keep</allow_active> | |
327 | </defaults> | |
328 | </action> | |
329 | ||
330 | <action id="org.freedesktop.login1.lock-sessions"> | |
c8121792 ZJS |
331 | <description>Lock or unlock active sessions</description> |
332 | <message>Authentication is required to lock or unlock active sessions.</message> | |
c529695e LP |
333 | <defaults> |
334 | <allow_any>auth_admin_keep</allow_any> | |
335 | <allow_inactive>auth_admin_keep</allow_inactive> | |
336 | <allow_active>auth_admin_keep</allow_active> | |
337 | </defaults> | |
338 | </action> | |
339 | ||
5bdf2243 | 340 | <action id="org.freedesktop.login1.set-reboot-to-firmware-setup"> |
c8121792 ZJS |
341 | <description>Allow indication to the firmware to boot to setup interface</description> |
342 | <message>Authentication is required to indicate to the firmware to boot to setup interface.</message> | |
5bdf2243 JJ |
343 | <defaults> |
344 | <allow_any>auth_admin_keep</allow_any> | |
345 | <allow_inactive>auth_admin_keep</allow_inactive> | |
346 | <allow_active>auth_admin_keep</allow_active> | |
347 | </defaults> | |
348 | </action> | |
349 | ||
9ef15026 | 350 | <action id="org.freedesktop.login1.set-wall-message"> |
c8121792 ZJS |
351 | <description>Set a wall message</description> |
352 | <message>Authentication is required to set a wall message</message> | |
9ef15026 JS |
353 | <defaults> |
354 | <allow_any>auth_admin_keep</allow_any> | |
355 | <allow_inactive>auth_admin_keep</allow_inactive> | |
356 | <allow_active>auth_admin_keep</allow_active> | |
357 | </defaults> | |
358 | </action> | |
359 | ||
91f9dcaf | 360 | </policyconfig> |