From: Michael Tremer <michael.tremer@ipfire.org>
Date: Mon, 30 Jan 2023 19:26:35 +0000 (+0000)
Subject: networkd: Install some simple PolicyKit policy
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=bf98bd657165f87eafae1442a6396239d74cd88e;p=network.git

networkd: Install some simple PolicyKit policy

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
---

diff --git a/Makefile.am b/Makefile.am
index eeda5ba8..4802de3c 100644
--- a/Makefile.am
+++ b/Makefile.am
@@ -64,6 +64,7 @@ noinst_DATA =
 sbin_PROGRAMS =
 dist_dbuspolicy_DATA =
 dist_dbussystembus_DATA =
+dist_polkitpolicy_DATA =
 
 AM_CPPFLAGS = \
 	$(OUR_CPPFLAGS) \
@@ -338,6 +339,9 @@ dist_dbuspolicy_DATA += \
 dist_dbussystembus_DATA += \
 	src/networkd/org.ipfire.network1.service
 
+dist_polkitpolicy_DATA += \
+	src/networkd/org.ipfire.network1.policy
+
 # ------------------------------------------------------------------------------
 
 util_PROGRAMS = \
diff --git a/configure.ac b/configure.ac
index 9560838b..16f0724f 100644
--- a/configure.ac
+++ b/configure.ac
@@ -144,6 +144,18 @@ AC_ARG_WITH(
 )
 AC_SUBST(dbuspolicydir)
 
+AC_ARG_WITH(
+	[polkitpolicydir],
+	AS_HELP_STRING(
+		[--with-polkitpolicydir=arg],
+		[directory for PolicyKit policies]
+	),
+	[polkitpolicydir="$withval"],
+	[PKG_CHECK_VAR([polkitpolicydir], [polkit], [actiondir])
+	polkitpolicydir="${datadir}/polkit-1/actions"]
+)
+AC_SUBST(polkitpolicydir)
+
 # ------------------------------------------------------------------------------
 AC_ARG_WITH([systemdsystemunitdir],
 	AS_HELP_STRING([--with-systemdsystemunitdir=DIR], [Directory for systemd service files]),
@@ -189,6 +201,7 @@ AC_MSG_RESULT([
 
 	dbuspolicydir:        ${dbuspolicydir}
 	dbussystembusdir:     ${dbussystembusdir}
+	polkitpolicydir:      ${polkitpolicydir}
 	systemdsystemunitdir: $systemdsystemunitdir
 	udevdir:              $udevdir
 
diff --git a/src/networkd/org.ipfire.network1.policy b/src/networkd/org.ipfire.network1.policy
new file mode 100644
index 00000000..46318f11
--- /dev/null
+++ b/src/networkd/org.ipfire.network1.policy
@@ -0,0 +1,19 @@
+<?xml version="1.0" encoding="UTF-8"?> <!--*-nxml-*-->
+<!DOCTYPE policyconfig PUBLIC "-//freedesktop//DTD PolicyKit Policy Configuration 1.0//EN"
+        "https://www.freedesktop.org/standards/PolicyKit/1/policyconfig.dtd">
+
+<policyconfig>
+	<vendor>The IPFire Project</vendor>
+	<vendor_url>https://www.ipfire.org</vendor_url>
+
+	<action id="org.ipfire.network1.reload">
+		<description gettext-domain="systemd">Reload Network Settings</description>
+		<message gettext-domain="network">Authentication is required to reload network settings.</message>
+		<defaults>
+			<allow_any>auth_admin</allow_any>
+			<allow_inactive>auth_admin</allow_inactive>
+			<allow_active>auth_admin_keep</allow_active>
+		</defaults>
+		<annotate key="org.freedesktop.policykit.owner">unix-user:network</annotate>
+	</action>
+</policyconfig>