1 <?xml version="1.0" encoding="UTF-8"?> <!--*-nxml-*-->
2 <!DOCTYPE policyconfig PUBLIC "-//freedesktop//DTD PolicyKit Policy Configuration 1.0//EN"
3 "http://www.freedesktop.org/standards/PolicyKit/1/policyconfig.dtd">
6 SPDX-License-Identifier: LGPL-2.1+
8 This file is part of systemd.
10 systemd is free software; you can redistribute it and/or modify it
11 under the terms of the GNU Lesser General Public License as published by
12 the Free Software Foundation; either version 2.1 of the License, or
13 (at your option) any later version.
18 <vendor>The systemd Project</vendor>
19 <vendor_url>http://www.freedesktop.org/wiki/Software/systemd</vendor_url>
21 <action id="org.freedesktop.login1.inhibit-block-shutdown">
22 <description>Allow applications to inhibit system shutdown</description>
23 <message>Authentication is required for an application to inhibit system shutdown.</message>
25 <allow_any>no</allow_any>
26 <allow_inactive>yes</allow_inactive>
27 <allow_active>yes</allow_active>
29 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.inhibit-delay-shutdown org.freedesktop.login1.inhibit-block-sleep org.freedesktop.login1.inhibit-delay-sleep org.freedesktop.login1.inhibit-block-idle</annotate>
32 <action id="org.freedesktop.login1.inhibit-delay-shutdown">
33 <description>Allow applications to delay system shutdown</description>
34 <message>Authentication is required for an application to delay system shutdown.</message>
36 <allow_any>yes</allow_any>
37 <allow_inactive>yes</allow_inactive>
38 <allow_active>yes</allow_active>
40 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.inhibit-delay-sleep</annotate>
43 <action id="org.freedesktop.login1.inhibit-block-sleep">
44 <description>Allow applications to inhibit system sleep</description>
45 <message>Authentication is required for an application to inhibit system sleep.</message>
47 <allow_any>no</allow_any>
48 <allow_inactive>yes</allow_inactive>
49 <allow_active>yes</allow_active>
51 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.inhibit-delay-sleep org.freedesktop.login1.inhibit-block-idle</annotate>
54 <action id="org.freedesktop.login1.inhibit-delay-sleep">
55 <description>Allow applications to delay system sleep</description>
56 <message>Authentication is required for an application to delay system sleep.</message>
58 <allow_any>yes</allow_any>
59 <allow_inactive>yes</allow_inactive>
60 <allow_active>yes</allow_active>
64 <action id="org.freedesktop.login1.inhibit-block-idle">
65 <description>Allow applications to inhibit automatic system suspend</description>
66 <message>Authentication is required for an application to inhibit automatic system suspend.</message>
68 <allow_any>yes</allow_any>
69 <allow_inactive>yes</allow_inactive>
70 <allow_active>yes</allow_active>
74 <action id="org.freedesktop.login1.inhibit-handle-power-key">
75 <description>Allow applications to inhibit system handling of the power key</description>
76 <message>Authentication is required for an application to inhibit system handling of the power key.</message>
78 <allow_any>no</allow_any>
79 <allow_inactive>yes</allow_inactive>
80 <allow_active>yes</allow_active>
82 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.inhibit-handle-suspend-key org.freedesktop.login1.inhibit-handle-hibernate-key org.freedesktop.login1.inhibit-handle-lid-switch</annotate>
85 <action id="org.freedesktop.login1.inhibit-handle-suspend-key">
86 <description>Allow applications to inhibit system handling of the suspend key</description>
87 <message>Authentication is required for an application to inhibit system handling of the suspend key.</message>
89 <allow_any>no</allow_any>
90 <allow_inactive>yes</allow_inactive>
91 <allow_active>yes</allow_active>
93 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.inhibit-handle-hibernate-key org.freedesktop.login1.inhibit-handle-lid-switch</annotate>
96 <action id="org.freedesktop.login1.inhibit-handle-hibernate-key">
97 <description>Allow applications to inhibit system handling of the hibernate key</description>
98 <message>Authentication is required for an application to inhibit system handling of the hibernate key.</message>
100 <allow_any>no</allow_any>
101 <allow_inactive>yes</allow_inactive>
102 <allow_active>yes</allow_active>
106 <action id="org.freedesktop.login1.inhibit-handle-lid-switch">
107 <description>Allow applications to inhibit system handling of the lid switch</description>
108 <message>Authentication is required for an application to inhibit system handling of the lid switch.</message>
110 <allow_any>no</allow_any>
111 <allow_inactive>yes</allow_inactive>
112 <allow_active>yes</allow_active>
116 <action id="org.freedesktop.login1.set-self-linger">
