src/login/org.freedesktop.login1.policy.in

   1 <?xml version="1.0" encoding="UTF-8"?> <!--*-nxml-*-->
   2 <!DOCTYPE policyconfig PUBLIC "-//freedesktop//DTD PolicyKit Policy Configuration 1.0//EN"
   3         "http://www.freedesktop.org/standards/PolicyKit/1/policyconfig.dtd">
   4
   5 <!--
   6   This file is part of elogind.
   7
   8   elogind is free software; you can redistribute it and/or modify it
   9   under the terms of the GNU Lesser General Public License as published by
  10   the Free Software Foundation; either version 2.1 of the License, or
  11   (at your option) any later version.
  12 -->
  13
  14 <policyconfig>
  15
  16         <vendor>The systemd project's "logind", extracted to a standalone package</vendor>
  17         <vendor_url>https://github.com/elogind/elogind</vendor_url>
  18
  19         <action id="org.freedesktop.login1.inhibit-block-shutdown">
  20                 <_description>Allow applications to inhibit system shutdown</_description>
  21                 <_message>Authentication is required for an application to inhibit system shutdown.</_message>
  22                 <defaults>
  23                         <allow_any>no</allow_any>
  24                         <allow_inactive>yes</allow_inactive>
  25                         <allow_active>yes</allow_active>
  26                 </defaults>
  27                 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.inhibit-delay-shutdown org.freedesktop.login1.inhibit-block-sleep org.freedesktop.login1.inhibit-delay-sleep org.freedesktop.login1.inhibit-block-idle</annotate>
  28         </action>
  29
  30         <action id="org.freedesktop.login1.inhibit-delay-shutdown">
  31                 <_description>Allow applications to delay system shutdown</_description>
  32                 <_message>Authentication is required for an application to delay system shutdown.</_message>
  33                 <defaults>
  34                         <allow_any>yes</allow_any>
  35                         <allow_inactive>yes</allow_inactive>
  36                         <allow_active>yes</allow_active>
  37                 </defaults>
  38                 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.inhibit-delay-sleep</annotate>
  39         </action>
  40
  41         <action id="org.freedesktop.login1.inhibit-block-sleep">
  42                 <_description>Allow applications to inhibit system sleep</_description>
  43                 <_message>Authentication is required for an application to inhibit system sleep.</_message>
  44                 <defaults>
  45                         <allow_any>no</allow_any>
  46                         <allow_inactive>yes</allow_inactive>
  47                         <allow_active>yes</allow_active>
  48                 </defaults>
  49                 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.inhibit-delay-sleep org.freedesktop.login1.inhibit-block-idle</annotate>
  50         </action>
  51
  52         <action id="org.freedesktop.login1.inhibit-delay-sleep">
  53                 <_description>Allow applications to delay system sleep</_description>
  54                 <_message>Authentication is required for an application to delay system sleep.</_message>
  55                 <defaults>
  56                         <allow_any>yes</allow_any>
  57                         <allow_inactive>yes</allow_inactive>
  58                         <allow_active>yes</allow_active>
  59                 </defaults>
  60         </action>
  61
  62         <action id="org.freedesktop.login1.inhibit-block-idle">
  63                 <_description>Allow applications to inhibit automatic system suspend</_description>
  64                 <_message>Authentication is required for an application to inhibit automatic system suspend.</_message>
  65                 <defaults>
  66                         <allow_any>yes</allow_any>
  67                         <allow_inactive>yes</allow_inactive>
  68                         <allow_active>yes</allow_active>
  69                 </defaults>
  70         </action>
  71
  72         <action id="org.freedesktop.login1.inhibit-handle-power-key">
  73                 <_description>Allow applications to inhibit system handling of the power key</_description>
  74                 <_message>Authentication is required for an application to inhibit system handling of the power key.</_message>
  75                 <defaults>
  76                         <allow_any>no</allow_any>
  77                         <allow_inactive>yes</allow_inactive>
  78                         <allow_active>yes</allow_active>
  79                 </defaults>
  80                 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.inhibit-handle-suspend-key org.freedesktop.login1.inhibit-handle-hibernate-key org.freedesktop.login1.inhibit-handle-lid-switch</annotate>
