src/login/org.freedesktop.login1.policy.in

   1 <?xml version="1.0" encoding="UTF-8"?> <!--*-nxml-*-->
   2 <!DOCTYPE policyconfig PUBLIC "-//freedesktop//DTD PolicyKit Policy Configuration 1.0//EN"
   3         "http://www.freedesktop.org/standards/PolicyKit/1/policyconfig.dtd">
   4
   5 <!--
   6   This file is part of systemd.
   7
   8   systemd is free software; you can redistribute it and/or modify it
   9   under the terms of the GNU Lesser General Public License as published by
  10   the Free Software Foundation; either version 2.1 of the License, or
  11   (at your option) any later version.
  12 -->
  13
  14 <policyconfig>
  15
  16         <vendor>The systemd Project</vendor>
  17         <vendor_url>http://www.freedesktop.org/wiki/Software/systemd</vendor_url>
  18
  19         <action id="org.freedesktop.login1.inhibit-block-shutdown">
  20                 <_description>Allow applications to inhibit system shutdown</_description>
  21                 <_message>Authentication is required for an application to inhibit system shutdown.</_message>
  22                 <defaults>
  23                         <allow_any>no</allow_any>
  24                         <allow_inactive>yes</allow_inactive>
  25                         <allow_active>yes</allow_active>
  26                 </defaults>
  27                 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.inhibit-delay-shutdown org.freedesktop.login1.inhibit-block-sleep org.freedesktop.login1.inhibit-delay-sleep org.freedesktop.login1.inhibit-block-idle</annotate>
  28         </action>
  29
  30         <action id="org.freedesktop.login1.inhibit-delay-shutdown">
  31                 <_description>Allow applications to delay system shutdown</_description>
  32                 <_message>Authentication is required for an application to delay system shutdown.</_message>
  33                 <defaults>
  34                         <allow_any>yes</allow_any>
  35                         <allow_inactive>yes</allow_inactive>
  36                         <allow_active>yes</allow_active>
  37                 </defaults>
  38                 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.inhibit-delay-sleep</annotate>
  39         </action>
  40
  41         <action id="org.freedesktop.login1.inhibit-block-sleep">
  42                 <_description>Allow applications to inhibit system sleep</_description>
  43                 <_message>Authentication is required for an application to inhibit system sleep.</_message>
  44                 <defaults>
  45                         <allow_any>no</allow_any>
  46                         <allow_inactive>yes</allow_inactive>
  47                         <allow_active>yes</allow_active>
  48                 </defaults>
  49                 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.inhibit-delay-sleep org.freedesktop.login1.inhibit-block-idle</annotate>
  50         </action>
  51
  52         <action id="org.freedesktop.login1.inhibit-delay-sleep">
  53                 <_description>Allow applications to delay system sleep</_description>
  54                 <_message>Authentication is required for an application to delay system sleep.</_message>
  55                 <defaults>
  56                         <allow_any>yes</allow_any>
  57                         <allow_inactive>yes</allow_inactive>
  58                         <allow_active>yes</allow_active>
  59                 </defaults>
  60         </action>
  61
  62         <action id="org.freedesktop.login1.inhibit-block-idle">
  63                 <_description>Allow applications to inhibit automatic system suspend</_description>
  64                 <_message>Authentication is required for an application to inhibit automatic system suspend.</_message>
  65                 <defaults>
  66                         <allow_any>yes</allow_any>
  67                         <allow_inactive>yes</allow_inactive>
  68                         <allow_active>yes</allow_active>
  69                 </defaults>
  70         </action>
  71
  72         <action id="org.freedesktop.login1.inhibit-handle-power-key">
  73                 <_description>Allow applications to inhibit system handling of the power key</_description>
  74                 <_message>Authentication is required for an application to inhibit system handling of the power key.</_message>
  75                 <defaults>
  76                         <allow_any>no</allow_any>
  77                         <allow_inactive>yes</allow_inactive>
  78                         <allow_active>yes</allow_active>
  79                 </defaults>
  80                 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.inhibit-handle-suspend-key org.freedesktop.login1.inhibit-handle-hibernate-key org.freedesktop.login1.inhibit-handle-lid-switch</annotate>
  81         </action>
  82
  83         <action id="org.freedesktop.login1.inhibit-handle-suspend-key">
  84                 <_description>Allow applications to inhibit system handling of the suspend key</_description>
  85                 <_message>Authentication is required for an application to inhibit system handling of the suspend key.</_message>
  86                 <defaults>
  87                         <allow_any>no</allow_any>
  88                         <allow_inactive>yes</allow_inactive>
  89                         <allow_active>yes</allow_active>
  90                 </defaults>
  91                 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.inhibit-handle-hibernate-key org.freedesktop.login1.inhibit-handle-lid-switch</annotate>
  92         </action>
  93
  94         <action id="org.freedesktop.login1.inhibit-handle-hibernate-key">
  95                 <_description>Allow applications to inhibit system handling of the hibernate key</_description>
  96                 <_message>Authentication is required for an application to inhibit system handling of the hibernate key.</_message>
  97                 <defaults>
  98                         <allow_any>no</allow_any>
  99                         <allow_inactive>yes</allow_inactive>
 100                         <allow_active>yes</allow_active>
 101                 </defaults>
 102         </action>
 103
 104         <action id="org.freedesktop.login1.inhibit-handle-lid-switch">
