src/login/org.freedesktop.login1.policy.in

   1 <?xml version="1.0" encoding="UTF-8"?> <!--*-nxml-*-->
   2 <!DOCTYPE policyconfig PUBLIC "-//freedesktop//DTD PolicyKit Policy Configuration 1.0//EN"
   3         "http://www.freedesktop.org/standards/PolicyKit/1/policyconfig.dtd">
   4
   5 <!--
   6   This file is part of systemd.
   7
   8   systemd is free software; you can redistribute it and/or modify it
   9   under the terms of the GNU Lesser General Public License as published by
  10   the Free Software Foundation; either version 2.1 of the License, or
  11   (at your option) any later version.
  12 -->
  13
  14 <policyconfig>
  15
  16         <vendor>The systemd Project</vendor>
  17         <vendor_url>http://www.freedesktop.org/wiki/Software/systemd</vendor_url>
  18
  19         <action id="org.freedesktop.login1.inhibit-block-shutdown">
  20                 <_description>Allow applications to inhibit system shutdown</_description>
  21                 <_message>Authentication is required for an application to inhibit system shutdown.</_message>
  22                 <defaults>
  23                         <allow_any>no</allow_any>
  24                         <allow_inactive>yes</allow_inactive>
  25                         <allow_active>yes</allow_active>
  26                 </defaults>
  27                 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.inhibit-delay-shutdown org.freedesktop.login1.inhibit-block-sleep org.freedesktop.login1.inhibit-delay-sleep org.freedesktop.login1.inhibit-block-idle</annotate>
  28         </action>
  29
  30         <action id="org.freedesktop.login1.inhibit-delay-shutdown">
  31                 <_description>Allow applications to delay system shutdown</_description>
  32                 <_message>Authentication is required for an application to delay system shutdown.</_message>
  33                 <defaults>
  34                         <allow_any>yes</allow_any>
  35                         <allow_inactive>yes</allow_inactive>
  36                         <allow_active>yes</allow_active>
  37                 </defaults>
  38                 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.inhibit-delay-sleep</annotate>
  39         </action>
  40
  41         <action id="org.freedesktop.login1.inhibit-block-sleep">
  42                 <_description>Allow applications to inhibit system sleep</_description>
  43                 <_message>Authentication is required for an application to inhibit system sleep.</_message>
  44                 <defaults>
  45                         <allow_any>no</allow_any>
  46                         <allow_inactive>yes</allow_inactive>
  47                         <allow_active>yes</allow_active>
  48                 </defaults>
  49                 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.inhibit-delay-sleep org.freedesktop.login1.inhibit-block-idle</annotate>
  50         </action>
  51
  52         <action id="org.freedesktop.login1.inhibit-delay-sleep">
  53                 <_description>Allow applications to delay system sleep</_description>
  54                 <_message>Authentication is required for an application to delay system sleep.</_message>
  55                 <defaults>
  56                         <allow_any>yes</allow_any>
  57                         <allow_inactive>yes</allow_inactive>
  58                         <allow_active>yes</allow_active>
  59                 </defaults>
  60         </action>
  61
  62         <action id="org.freedesktop.login1.inhibit-block-idle">
  63                 <_description>Allow applications to inhibit automatic system suspend</_description>
  64                 <_message>Authentication is required for an application to inhibit automatic system suspend.</_message>
  65                 <defaults>
  66                         <allow_any>yes</allow_any>
  67                         <allow_inactive>yes</allow_inactive>
  68                         <allow_active>yes</allow_active>
  69                 </defaults>
  70         </action>
  71
  72         <action id="org.freedesktop.login1.inhibit-handle-power-key">
  73                 <_description>Allow applications to inhibit system handling of the power key</_description>
  74                 <_message>Authentication is required for an application to inhibit system handling of the power key.</_message>
  75                 <defaults>
  76                         <allow_any>no</allow_any>
  77                         <allow_inactive>yes</allow_inactive>
  78                         <allow_active>yes</allow_active>
  79                 </defaults>
  80                 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.inhibit-handle-suspend-key org.freedesktop.login1.inhibit-handle-hibernate-key org.freedesktop.login1.inhibit-handle-lid-switch</annotate>
  81         </action>
  82
  83         <action id="org.freedesktop.login1.inhibit-handle-suspend-key">
  84                 <_description>Allow applications to inhibit system handling of the suspend key</_description>
  85                 <_message>Authentication is required for an application to inhibit system handling of the suspend key.</_message>
  86                 <defaults>
  87                         <allow_any>no</allow_any>
  88                         <allow_inactive>yes</allow_inactive>
  89                         <allow_active>yes</allow_active>
  90                 </defaults>
  91                 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.inhibit-handle-hibernate-key org.freedesktop.login1.inhibit-handle-lid-switch</annotate>
