]>
Commit | Line | Data |
---|---|---|
91f9dcaf LP |
1 | <?xml version="1.0" encoding="UTF-8"?> <!--*-nxml-*--> |
2 | <!DOCTYPE policyconfig PUBLIC "-//freedesktop//DTD PolicyKit Policy Configuration 1.0//EN" | |
3 | "http://www.freedesktop.org/standards/PolicyKit/1/policyconfig.dtd"> | |
4 | ||
5 | <!-- | |
6 | This file is part of systemd. | |
7 | ||
8 | systemd is free software; you can redistribute it and/or modify it | |
5430f7f2 LP |
9 | under the terms of the GNU Lesser General Public License as published by |
10 | the Free Software Foundation; either version 2.1 of the License, or | |
91f9dcaf LP |
11 | (at your option) any later version. |
12 | --> | |
13 | ||
14 | <policyconfig> | |
15 | ||
16 | <vendor>The systemd Project</vendor> | |
17 | <vendor_url>http://www.freedesktop.org/wiki/Software/systemd</vendor_url> | |
18 | ||
b14eda96 LP |
19 | <action id="org.freedesktop.login1.inhibit-block-shutdown"> |
20 | <_description>Allow applications to inhibit system shutdown</_description> | |
2e219e56 | 21 | <_message>Authentication is required for an application to inhibit system shutdown.</_message> |
f8e2fb7b | 22 | <defaults> |
beaafb2e LP |
23 | <allow_any>no</allow_any> |
24 | <allow_inactive>yes</allow_inactive> | |
25 | <allow_active>yes</allow_active> | |
26 | </defaults> | |
39600155 | 27 | <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.inhibit-delay-shutdown org.freedesktop.login1.inhibit-block-sleep org.freedesktop.login1.inhibit-delay-sleep org.freedesktop.login1.inhibit-block-idle</annotate> |
beaafb2e LP |
28 | </action> |
29 | ||
30 | <action id="org.freedesktop.login1.inhibit-delay-shutdown"> | |
31 | <_description>Allow applications to delay system shutdown</_description> | |
2e219e56 | 32 | <_message>Authentication is required for an application to delay system shutdown.</_message> |
beaafb2e LP |
33 | <defaults> |
34 | <allow_any>yes</allow_any> | |
f8e2fb7b LP |
35 | <allow_inactive>yes</allow_inactive> |
36 | <allow_active>yes</allow_active> | |
37 | </defaults> | |
39600155 | 38 | <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.inhibit-delay-sleep</annotate> |
f8e2fb7b LP |
39 | </action> |
40 | ||
b14eda96 LP |
41 | <action id="org.freedesktop.login1.inhibit-block-sleep"> |
42 | <_description>Allow applications to inhibit system sleep</_description> | |
2e219e56 | 43 | <_message>Authentication is required for an application to inhibit system sleep.</_message> |
b14eda96 | 44 | <defaults> |
beaafb2e LP |
45 | <allow_any>no</allow_any> |
46 | <allow_inactive>yes</allow_inactive> | |
47 | <allow_active>yes</allow_active> | |
48 | </defaults> | |
39600155 | 49 | <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.inhibit-delay-sleep org.freedesktop.login1.inhibit-block-idle</annotate> |
beaafb2e LP |
50 | </action> |
51 | ||
52 | <action id="org.freedesktop.login1.inhibit-delay-sleep"> | |
53 | <_description>Allow applications to delay system sleep</_description> | |
2e219e56 | 54 | <_message>Authentication is required for an application to delay system sleep.</_message> |
beaafb2e LP |
55 | <defaults> |
56 | <allow_any>yes</allow_any> | |
b14eda96 LP |
57 | <allow_inactive>yes</allow_inactive> |
58 | <allow_active>yes</allow_active> | |
59 | </defaults> | |
60 | </action> | |
61 | ||
62 | <action id="org.freedesktop.login1.inhibit-block-idle"> | |
63 | <_description>Allow applications to inhibit automatic system suspend</_description> | |
2e219e56 | 64 | <_message>Authentication is required for an application to inhibit automatic system suspend.</_message> |