 105                 <_description>Allow applications to inhibit system handling of the lid switch</_description>
 106                 <_message>Authentication is required for an application to inhibit system handling of the lid switch.</_message>
 107                 <defaults>
 108                         <allow_any>no</allow_any>
 109                         <allow_inactive>yes</allow_inactive>
 110                         <allow_active>yes</allow_active>
 111                 </defaults>
 112         </action>
 113
 114         <action id="org.freedesktop.login1.set-user-linger">
 115                 <_description>Allow non-logged-in users to run programs</_description>
 116                 <_message>Authentication is required to run programs as a non-logged-in user.</_message>
 117                 <defaults>
 118                         <allow_any>auth_admin_keep</allow_any>
 119                         <allow_inactive>auth_admin_keep</allow_inactive>
 120                         <allow_active>auth_admin_keep</allow_active>
 121                 </defaults>
 122         </action>
 123
 124         <action id="org.freedesktop.login1.attach-device">
 125                 <_description>Allow attaching devices to seats</_description>
 126                 <_message>Authentication is required for attaching a device to a seat.</_message>
 127                 <defaults>
 128                         <allow_any>auth_admin_keep</allow_any>
 129                         <allow_inactive>auth_admin_keep</allow_inactive>
 130                         <allow_active>auth_admin_keep</allow_active>
 131                 </defaults>
 132                 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.flush-devices</annotate>
 133         </action>
 134
 135         <action id="org.freedesktop.login1.flush-devices">
 136                 <_description>Flush device to seat attachments</_description>
 137                 <_message>Authentication is required for resetting how devices are attached to seats.</_message>
 138                 <defaults>
 139                         <allow_any>auth_admin_keep</allow_any>
 140                         <allow_inactive>auth_admin_keep</allow_inactive>
 141                         <allow_active>auth_admin_keep</allow_active>
 142                 </defaults>
 143         </action>
 144
 145         <action id="org.freedesktop.login1.power-off">
 146                 <_description>Power off the system</_description>
 147                 <_message>Authentication is required for powering off the system.</_message>
 148                 <defaults>
 149                         <allow_any>auth_admin_keep</allow_any>
 150                         <allow_inactive>auth_admin_keep</allow_inactive>
 151                         <allow_active>yes</allow_active>
 152                 </defaults>
 153                 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.set-wall-message</annotate>
 154         </action>
 155
 156         <action id="org.freedesktop.login1.power-off-multiple-sessions">
 157                 <_description>Power off the system while other users are logged in</_description>
 158                 <_message>Authentication is required for powering off the system while other users are logged in.</_message>
 159                 <defaults>
 160                         <allow_any>auth_admin_keep</allow_any>
 161                         <allow_inactive>auth_admin_keep</allow_inactive>
 162                         <allow_active>yes</allow_active>
 163                 </defaults>
 164                 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.power-off</annotate>
 165         </action>
 166
 167         <action id="org.freedesktop.login1.power-off-ignore-inhibit">
 168                 <_description>Power off the system while an application asked to inhibit it</_description>
 169                 <_message>Authentication is required for powering off the system while an application asked to inhibit it.</_message>
 170                 <defaults>
 171                         <allow_any>auth_admin_keep</allow_any>
 172                         <allow_inactive>auth_admin_keep</allow_inactive>
 173                         <allow_active>auth_admin_keep</allow_active>
 174                 </defaults>
 175                 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.power-off</annotate>
 176         </action>
 177
 178         <action id="org.freedesktop.login1.reboot">
 179                 <_description>Reboot the system</_description>
 180                 <_message>Authentication is required for rebooting the system.</_message>
 181                 <defaults>
 182                         <allow_any>auth_admin_keep</allow_any>
 183                         <allow_inactive>auth_admin_keep</allow_inactive>
 184                         <allow_active>yes</allow_active>
 185                 </defaults>
 186                 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.set-wall-message</annotate>
 187         </action>
 188
 189         <action id="org.freedesktop.login1.reboot-multiple-sessions">
 190                 <_description>Reboot the system while other users are logged in</_description>
 191                 <_message>Authentication is required for rebooting the system while other users are logged in.</_message>
 192                 <defaults>
 193                         <allow_any>auth_admin_keep</allow_any>
 194                         <allow_inactive>auth_admin_keep</allow_inactive>
 195                         <allow_active>yes</allow_active>
 196                 </defaults>
 197                 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.reboot</annotate>
 198         </action>
 199
 200         <action id="org.freedesktop.login1.reboot-ignore-inhibit">
 201                 <_description>Reboot the system while an application asked to inhibit it</_description>
 202                 <_message>Authentication is required for rebooting the system while an application asked to inhibit it.</_message>
 203                 <defaults>
 204                         <allow_any>auth_admin_keep</allow_any>
 205                         <allow_inactive>auth_admin_keep</allow_inactive>
 206                         <allow_active>auth_admin_keep</allow_active>
 207                 </defaults>