  92         </action>
  93
  94         <action id="org.freedesktop.login1.inhibit-handle-hibernate-key">
  95                 <_description>Allow applications to inhibit system handling of the hibernate key</_description>
  96                 <_message>Authentication is required for an application to inhibit system handling of the hibernate key.</_message>
  97                 <defaults>
  98                         <allow_any>no</allow_any>
  99                         <allow_inactive>yes</allow_inactive>
 100                         <allow_active>yes</allow_active>
 101                 </defaults>
 102         </action>
 103
 104         <action id="org.freedesktop.login1.inhibit-handle-lid-switch">
 105                 <_description>Allow applications to inhibit system handling of the lid switch</_description>
 106                 <_message>Authentication is required for an application to inhibit system handling of the lid switch.</_message>
 107                 <defaults>
 108                         <allow_any>no</allow_any>
 109                         <allow_inactive>yes</allow_inactive>
 110                         <allow_active>yes</allow_active>
 111                 </defaults>
 112         </action>
 113
 114         <action id="org.freedesktop.login1.set-user-linger">
 115                 <_description>Allow non-logged-in users to run programs</_description>
 116                 <_message>Authentication is required to run programs as a non-logged-in user.</_message>
 117                 <defaults>
 118                         <allow_any>auth_admin_keep</allow_any>
 119                         <allow_inactive>auth_admin_keep</allow_inactive>
 120                         <allow_active>auth_admin_keep</allow_active>
 121                 </defaults>
 122         </action>
 123
 124         <action id="org.freedesktop.login1.attach-device">
 125                 <_description>Allow attaching devices to seats</_description>
 126                 <_message>Authentication is required for attaching a device to a seat.</_message>
 127                 <defaults>
 128                         <allow_any>auth_admin_keep</allow_any>
 129                         <allow_inactive>auth_admin_keep</allow_inactive>
 130                         <allow_active>auth_admin_keep</allow_active>
 131                 </defaults>
 132                 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.flush-devices</annotate>
 133         </action>
 134
 135         <action id="org.freedesktop.login1.flush-devices">
 136                 <_description>Flush device to seat attachments</_description>
 137                 <_message>Authentication is required for resetting how devices are attached to seats.</_message>
 138                 <defaults>
 139                         <allow_any>auth_admin_keep</allow_any>
 140                         <allow_inactive>auth_admin_keep</allow_inactive>
 141                         <allow_active>auth_admin_keep</allow_active>
 142                 </defaults>
 143         </action>
 144
 145         <action id="org.freedesktop.login1.power-off">
 146                 <_description>Power off the system</_description>
 147                 <_message>Authentication is required for powering off the system.</_message>
 148                 <defaults>
 149                         <allow_any>auth_admin_keep</allow_any>
 150                         <allow_inactive>auth_admin_keep</allow_inactive>
 151                         <allow_active>yes</allow_active>
 152                 </defaults>
 153         </action>
 154
 155         <action id="org.freedesktop.login1.power-off-multiple-sessions">
 156                 <_description>Power off the system while other users are logged in</_description>
 157                 <_message>Authentication is required for powering off the system while other users are logged in.</_message>
 158                 <defaults>
 159                         <allow_any>auth_admin_keep</allow_any>
 160                         <allow_inactive>auth_admin_keep</allow_inactive>
 161                         <allow_active>yes</allow_active>
 162                 </defaults>
 163                 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.power-off</annotate>
 164         </action>
 165
 166         <action id="org.freedesktop.login1.power-off-ignore-inhibit">
 167                 <_description>Power off the system while an application asked to inhibit it</_description>
 168                 <_message>Authentication is required for powering off the system while an application asked to inhibit it.</_message>
 169                 <defaults>
 170                         <allow_any>auth_admin_keep</allow_any>
 171                         <allow_inactive>auth_admin_keep</allow_inactive>
 172                         <allow_active>auth_admin_keep</allow_active>
 173                 </defaults>
 174                 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.power-off</annotate>
 175         </action>
 176
 177         <action id="org.freedesktop.login1.reboot">
 178                 <_description>Reboot the system</_description>
 179                 <_message>Authentication is required for rebooting the system.</_message>
 180                 <defaults>
 181                         <allow_any>auth_admin_keep</allow_any>
 182                         <allow_inactive>auth_admin_keep</allow_inactive>
 183                         <allow_active>yes</allow_active>
 184                 </defaults>
 185         </action>
 186
 187         <action id="org.freedesktop.login1.reboot-multiple-sessions">