b14eda96 LP |
65 | <defaults> |
66 | <allow_any>yes</allow_any> | |
67 | <allow_inactive>yes</allow_inactive> | |
68 | <allow_active>yes</allow_active> | |
69 | </defaults> | |
70 | </action> | |
71 | ||
beaafb2e LP |
72 | <action id="org.freedesktop.login1.inhibit-handle-power-key"> |
73 | <_description>Allow applications to inhibit system handling of the power key</_description> | |
2e219e56 | 74 | <_message>Authentication is required for an application to inhibit system handling of the power key.</_message> |
b14eda96 | 75 | <defaults> |
beaafb2e | 76 | <allow_any>no</allow_any> |
b14eda96 LP |
77 | <allow_inactive>yes</allow_inactive> |
78 | <allow_active>yes</allow_active> | |
79 | </defaults> | |
39600155 | 80 | <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.inhibit-handle-suspend-key org.freedesktop.login1.inhibit-handle-hibernate-key org.freedesktop.login1.inhibit-handle-lid-switch</annotate> |
b14eda96 LP |
81 | </action> |
82 | ||
8e7fd6ad LP |
83 | <action id="org.freedesktop.login1.inhibit-handle-suspend-key"> |
84 | <_description>Allow applications to inhibit system handling of the suspend key</_description> | |
2e219e56 | 85 | <_message>Authentication is required for an application to inhibit system handling of the suspend key.</_message> |
8e7fd6ad LP |
86 | <defaults> |
87 | <allow_any>no</allow_any> | |
88 | <allow_inactive>yes</allow_inactive> | |
89 | <allow_active>yes</allow_active> | |
90 | </defaults> | |
39600155 | 91 | <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.inhibit-handle-hibernate-key org.freedesktop.login1.inhibit-handle-lid-switch</annotate> |
8e7fd6ad LP |
92 | </action> |
93 | ||
94 | <action id="org.freedesktop.login1.inhibit-handle-hibernate-key"> | |
95 | <_description>Allow applications to inhibit system handling of the hibernate key</_description> | |
2e219e56 | 96 | <_message>Authentication is required for an application to inhibit system handling of the hibernate key.</_message> |
b14eda96 | 97 | <defaults> |
beaafb2e | 98 | <allow_any>no</allow_any> |
b14eda96 LP |
99 | <allow_inactive>yes</allow_inactive> |
100 | <allow_active>yes</allow_active> | |
101 | </defaults> | |
102 | </action> | |
103 | ||
beaafb2e LP |
104 | <action id="org.freedesktop.login1.inhibit-handle-lid-switch"> |
105 | <_description>Allow applications to inhibit system handling of the lid switch</_description> | |
2e219e56 | 106 | <_message>Authentication is required for an application to inhibit system handling of the lid switch.</_message> |
eecd1362 | 107 | <defaults> |
beaafb2e | 108 | <allow_any>no</allow_any> |
eecd1362 LP |
109 | <allow_inactive>yes</allow_inactive> |
110 | <allow_active>yes</allow_active> | |
111 | </defaults> | |
112 | </action> | |
113 | ||
152199f2 ZJS |
114 | <action id="org.freedesktop.login1.set-self-linger"> |
115 | <_description>Allow non-logged-in user to run programs</_description> | |
116 | <_message>Explicit request is required to run programs as a non-logged-in user.</_message> | |
117 | <defaults> | |
118 | <allow_any>yes</allow_any> | |
ac3608cd MB |
119 | <allow_inactive>yes</allow_inactive> |
120 | <allow_active>yes</allow_active> | |
152199f2 ZJS |
121 | </defaults> |
122 | </action> | |
123 | ||
7f7bb946 | 124 | <action id="org.freedesktop.login1.set-user-linger"> |
1c7dde3e | 125 | <_description>Allow non-logged-in users to run programs</_description> |
2e219e56 | 126 | <_message>Authentication is required to run programs as a non-logged-in user.</_message> |
