From 563b5dedb77affe619290d5eab34fe6b39d52915 Mon Sep 17 00:00:00 2001
From: Alessandro Astone <alessandro.astone@canonical.com>
Date: Wed, 26 Nov 2025 18:20:30 +0100
Subject: [PATCH] man: Update docs for ExtraDeviceAccess

---
 man/org.freedesktop.login1.xml |  9 +++++++++
 man/pam_systemd.xml            | 11 +++++++++++
 man/sd_session_is_active.xml   | 20 +++++++++++++++++---
 3 files changed, 37 insertions(+), 3 deletions(-)

diff --git a/man/org.freedesktop.login1.xml b/man/org.freedesktop.login1.xml
index b447ae70f64..cc4a146fff5 100644
--- a/man/org.freedesktop.login1.xml
+++ b/man/org.freedesktop.login1.xml
@@ -1246,6 +1246,8 @@ node /org/freedesktop/login1/session/1 {
       @org.freedesktop.DBus.Property.EmitsChangedSignal("const")
       readonly s RemoteUser = '...';
       @org.freedesktop.DBus.Property.EmitsChangedSignal("const")
+      readonly b ExtraDeviceAccess = ...;
+      @org.freedesktop.DBus.Property.EmitsChangedSignal("const")
       readonly s Service = '...';
       @org.freedesktop.DBus.Property.EmitsChangedSignal("const")
       readonly s Desktop = '...';
@@ -1348,6 +1350,8 @@ node /org/freedesktop/login1/session/1 {
 
     <variablelist class="dbus-property" generated="True" extra-ref="RemoteUser"/>
 
+    <variablelist class="dbus-property" generated="True" extra-ref="ExtraDeviceAccess"/>
+
     <variablelist class="dbus-property" generated="True" extra-ref="Service"/>
 
     <variablelist class="dbus-property" generated="True" extra-ref="Desktop"/>
@@ -1537,6 +1541,10 @@ node /org/freedesktop/login1/session/1 {
       <para><varname>RemoteHost</varname> and <varname>RemoteUser</varname> encode the remote host and user
       if this is a remote session, or an empty string otherwise.</para>
 
+      <para><varname>ExtraDeviceAccess</varname> encodes whether the session is granted access to additional
+      hardware devices, typically useful for for graphical, remote session. If true, the session is granted
+      access to all devices tagged with <literal>xaccess</literal> in udev.</para>
+
       <para><varname>Service</varname> encodes the PAM service name that registered the session.</para>
 
       <para><varname>Desktop</varname> describes the desktop environment running in the session (if
@@ -1671,6 +1679,7 @@ node /org/freedesktop/login1/session/1 {
       <para><function>SetTTY()</function> was added in version 254.</para>
       <para><function>SetClass()</function> was added in version 256.</para>
       <para><varname>LeaderPIDFDId</varname> was added in version 258.</para>
+      <para><varname>ExtraDeviceAccess</varname> was added in version 260.</para>
     </refsect2>
   </refsect1>
 
diff --git a/man/pam_systemd.xml b/man/pam_systemd.xml
index 5b6f2fa732f..ee3060d670e 100644
--- a/man/pam_systemd.xml
+++ b/man/pam_systemd.xml
@@ -404,6 +404,17 @@
 
         <xi:include href="version-info.xml" xpointer="v258"/></listitem>
       </varlistentry>
+
+      <varlistentry>
+        <term><varname>$XDG_SESSION_EXTRA_DEVICE_ACCESS</varname></term>
+
+        <listitem><para>Whether or not the session shall be granted additional hardware device access,
+        typically useful for graphical, remote session. If true, the session is granted access to all
+        devices tagged with <literal>xaccess</literal> in udev. Typically, rendering device nodes of
+        the GPU are tagged like this.</para>
+
+        <xi:include href="version-info.xml" xpointer="v260"/></listitem>
+      </varlistentry>
     </variablelist>
 
     <para>If not set, <command>pam_systemd</command> will initialize
diff --git a/man/sd_session_is_active.xml b/man/sd_session_is_active.xml
index 92cd669dc48..3a3935cfef8 100644
--- a/man/sd_session_is_active.xml
+++ b/man/sd_session_is_active.xml
@@ -34,6 +34,7 @@
     <refname>sd_session_get_remote_host</refname>
     <refname>sd_session_get_remote_user</refname>
     <refname>sd_session_get_leader</refname>
+    <refname>sd_session_has_extra_device_access</refname>
     <refpurpose>Determine state of a specific session</refpurpose>
   </refnamediv>
 
@@ -140,6 +141,11 @@
         <paramdef>const char *<parameter>session</parameter></paramdef>
         <paramdef>unsigned int *<parameter>vt</parameter></paramdef>
       </funcprototype>
+
+      <funcprototype>
+        <funcdef>int <function>sd_session_has_extra_device_access</function></funcdef>
+        <paramdef>const char *<parameter>session</parameter></paramdef>
+      </funcprototype>
     </funcsynopsis>
   </refsynopsisdiv>
 
@@ -274,6 +280,12 @@
     session identifier. This function will return an error if the seat
     does not support VTs.</para>
 
+    <para><function>sd_session_has_extra_device_access()</function> may
+    be used to determine whether the session is granted access to
+    additional hardware devices, typically useful for for graphical,
+    remote session. If true, the session is granted access to all
+    devices tagged with <literal>xaccess</literal> in udev.</para>
+
     <para>If the <varname>session</varname> parameter of any of these
     functions is passed as <constant>NULL</constant>, the operation is
     executed for the session the calling process is a member of, if
@@ -284,9 +296,10 @@
     <title>Return Value</title>
 
     <para>If the test succeeds,
-    <function>sd_session_is_active()</function> and
-    <function>sd_session_is_remote()</function> return a
-    positive integer; if it fails, 0.  On success,
+    <function>sd_session_is_active()</function>,
+    <function>sd_session_is_remote()</function>, and
+    <function>sd_session_has_extra_device_access()</function>
+    return a positive integer; if it fails, 0.  On success,
     <function>sd_session_get_state()</function>,
     <function>sd_session_get_uid()</function>,
     <function>sd_session_get_username()</function>,
@@ -353,6 +366,7 @@
     <para><function>sd_session_get_username()</function>,
     <function>sd_session_get_start_time()</function>, and
     <function>sd_session_get_leader()</function> were added in version 254.</para>
+    <para><function>sd_session_has_extra_device_access()</function> was added in version 260.</para>
   </refsect1>
 
   <refsect1>
-- 
2.47.3