  81         </action>
  82
  83         <action id="org.freedesktop.login1.inhibit-handle-suspend-key">
  84                 <_description>Allow applications to inhibit system handling of the suspend key</_description>
  85                 <_message>Authentication is required for an application to inhibit system handling of the suspend key.</_message>
  86                 <defaults>
  87                         <allow_any>no</allow_any>
  88                         <allow_inactive>yes</allow_inactive>
  89                         <allow_active>yes</allow_active>
  90                 </defaults>
  91                 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.inhibit-handle-hibernate-key org.freedesktop.login1.inhibit-handle-lid-switch</annotate>
  92         </action>
  93
  94         <action id="org.freedesktop.login1.inhibit-handle-hibernate-key">
  95                 <_description>Allow applications to inhibit system handling of the hibernate key</_description>
  96                 <_message>Authentication is required for an application to inhibit system handling of the hibernate key.</_message>
  97                 <defaults>
  98                         <allow_any>no</allow_any>
  99                         <allow_inactive>yes</allow_inactive>
 100                         <allow_active>yes</allow_active>
 101                 </defaults>
 102         </action>
 103
 104         <action id="org.freedesktop.login1.inhibit-handle-lid-switch">
 105                 <_description>Allow applications to inhibit system handling of the lid switch</_description>
 106                 <_message>Authentication is required for an application to inhibit system handling of the lid switch.</_message>
 107                 <defaults>
 108                         <allow_any>no</allow_any>
 109                         <allow_inactive>yes</allow_inactive>
 110                         <allow_active>yes</allow_active>
 111                 </defaults>
 112         </action>
 113
 114         <action id="org.freedesktop.login1.set-self-linger">
 115                 <_description>Allow non-logged-in user to run programs</_description>
 116                 <_message>Explicit request is required to run programs as a non-logged-in user.</_message>
 117                 <defaults>
 118                         <allow_any>yes</allow_any>
 119                 </defaults>
 120         </action>
 121
 122         <action id="org.freedesktop.login1.set-user-linger">
 123                 <_description>Allow non-logged-in users to run programs</_description>
 124                 <_message>Authentication is required to run programs as a non-logged-in user.</_message>
 125                 <defaults>
 126                         <allow_any>auth_admin_keep</allow_any>
 127                         <allow_inactive>auth_admin_keep</allow_inactive>
 128                         <allow_active>auth_admin_keep</allow_active>
 129                 </defaults>
 130         </action>
 131
 132         <action id="org.freedesktop.login1.attach-device">
 133                 <_description>Allow attaching devices to seats</_description>
 134                 <_message>Authentication is required for attaching a device to a seat.</_message>
 135                 <defaults>
 136                         <allow_any>auth_admin_keep</allow_any>
 137                         <allow_inactive>auth_admin_keep</allow_inactive>
 138                         <allow_active>auth_admin_keep</allow_active>
 139                 </defaults>
 140                 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.flush-devices</annotate>
 141         </action>
 142
 143         <action id="org.freedesktop.login1.flush-devices">
 144                 <_description>Flush device to seat attachments</_description>
 145                 <_message>Authentication is required for resetting how devices are attached to seats.</_message>
 146                 <defaults>
 147                         <allow_any>auth_admin_keep</allow_any>
 148                         <allow_inactive>auth_admin_keep</allow_inactive>
 149                         <allow_active>auth_admin_keep</allow_active>
 150                 </defaults>
 151         </action>
 152
 153         <action id="org.freedesktop.login1.power-off">
 154                 <_description>Power off the system</_description>
 155                 <_message>Authentication is required for powering off the system.</_message>
 156                 <defaults>
 157                         <allow_any>auth_admin_keep</allow_any>
 158                         <allow_inactive>auth_admin_keep</allow_inactive>
 159                         <allow_active>yes</allow_active>
 160                 </defaults>
 161                 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.set-wall-message</annotate>