91f9dcaf LP |
127 | <defaults> |
128 | <allow_any>auth_admin_keep</allow_any> | |
129 | <allow_inactive>auth_admin_keep</allow_inactive> | |
130 | <allow_active>auth_admin_keep</allow_active> | |
131 | </defaults> | |
132 | </action> | |
133 | ||
47a26690 | 134 | <action id="org.freedesktop.login1.attach-device"> |
1c7dde3e | 135 | <_description>Allow attaching devices to seats</_description> |
d889a206 | 136 | <_message>Authentication is required for attaching a device to a seat.</_message> |
47a26690 LP |
137 | <defaults> |
138 | <allow_any>auth_admin_keep</allow_any> | |
139 | <allow_inactive>auth_admin_keep</allow_inactive> | |
140 | <allow_active>auth_admin_keep</allow_active> | |
141 | </defaults> | |
39600155 | 142 | <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.flush-devices</annotate> |
47a26690 LP |
143 | </action> |
144 | ||
b668e064 | 145 | <action id="org.freedesktop.login1.flush-devices"> |
1c7dde3e | 146 | <_description>Flush device to seat attachments</_description> |
d889a206 | 147 | <_message>Authentication is required for resetting how devices are attached to seats.</_message> |
55af3897 LP |
148 | <defaults> |
149 | <allow_any>auth_admin_keep</allow_any> | |
150 | <allow_inactive>auth_admin_keep</allow_inactive> | |
151 | <allow_active>auth_admin_keep</allow_active> | |
152 | </defaults> | |
153 | </action> | |
154 | ||
155 | <action id="org.freedesktop.login1.power-off"> | |
156 | <_description>Power off the system</_description> | |
d889a206 | 157 | <_message>Authentication is required for powering off the system.</_message> |
55af3897 LP |
158 | <defaults> |
159 | <allow_any>auth_admin_keep</allow_any> | |
160 | <allow_inactive>auth_admin_keep</allow_inactive> | |
161 | <allow_active>yes</allow_active> | |
162 | </defaults> | |
9ef15026 | 163 | <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.set-wall-message</annotate> |
55af3897 LP |
164 | </action> |
165 | ||
166 | <action id="org.freedesktop.login1.power-off-multiple-sessions"> | |
d889a206 LP |
167 | <_description>Power off the system while other users are logged in</_description> |
168 | <_message>Authentication is required for powering off the system while other users are logged in.</_message> | |
55af3897 LP |
169 | <defaults> |
170 | <allow_any>auth_admin_keep</allow_any> | |
171 | <allow_inactive>auth_admin_keep</allow_inactive> | |
eb6d2338 | 172 | <allow_active>yes</allow_active> |
55af3897 | 173 | </defaults> |
39600155 | 174 | <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.power-off</annotate> |
55af3897 LP |
175 | </action> |
176 | ||
f8e2fb7b | 177 | <action id="org.freedesktop.login1.power-off-ignore-inhibit"> |
d889a206 LP |
178 | <_description>Power off the system while an application asked to inhibit it</_description> |
179 | <_message>Authentication is required for powering off the system while an application asked to inhibit it.</_message> | |
f8e2fb7b LP |
180 | <defaults> |
181 | <allow_any>auth_admin_keep</allow_any> | |
182 | <allow_inactive>auth_admin_keep</allow_inactive> | |
183 | <allow_active>auth_admin_keep</allow_active> | |
184 | </defaults> | |
39600155 | 185 | <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.power-off</annotate> |
f8e2fb7b LP |
186 | </action> |
187 | ||
55af3897 LP |
188 | <action id="org.freedesktop.login1.reboot"> |
189 | <_description>Reboot the system</_description> | |
d889a206 | 190 | <_message>Authentication is required for rebooting the system.</_message> |
55af3897 LP |