117 <description>Allow non-logged-in user to run programs</description>
118 <message>Explicit request is required to run programs as a non-logged-in user.</message>
120 <allow_any>yes</allow_any>
121 <allow_inactive>yes</allow_inactive>
122 <allow_active>yes</allow_active>
126 <action id="org.freedesktop.login1.set-user-linger">
127 <description>Allow non-logged-in users to run programs</description>
128 <message>Authentication is required to run programs as a non-logged-in user.</message>
130 <allow_any>auth_admin_keep</allow_any>
131 <allow_inactive>auth_admin_keep</allow_inactive>
132 <allow_active>auth_admin_keep</allow_active>
136 <action id="org.freedesktop.login1.attach-device">
137 <description>Allow attaching devices to seats</description>
138 <message>Authentication is required for attaching a device to a seat.</message>
140 <allow_any>auth_admin_keep</allow_any>
141 <allow_inactive>auth_admin_keep</allow_inactive>
142 <allow_active>auth_admin_keep</allow_active>
144 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.flush-devices</annotate>
147 <action id="org.freedesktop.login1.flush-devices">
148 <description>Flush device to seat attachments</description>
149 <message>Authentication is required for resetting how devices are attached to seats.</message>
151 <allow_any>auth_admin_keep</allow_any>
152 <allow_inactive>auth_admin_keep</allow_inactive>
153 <allow_active>auth_admin_keep</allow_active>
157 <action id="org.freedesktop.login1.power-off">
158 <description>Power off the system</description>
159 <message>Authentication is required for powering off the system.</message>
161 <allow_any>auth_admin_keep</allow_any>
162 <allow_inactive>auth_admin_keep</allow_inactive>
163 <allow_active>yes</allow_active>
165 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.set-wall-message</annotate>
168 <action id="org.freedesktop.login1.power-off-multiple-sessions">
169 <description>Power off the system while other users are logged in</description>
170 <message>Authentication is required for powering off the system while other users are logged in.</message>
172 <allow_any>auth_admin_keep</allow_any>
173 <allow_inactive>auth_admin_keep</allow_inactive>
174 <allow_active>yes</allow_active>
176 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.power-off</annotate>
179 <action id="org.freedesktop.login1.power-off-ignore-inhibit">
180 <description>Power off the system while an application asked to inhibit it</description>
181 <message>Authentication is required for powering off the system while an application asked to inhibit it.</message>
183 <allow_any>auth_admin_keep</allow_any>
184 <allow_inactive>auth_admin_keep</allow_inactive>
185 <allow_active>auth_admin_keep</allow_active>
187 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.power-off</annotate>
190 <action id="org.freedesktop.login1.reboot">
191 <description>Reboot the system</description>
192 <message>Authentication is required for rebooting the system.</message>
194 <allow_any>auth_admin_keep</allow_any>
195 <allow_inactive>auth_admin_keep</allow_inactive>
196 <allow_active>yes</allow_active>
198 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.set-wall-message</annotate>
201 <action id="org.freedesktop.login1.reboot-multiple-sessions">
202 <description>Reboot the system while other users are logged in</description>
203 <message>Authentication is required for rebooting the system while other users are logged in.</message>
205 <allow_any>auth_admin_keep</allow_any>
206 <allow_inactive>auth_admin_keep</allow_inactive>
207 <allow_active>yes</allow_active>
209 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.reboot</annotate>
212 <action id="org.freedesktop.login1.reboot-ignore-inhibit">
213 <description>Reboot the system while an application asked to inhibit it</description>
214 <message>Authentication is required for rebooting the system while an application asked to inhibit it.</message>
216 <allow_any>auth_admin_keep</allow_any>
217 <allow_inactive>auth_admin_keep</allow_inactive>
218 <allow_active>auth_admin_keep</allow_active>
220 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.reboot</annotate>
223 <action id="org.freedesktop.login1.halt">
224 <description>Halt the system</description>
225 <message>Authentication is required for halting the system.</message>
227 <allow_any>auth_admin_keep</allow_any>
228 <allow_inactive>auth_admin_keep</allow_inactive>
229 <allow_active>auth_admin_keep</allow_active>
231 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.set-wall-message</annotate>
234 <action id="org.freedesktop.login1.halt-multiple-sessions">
235 <description>Halt the system while other users are logged in</description>
236 <message>Authentication is required for halting the system while other users are logged in.</message>