 162         </action>
 163
 164         <action id="org.freedesktop.login1.power-off-multiple-sessions">
 165                 <_description>Power off the system while other users are logged in</_description>
 166                 <_message>Authentication is required for powering off the system while other users are logged in.</_message>
 167                 <defaults>
 168                         <allow_any>auth_admin_keep</allow_any>
 169                         <allow_inactive>auth_admin_keep</allow_inactive>
 170                         <allow_active>yes</allow_active>
 171                 </defaults>
 172                 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.power-off</annotate>
 173         </action>
 174
 175         <action id="org.freedesktop.login1.power-off-ignore-inhibit">
 176                 <_description>Power off the system while an application asked to inhibit it</_description>
 177                 <_message>Authentication is required for powering off the system while an application asked to inhibit it.</_message>
 178                 <defaults>
 179                         <allow_any>auth_admin_keep</allow_any>
 180                         <allow_inactive>auth_admin_keep</allow_inactive>
 181                         <allow_active>auth_admin_keep</allow_active>
 182                 </defaults>
 183                 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.power-off</annotate>
 184         </action>
 185
 186         <action id="org.freedesktop.login1.reboot">
 187                 <_description>Reboot the system</_description>
 188                 <_message>Authentication is required for rebooting the system.</_message>
 189                 <defaults>
 190                         <allow_any>auth_admin_keep</allow_any>
 191                         <allow_inactive>auth_admin_keep</allow_inactive>
 192                         <allow_active>yes</allow_active>
 193                 </defaults>
 194                 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.set-wall-message</annotate>
 195         </action>
 196
 197         <action id="org.freedesktop.login1.reboot-multiple-sessions">
 198                 <_description>Reboot the system while other users are logged in</_description>
 199                 <_message>Authentication is required for rebooting the system while other users are logged in.</_message>
 200                 <defaults>
 201                         <allow_any>auth_admin_keep</allow_any>
 202                         <allow_inactive>auth_admin_keep</allow_inactive>
 203                         <allow_active>yes</allow_active>
 204                 </defaults>
 205                 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.reboot</annotate>
 206         </action>
 207
 208         <action id="org.freedesktop.login1.reboot-ignore-inhibit">
 209                 <_description>Reboot the system while an application asked to inhibit it</_description>
 210                 <_message>Authentication is required for rebooting the system while an application asked to inhibit it.</_message>
 211                 <defaults>
 212                         <allow_any>auth_admin_keep</allow_any>
 213                         <allow_inactive>auth_admin_keep</allow_inactive>
 214                         <allow_active>auth_admin_keep</allow_active>
 215                 </defaults>
 216                 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.reboot</annotate>
 217         </action>
 218
 219         <action id="org.freedesktop.login1.suspend">
 220                 <_description>Suspend the system</_description>
 221                 <_message>Authentication is required for suspending the system.</_message>
 222                 <defaults>
 223                         <allow_any>auth_admin_keep</allow_any>
 224                         <allow_inactive>auth_admin_keep</allow_inactive>
 225                         <allow_active>yes</allow_active>
 226                 </defaults>
 227         </action>
 228
 229         <action id="org.freedesktop.login1.suspend-multiple-sessions">
 230                 <_description>Suspend the system while other users are logged in</_description>
 231                 <_message>Authentication is required for suspending the system while other users are logged in.</_message>
 232                 <defaults>
 233                         <allow_any>auth_admin_keep</allow_any>
 234                         <allow_inactive>auth_admin_keep</allow_inactive>
 235                         <allow_active>yes</allow_active>
 236                 </defaults>
 237                 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.suspend</annotate>
 238         </action>
 239
 240         <action id="org.freedesktop.login1.suspend-ignore-inhibit">
 241                 <_description>Suspend the system while an application asked to inhibit it</_description>
