]>
Commit | Line | Data |
---|---|---|
d04c1fb8 LP |
1 | <?xml version="1.0" encoding="UTF-8"?> <!--*-nxml-*--> |
2 | <!DOCTYPE policyconfig PUBLIC "-//freedesktop//DTD PolicyKit Policy Configuration 1.0//EN" | |
3 | "http://www.freedesktop.org/standards/PolicyKit/1/policyconfig.dtd"> | |
4 | ||
5 | <!-- | |
d9215cd8 ZJS |
6 | SPDX-License-Identifier: LGPL-2.1+ |
7 | ||
d04c1fb8 LP |
8 | This file is part of systemd. |
9 | ||
10 | systemd is free software; you can redistribute it and/or modify it | |
11 | under the terms of the GNU Lesser General Public License as published by | |
12 | the Free Software Foundation; either version 2.1 of the License, or | |
13 | (at your option) any later version. | |
14 | --> | |
15 | ||
16 | <policyconfig> | |
17 | ||
18 | <vendor>The systemd Project</vendor> | |
19 | <vendor_url>http://www.freedesktop.org/wiki/Software/systemd</vendor_url> | |
20 | ||
21 | <action id="org.freedesktop.machine1.login"> | |
264d8dcc GH |
22 | <description gettext-domain="systemd">Log into a local container</description> |
23 | <message gettext-domain="systemd">Authentication is required to log into a local container.</message> | |
70244d1d LP |
24 | <defaults> |
25 | <allow_any>auth_admin</allow_any> | |
26 | <allow_inactive>auth_admin</allow_inactive> | |
27 | <allow_active>auth_admin_keep</allow_active> | |
28 | </defaults> | |
29 | </action> | |
30 | ||
4289c3a7 | 31 | <action id="org.freedesktop.machine1.host-login"> |
264d8dcc GH |
32 | <description gettext-domain="systemd">Log into the local host</description> |
33 | <message gettext-domain="systemd">Authentication is required to log into the local host.</message> | |
4289c3a7 LP |
34 | <defaults> |
35 | <allow_any>auth_admin</allow_any> | |
36 | <allow_inactive>auth_admin</allow_inactive> | |
37 | <allow_active>yes</allow_active> | |
38 | </defaults> | |
39 | </action> | |
40 | ||
41 | <action id="org.freedesktop.machine1.shell"> | |
264d8dcc GH |
42 | <description gettext-domain="systemd">Acquire a shell in a local container</description> |
43 | <message gettext-domain="systemd">Authentication is required to acquire a shell in a local container.</message> | |
4289c3a7 LP |
44 | <defaults> |
45 | <allow_any>auth_admin</allow_any> | |
46 | <allow_inactive>auth_admin</allow_inactive> | |
47 | <allow_active>auth_admin_keep</allow_active> | |
48 | </defaults> | |
49 | <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.login</annotate> | |
50 | </action> | |
51 | ||
52 | <action id="org.freedesktop.machine1.host-shell"> | |
264d8dcc GH |
53 | <description gettext-domain="systemd">Acquire a shell on the local host</description> |
54 | <message gettext-domain="systemd">Authentication is required to acquire a shell on the local host.</message> | |
4289c3a7 LP |
55 | <defaults> |
56 | <allow_any>auth_admin</allow_any> | |
57 | <allow_inactive>auth_admin</allow_inactive> | |
58 | <allow_active>auth_admin_keep</allow_active> | |
59 | </defaults> | |
60 | <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.host-login</annotate> | |
61 | </action> | |
62 | ||
fbe55073 | 63 | <action id="org.freedesktop.machine1.open-pty"> |
264d8dcc GH |
64 | <description gettext-domain="systemd">Acquire a pseudo TTY in a local container</description> |
65 | <message gettext-domain="systemd">Authentication is required to acquire a pseudo TTY in a local container.</message> | |
fbe55073 LP |
66 | <defaults> |
67 | <allow_any>auth_admin</allow_any> | |
68 | <allow_inactive>auth_admin</allow_inactive> | |
69 | <allow_active>auth_admin_keep</allow_active> | |
70 | </defaults> | |
71 | </action> | |
72 | ||
4289c3a7 | 73 | <action id="org.freedesktop.machine1.host-open-pty"> |
264d8dcc GH |
74 | <description gettext-domain="systemd">Acquire a pseudo TTY on the local host</description> |
75 | <message gettext-domain="systemd">Authentication is required to acquire a pseudo TTY on the local host.</message> | |
49af9e13 LP |
76 | <defaults> |
77 | <allow_any>auth_admin</allow_any> | |
78 | <allow_inactive>auth_admin</allow_inactive> | |
79 | <allow_active>auth_admin_keep</allow_active> | |
80 | </defaults> | |
81 | </action> | |
82 | ||
70244d1d | 83 | <action id="org.freedesktop.machine1.manage-machines"> |
264d8dcc GH |
84 | <description gettext-domain="systemd">Manage local virtual machines and containers</description> |
85 | <message gettext-domain="systemd">Authentication is required to manage local virtual machines and containers.</message> | |
70244d1d LP |
86 | <defaults> |
87 | <allow_any>auth_admin</allow_any> | |
88 | <allow_inactive>auth_admin</allow_inactive> | |
89 | <allow_active>auth_admin_keep</allow_active> | |
90 | </defaults> | |
4289c3a7 | 91 | <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.shell org.freedesktop.login1.login</annotate> |
70244d1d LP |
92 | </action> |
93 | ||
94 | <action id="org.freedesktop.machine1.manage-images"> | |
264d8dcc GH |
95 | <description gettext-domain="systemd">Manage local virtual machine and container images</description> |
96 | <message gettext-domain="systemd">Authentication is required to manage local virtual machine and container images.</message> | |
d04c1fb8 LP |
97 | <defaults> |
98 | <allow_any>auth_admin</allow_any> | |
99 | <allow_inactive>auth_admin</allow_inactive> | |
100 | <allow_active>auth_admin_keep</allow_active> | |
101 | </defaults> | |
102 | </action> | |
103 | ||
104 | </policyconfig> |