238 <allow_any>auth_admin_keep</allow_any>
239 <allow_inactive>auth_admin_keep</allow_inactive>
240 <allow_active>auth_admin_keep</allow_active>
242 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.halt</annotate>
245 <action id="org.freedesktop.login1.halt-ignore-inhibit">
246 <description>Halt the system while an application asked to inhibit it</description>
247 <message>Authentication is required for halting the system while an application asked to inhibit it.</message>
249 <allow_any>auth_admin_keep</allow_any>
250 <allow_inactive>auth_admin_keep</allow_inactive>
251 <allow_active>auth_admin_keep</allow_active>
253 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.halt</annotate>
256 <action id="org.freedesktop.login1.suspend">
257 <description>Suspend the system</description>
258 <message>Authentication is required for suspending the system.</message>
260 <allow_any>auth_admin_keep</allow_any>
261 <allow_inactive>auth_admin_keep</allow_inactive>
262 <allow_active>yes</allow_active>
266 <action id="org.freedesktop.login1.suspend-multiple-sessions">
267 <description>Suspend the system while other users are logged in</description>
268 <message>Authentication is required for suspending the system while other users are logged in.</message>
270 <allow_any>auth_admin_keep</allow_any>
271 <allow_inactive>auth_admin_keep</allow_inactive>
272 <allow_active>yes</allow_active>
274 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.suspend</annotate>
277 <action id="org.freedesktop.login1.suspend-ignore-inhibit">
278 <description>Suspend the system while an application asked to inhibit it</description>
279 <message>Authentication is required for suspending the system while an application asked to inhibit it.</message>
281 <allow_any>auth_admin_keep</allow_any>
282 <allow_inactive>auth_admin_keep</allow_inactive>
283 <allow_active>auth_admin_keep</allow_active>
285 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.suspend</annotate>
288 <action id="org.freedesktop.login1.hibernate">
289 <description>Hibernate the system</description>
290 <message>Authentication is required for hibernating the system.</message>
292 <allow_any>auth_admin_keep</allow_any>
293 <allow_inactive>auth_admin_keep</allow_inactive>
294 <allow_active>yes</allow_active>
298 <action id="org.freedesktop.login1.hibernate-multiple-sessions">
299 <description>Hibernate the system while other users are logged in</description>
300 <message>Authentication is required for hibernating the system while other users are logged in.</message>
302 <allow_any>auth_admin_keep</allow_any>
303 <allow_inactive>auth_admin_keep</allow_inactive>
304 <allow_active>yes</allow_active>
306 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.hibernate</annotate>
309 <action id="org.freedesktop.login1.hibernate-ignore-inhibit">
310 <description>Hibernate the system while an application asked to inhibit it</description>
311 <message>Authentication is required for hibernating the system while an application asked to inhibit it.</message>
313 <allow_any>auth_admin_keep</allow_any>
314 <allow_inactive>auth_admin_keep</allow_inactive>
315 <allow_active>auth_admin_keep</allow_active>
317 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.hibernate</annotate>
320 <action id="org.freedesktop.login1.manage">
321 <description>Manage active sessions, users and seats</description>
322 <message>Authentication is required for managing active sessions, users and seats.</message>
324 <allow_any>auth_admin_keep</allow_any>
325 <allow_inactive>auth_admin_keep</allow_inactive>
326 <allow_active>auth_admin_keep</allow_active>
330 <action id="org.freedesktop.login1.lock-sessions">
331 <description>Lock or unlock active sessions</description>
332 <message>Authentication is required to lock or unlock active sessions.</message>
334 <allow_any>auth_admin_keep</allow_any>
335 <allow_inactive>auth_admin_keep</allow_inactive>
336 <allow_active>auth_admin_keep</allow_active>
340 <action id="org.freedesktop.login1.set-reboot-to-firmware-setup">
341 <description>Allow indication to the firmware to boot to setup interface</description>
342 <message>Authentication is required to indicate to the firmware to boot to setup interface.</message>
344 <allow_any>auth_admin_keep</allow_any>
345 <allow_inactive>auth_admin_keep</allow_inactive>
346 <allow_active>auth_admin_keep</allow_active>
350 <action id="org.freedesktop.login1.set-wall-message">
351 <description>Set a wall message</description>
352 <message>Authentication is required to set a wall message</message>
354 <allow_any>auth_admin_keep</allow_any>
355 <allow_inactive>auth_admin_keep</allow_inactive>
356 <allow_active>auth_admin_keep</allow_active>