 208                 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.reboot</annotate>
 209         </action>
 210
 211         <action id="org.freedesktop.login1.suspend">
 212                 <_description>Suspend the system</_description>
 213                 <_message>Authentication is required for suspending the system.</_message>
 214                 <defaults>
 215                         <allow_any>auth_admin_keep</allow_any>
 216                         <allow_inactive>auth_admin_keep</allow_inactive>
 217                         <allow_active>yes</allow_active>
 218                 </defaults>
 219         </action>
 220
 221         <action id="org.freedesktop.login1.suspend-multiple-sessions">
 222                 <_description>Suspend the system while other users are logged in</_description>
 223                 <_message>Authentication is required for suspending the system while other users are logged in.</_message>
 224                 <defaults>
 225                         <allow_any>auth_admin_keep</allow_any>
 226                         <allow_inactive>auth_admin_keep</allow_inactive>
 227                         <allow_active>yes</allow_active>
 228                 </defaults>
 229                 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.suspend</annotate>
 230         </action>
 231
 232         <action id="org.freedesktop.login1.suspend-ignore-inhibit">
 233                 <_description>Suspend the system while an application asked to inhibit it</_description>
 234                 <_message>Authentication is required for suspending the system while an application asked to inhibit it.</_message>
 235                 <defaults>
 236                         <allow_any>auth_admin_keep</allow_any>
 237                         <allow_inactive>auth_admin_keep</allow_inactive>
 238                         <allow_active>auth_admin_keep</allow_active>
 239                 </defaults>
 240                 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.suspend</annotate>
 241         </action>
 242
 243         <action id="org.freedesktop.login1.hibernate">
 244                 <_description>Hibernate the system</_description>
 245                 <_message>Authentication is required for hibernating the system.</_message>
 246                 <defaults>
 247                         <allow_any>auth_admin_keep</allow_any>
 248                         <allow_inactive>auth_admin_keep</allow_inactive>
 249                         <allow_active>yes</allow_active>
 250                 </defaults>
 251         </action>
 252
 253         <action id="org.freedesktop.login1.hibernate-multiple-sessions">
 254                 <_description>Hibernate the system while other users are logged in</_description>
 255                 <_message>Authentication is required for hibernating the system while other users are logged in.</_message>
 256                 <defaults>
 257                         <allow_any>auth_admin_keep</allow_any>
 258                         <allow_inactive>auth_admin_keep</allow_inactive>
 259                         <allow_active>yes</allow_active>
 260                 </defaults>
 261                 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.hibernate</annotate>
 262         </action>
 263
 264         <action id="org.freedesktop.login1.hibernate-ignore-inhibit">
 265                 <_description>Hibernate the system while an application asked to inhibit it</_description>
 266                 <_message>Authentication is required for hibernating the system while an application asked to inhibit it.</_message>
 267                 <defaults>
 268                         <allow_any>auth_admin_keep</allow_any>
 269                         <allow_inactive>auth_admin_keep</allow_inactive>
 270                         <allow_active>auth_admin_keep</allow_active>
 271                 </defaults>
 272                 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.hibernate</annotate>
 273         </action>
 274
 275         <action id="org.freedesktop.login1.manage">
 276                 <_description>Manage active sessions, users and seats</_description>
 277                 <_message>Authentication is required for managing active sessions, users and seats.</_message>
 278                 <defaults>
 279                         <allow_any>auth_admin_keep</allow_any>
 280                         <allow_inactive>auth_admin_keep</allow_inactive>
 281                         <allow_active>auth_admin_keep</allow_active>
 282                 </defaults>
 283         </action>
 284
 285         <action id="org.freedesktop.login1.lock-sessions">
 286                 <_description>Lock or unlock active sessions</_description>
 287                 <_message>Authentication is required to lock or unlock active sessions.</_message>
 288                 <defaults>
 289                         <allow_any>auth_admin_keep</allow_any>
 290                         <allow_inactive>auth_admin_keep</allow_inactive>
 291                         <allow_active>auth_admin_keep</allow_active>
 292                 </defaults>
 293         </action>
 294
 295         <action id="org.freedesktop.login1.set-reboot-to-firmware-setup">
 296                 <_description>Allow indication to the firmware to boot to setup interface</_description>
 297                 <_message>Authentication is required to indicate to the firmware to boot to setup interface.</_message>
 298                 <defaults>
 299                         <allow_any>auth_admin_keep</allow_any>
 300                         <allow_inactive>auth_admin_keep</allow_inactive>
 301                         <allow_active>auth_admin_keep</allow_active>
 302                 </defaults>
 303         </action>
 304
 305         <action id="org.freedesktop.login1.set-wall-message">
 306                 <_description>Set a wall message</_description>
 307                 <_message>Authentication is required to set a wall message</_message>
 308                 <defaults>
 309                         <allow_any>auth_admin_keep</allow_any>
 310                         <allow_inactive>auth_admin_keep</allow_inactive>
 311                         <allow_active>auth_admin_keep</allow_active>
 312                 </defaults>
 313         </action>
 314
 315 </policyconfig>