 242                 <_message>Authentication is required for suspending the system while an application asked to inhibit it.</_message>
 243                 <defaults>
 244                         <allow_any>auth_admin_keep</allow_any>
 245                         <allow_inactive>auth_admin_keep</allow_inactive>
 246                         <allow_active>auth_admin_keep</allow_active>
 247                 </defaults>
 248                 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.suspend</annotate>
 249         </action>
 250
 251         <action id="org.freedesktop.login1.hibernate">
 252                 <_description>Hibernate the system</_description>
 253                 <_message>Authentication is required for hibernating the system.</_message>
 254                 <defaults>
 255                         <allow_any>auth_admin_keep</allow_any>
 256                         <allow_inactive>auth_admin_keep</allow_inactive>
 257                         <allow_active>yes</allow_active>
 258                 </defaults>
 259         </action>
 260
 261         <action id="org.freedesktop.login1.hibernate-multiple-sessions">
 262                 <_description>Hibernate the system while other users are logged in</_description>
 263                 <_message>Authentication is required for hibernating the system while other users are logged in.</_message>
 264                 <defaults>
 265                         <allow_any>auth_admin_keep</allow_any>
 266                         <allow_inactive>auth_admin_keep</allow_inactive>
 267                         <allow_active>yes</allow_active>
 268                 </defaults>
 269                 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.hibernate</annotate>
 270         </action>
 271
 272         <action id="org.freedesktop.login1.hibernate-ignore-inhibit">
 273                 <_description>Hibernate the system while an application asked to inhibit it</_description>
 274                 <_message>Authentication is required for hibernating the system while an application asked to inhibit it.</_message>
 275                 <defaults>
 276                         <allow_any>auth_admin_keep</allow_any>
 277                         <allow_inactive>auth_admin_keep</allow_inactive>
 278                         <allow_active>auth_admin_keep</allow_active>
 279                 </defaults>
 280                 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.hibernate</annotate>
 281         </action>
 282
 283         <action id="org.freedesktop.login1.manage">
 284                 <_description>Manage active sessions, users and seats</_description>
 285                 <_message>Authentication is required for managing active sessions, users and seats.</_message>
 286                 <defaults>
 287                         <allow_any>auth_admin_keep</allow_any>
 288                         <allow_inactive>auth_admin_keep</allow_inactive>
 289                         <allow_active>auth_admin_keep</allow_active>
 290                 </defaults>
 291         </action>
 292
 293         <action id="org.freedesktop.login1.lock-sessions">
 294                 <_description>Lock or unlock active sessions</_description>
 295                 <_message>Authentication is required to lock or unlock active sessions.</_message>
 296                 <defaults>
 297                         <allow_any>auth_admin_keep</allow_any>
 298                         <allow_inactive>auth_admin_keep</allow_inactive>
 299                         <allow_active>auth_admin_keep</allow_active>
 300                 </defaults>
 301         </action>
 302
 303         <action id="org.freedesktop.login1.set-reboot-to-firmware-setup">
 304                 <_description>Allow indication to the firmware to boot to setup interface</_description>
 305                 <_message>Authentication is required to indicate to the firmware to boot to setup interface.</_message>
 306                 <defaults>
 307                         <allow_any>auth_admin_keep</allow_any>
 308                         <allow_inactive>auth_admin_keep</allow_inactive>
 309                         <allow_active>auth_admin_keep</allow_active>
 310                 </defaults>
 311         </action>
 312
 313         <action id="org.freedesktop.login1.set-wall-message">
 314                 <_description>Set a wall message</_description>
 315                 <_message>Authentication is required to set a wall message</_message>
 316                 <defaults>
 317                         <allow_any>auth_admin_keep</allow_any>
 318                         <allow_inactive>auth_admin_keep</allow_inactive>
 319                         <allow_active>auth_admin_keep</allow_active>
 320                 </defaults>
 321         </action>
 322
 323 </policyconfig>