191 | <defaults> |
192 | <allow_any>auth_admin_keep</allow_any> | |
193 | <allow_inactive>auth_admin_keep</allow_inactive> | |
194 | <allow_active>yes</allow_active> | |
195 | </defaults> | |
9ef15026 | 196 | <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.set-wall-message</annotate> |
55af3897 LP |
197 | </action> |
198 | ||
199 | <action id="org.freedesktop.login1.reboot-multiple-sessions"> | |
d889a206 LP |
200 | <_description>Reboot the system while other users are logged in</_description> |
201 | <_message>Authentication is required for rebooting the system while other users are logged in.</_message> | |
b668e064 LP |
202 | <defaults> |
203 | <allow_any>auth_admin_keep</allow_any> | |
204 | <allow_inactive>auth_admin_keep</allow_inactive> | |
299404a1 | 205 | <allow_active>yes</allow_active> |
b668e064 | 206 | </defaults> |
39600155 | 207 | <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.reboot</annotate> |
b668e064 LP |
208 | </action> |
209 | ||
f8e2fb7b | 210 | <action id="org.freedesktop.login1.reboot-ignore-inhibit"> |
d889a206 LP |
211 | <_description>Reboot the system while an application asked to inhibit it</_description> |
212 | <_message>Authentication is required for rebooting the system while an application asked to inhibit it.</_message> | |
213 | <defaults> | |
214 | <allow_any>auth_admin_keep</allow_any> | |
215 | <allow_inactive>auth_admin_keep</allow_inactive> | |
216 | <allow_active>auth_admin_keep</allow_active> | |
217 | </defaults> | |
39600155 | 218 | <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.reboot</annotate> |
d889a206 LP |
219 | </action> |
220 | ||
221 | <action id="org.freedesktop.login1.suspend"> | |
222 | <_description>Suspend the system</_description> | |
223 | <_message>Authentication is required for suspending the system.</_message> | |
224 | <defaults> | |
225 | <allow_any>auth_admin_keep</allow_any> | |
226 | <allow_inactive>auth_admin_keep</allow_inactive> | |
227 | <allow_active>yes</allow_active> | |
228 | </defaults> | |
229 | </action> | |
230 | ||
231 | <action id="org.freedesktop.login1.suspend-multiple-sessions"> | |
232 | <_description>Suspend the system while other users are logged in</_description> | |
233 | <_message>Authentication is required for suspending the system while other users are logged in.</_message> | |
234 | <defaults> | |
235 | <allow_any>auth_admin_keep</allow_any> | |
236 | <allow_inactive>auth_admin_keep</allow_inactive> | |
9d17cf3e | 237 | <allow_active>yes</allow_active> |
d889a206 | 238 | </defaults> |
39600155 | 239 | <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.suspend</annotate> |
d889a206 LP |
240 | </action> |
241 | ||
242 | <action id="org.freedesktop.login1.suspend-ignore-inhibit"> | |
243 | <_description>Suspend the system while an application asked to inhibit it</_description> | |
244 | <_message>Authentication is required for suspending the system while an application asked to inhibit it.</_message> | |
245 | <defaults> | |
246 | <allow_any>auth_admin_keep</allow_any> | |
247 | <allow_inactive>auth_admin_keep</allow_inactive> | |
248 | <allow_active>auth_admin_keep</allow_active> | |
249 | </defaults> | |
39600155 | 250 | <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.suspend</annotate> |
d889a206 LP |
251 | </action> |
252 | ||
253 | <action id="org.freedesktop.login1.hibernate"> | |
254 | <_description>Hibernate the system</_description> | |
255 | <_message>Authentication is required for hibernating the system.</_message> | |
