org.freedesktop.policykit.policy.in 2.75 KB
Newer Older
David Zeuthen's avatar
David Zeuthen committed
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17
<?xml version="1.0" encoding="utf-8"?>
<!DOCTYPE policyconfig PUBLIC
 "-//freedesktop//DTD PolicyKit Policy Configuration 1.0//EN"
 "http://www.freedesktop.org/standards/PolicyKit/1/policyconfig.dtd">

<!-- Policy definitions for core PolicyKit actions. Copyright (c) 2008 Red Hat, Inc. -->

<policyconfig>
  <vendor>The PolicyKit Project</vendor>
  <vendor_url>http://hal.freedesktop.org/docs/PolicyKit/</vendor_url>

  <action id="org.freedesktop.policykit.read">
    <_description>Read authorizations of other users</_description>
    <_message>Authentication is required to read authorizations of other users</_message>
    <defaults>
      <allow_any>no</allow_any>
      <allow_inactive>no</allow_inactive>
18
      <allow_active>auth_admin_keep</allow_active>
David Zeuthen's avatar
David Zeuthen committed
19 20 21 22 23 24 25 26 27
    </defaults>
  </action>

  <action id="org.freedesktop.policykit.revoke">
    <_description>Revoke authorizations from other users</_description>
    <_message>Authentication is required to revoke authorizations other users</_message>
    <defaults>
      <allow_any>no</allow_any>
      <allow_inactive>no</allow_inactive>
28
      <allow_active>auth_admin_keep</allow_active>
David Zeuthen's avatar
David Zeuthen committed
29 30 31 32 33 34 35 36 37
    </defaults>
  </action>

  <action id="org.freedesktop.policykit.grant">
    <_description>Grant authorizations to other users</_description>
    <_message>Authentication is required to grant authorizations to other users</_message>
    <defaults>
      <allow_any>no</allow_any>
      <allow_inactive>no</allow_inactive>
38
      <allow_active>auth_admin_keep</allow_active>
David Zeuthen's avatar
David Zeuthen committed
39 40 41 42 43 44 45 46 47
    </defaults>
  </action>

  <action id="org.freedesktop.policykit.modify-defaults">
    <_description>Modify defaults for implicit authorizations</_description>
    <_message>Authentication is required to modify the defaults for implicit authorizations</_message>
    <defaults>
      <allow_any>no</allow_any>
      <allow_inactive>no</allow_inactive>
48
      <allow_active>auth_admin_keep</allow_active>
David Zeuthen's avatar
David Zeuthen committed
49 50
    </defaults>
  </action>
David Zeuthen's avatar
David Zeuthen committed
51 52 53 54 55 56 57 58 59 60

  <action id="org.freedesktop.policykit.exec">
    <_description>Run programs as another user</_description>
    <_message>Authentication is required to run a program as another user</_message>
    <defaults>
      <allow_any>auth_admin</allow_any>
      <allow_inactive>auth_admin</allow_inactive>
      <allow_active>auth_admin</allow_active>
    </defaults>
  </action>
61 62 63 64 65 66 67 68 69 70 71

  <action id="org.freedesktop.policykit.localauthority.lockdown">
    <_description>Configure lockdown on the Local Authority</_description>
    <_message>Authentication is required to configure lock down policy</_message>
    <defaults>
      <allow_any>no</allow_any>
      <allow_inactive>no</allow_inactive>
      <allow_active>auth_admin</allow_active>
    </defaults>
    <annotate key="org.freedesktop.policykit.exec.path">/usr/bin/pklalockdown</annotate>
  </action>
David Zeuthen's avatar
David Zeuthen committed
72
</policyconfig>