256 | <defaults> | |
257 | <allow_any>auth_admin_keep</allow_any> | |
258 | <allow_inactive>auth_admin_keep</allow_inactive> | |
259 | <allow_active>yes</allow_active> | |
260 | </defaults> | |
261 | </action> | |
262 | ||
263 | <action id="org.freedesktop.login1.hibernate-multiple-sessions"> | |
264 | <_description>Hibernate the system while other users are logged in</_description> | |
265 | <_message>Authentication is required for hibernating the system while other users are logged in.</_message> | |
266 | <defaults> | |
267 | <allow_any>auth_admin_keep</allow_any> | |
268 | <allow_inactive>auth_admin_keep</allow_inactive> | |
301f9684 | 269 | <allow_active>yes</allow_active> |
d889a206 | 270 | </defaults> |
39600155 | 271 | <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.hibernate</annotate> |
d889a206 LP |
272 | </action> |
273 | ||
274 | <action id="org.freedesktop.login1.hibernate-ignore-inhibit"> | |
275 | <_description>Hibernate the system while an application asked to inhibit it</_description> | |
276 | <_message>Authentication is required for hibernating the system while an application asked to inhibit it.</_message> | |
f8e2fb7b LP |
277 | <defaults> |
278 | <allow_any>auth_admin_keep</allow_any> | |
279 | <allow_inactive>auth_admin_keep</allow_inactive> | |
280 | <allow_active>auth_admin_keep</allow_active> | |
281 | </defaults> | |
39600155 | 282 | <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.hibernate</annotate> |
f8e2fb7b LP |
283 | </action> |
284 | ||
c529695e | 285 | <action id="org.freedesktop.login1.manage"> |
6be9b360 | 286 | <_description>Manage active sessions, users and seats</_description> |
c529695e LP |
287 | <_message>Authentication is required for managing active sessions, users and seats.</_message> |
288 | <defaults> | |
289 | <allow_any>auth_admin_keep</allow_any> | |
290 | <allow_inactive>auth_admin_keep</allow_inactive> | |
291 | <allow_active>auth_admin_keep</allow_active> | |
292 | </defaults> | |
293 | </action> | |
294 | ||
295 | <action id="org.freedesktop.login1.lock-sessions"> | |
296 | <_description>Lock or unlock active sessions</_description> | |
ec574c5e | 297 | <_message>Authentication is required to lock or unlock active sessions.</_message> |
c529695e LP |
298 | <defaults> |
299 | <allow_any>auth_admin_keep</allow_any> | |
300 | <allow_inactive>auth_admin_keep</allow_inactive> | |
301 | <allow_active>auth_admin_keep</allow_active> | |
302 | </defaults> | |
303 | </action> | |
304 | ||
5bdf2243 JJ |
305 | <action id="org.freedesktop.login1.set-reboot-to-firmware-setup"> |
306 | <_description>Allow indication to the firmware to boot to setup interface</_description> | |
307 | <_message>Authentication is required to indicate to the firmware to boot to setup interface.</_message> | |
308 | <defaults> | |
309 | <allow_any>auth_admin_keep</allow_any> | |
310 | <allow_inactive>auth_admin_keep</allow_inactive> | |
311 | <allow_active>auth_admin_keep</allow_active> | |
312 | </defaults> | |
313 | </action> | |
314 | ||
9ef15026 JS |
315 | <action id="org.freedesktop.login1.set-wall-message"> |
316 | <_description>Set a wall message</_description> | |
317 | <_message>Authentication is required to set a wall message</_message> | |
318 | <defaults> | |
319 | <allow_any>auth_admin_keep</allow_any> | |
320 | <allow_inactive>auth_admin_keep</allow_inactive> | |
321 | <allow_active>auth_admin_keep</allow_active> | |
322 | </defaults> | |
323 | </action> | |
324 | ||
91f9dcaf | 325 | </policyconfig> |