 188                 <_description>Reboot the system while other users are logged in</_description>
 189                 <_message>Authentication is required for rebooting the system while other users are logged in.</_message>
 190                 <defaults>
 191                         <allow_any>auth_admin_keep</allow_any>
 192                         <allow_inactive>auth_admin_keep</allow_inactive>
 193                         <allow_active>yes</allow_active>
 194                 </defaults>
 195                 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.reboot</annotate>
 196         </action>
 197
 198         <action id="org.freedesktop.login1.reboot-ignore-inhibit">
 199                 <_description>Reboot the system while an application asked to inhibit it</_description>
 200                 <_message>Authentication is required for rebooting the system while an application asked to inhibit it.</_message>
 201                 <defaults>
 202                         <allow_any>auth_admin_keep</allow_any>
 203                         <allow_inactive>auth_admin_keep</allow_inactive>
 204                         <allow_active>auth_admin_keep</allow_active>
 205                 </defaults>
 206                 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.reboot</annotate>
 207         </action>
 208
 209         <action id="org.freedesktop.login1.suspend">
 210                 <_description>Suspend the system</_description>
 211                 <_message>Authentication is required for suspending the system.</_message>
 212                 <defaults>
 213                         <allow_any>auth_admin_keep</allow_any>
 214                         <allow_inactive>auth_admin_keep</allow_inactive>
 215                         <allow_active>yes</allow_active>
 216                 </defaults>
 217         </action>
 218
 219         <action id="org.freedesktop.login1.suspend-multiple-sessions">
 220                 <_description>Suspend the system while other users are logged in</_description>
 221                 <_message>Authentication is required for suspending the system while other users are logged in.</_message>
 222                 <defaults>
 223                         <allow_any>auth_admin_keep</allow_any>
 224                         <allow_inactive>auth_admin_keep</allow_inactive>
 225                         <allow_active>yes</allow_active>
 226                 </defaults>
 227                 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.suspend</annotate>
 228         </action>
 229
 230         <action id="org.freedesktop.login1.suspend-ignore-inhibit">
 231                 <_description>Suspend the system while an application asked to inhibit it</_description>
 232                 <_message>Authentication is required for suspending the system while an application asked to inhibit it.</_message>
 233                 <defaults>
 234                         <allow_any>auth_admin_keep</allow_any>
 235                         <allow_inactive>auth_admin_keep</allow_inactive>
 236                         <allow_active>auth_admin_keep</allow_active>
 237                 </defaults>
 238                 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.suspend</annotate>
 239         </action>
 240
 241         <action id="org.freedesktop.login1.hibernate">
 242                 <_description>Hibernate the system</_description>
 243                 <_message>Authentication is required for hibernating the system.</_message>
 244                 <defaults>
 245                         <allow_any>auth_admin_keep</allow_any>
 246                         <allow_inactive>auth_admin_keep</allow_inactive>
 247                         <allow_active>yes</allow_active>
 248                 </defaults>
 249         </action>
 250
 251         <action id="org.freedesktop.login1.hibernate-multiple-sessions">
 252                 <_description>Hibernate the system while other users are logged in</_description>
 253                 <_message>Authentication is required for hibernating the system while other users are logged in.</_message>
 254                 <defaults>
 255                         <allow_any>auth_admin_keep</allow_any>
 256                         <allow_inactive>auth_admin_keep</allow_inactive>
 257                         <allow_active>yes</allow_active>
 258                 </defaults>
 259                 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.hibernate</annotate>
 260         </action>
 261
 262         <action id="org.freedesktop.login1.hibernate-ignore-inhibit">
 263                 <_description>Hibernate the system while an application asked to inhibit it</_description>
 264                 <_message>Authentication is required for hibernating the system while an application asked to inhibit it.</_message>
 265                 <defaults>
 266                         <allow_any>auth_admin_keep</allow_any>
 267                         <allow_inactive>auth_admin_keep</allow_inactive>
 268                         <allow_active>auth_admin_keep</allow_active>
 269                 </defaults>
 270                 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.hibernate</annotate>
 271         </action>
 272
 273         <action id="org.freedesktop.login1.manage">
 274                 <_description>Manage active sessions, users and seats</_description>
 275                 <_message>Authentication is required for managing active sessions, users and seats.</_message>
 276                 <defaults>
 277                         <allow_any>auth_admin_keep</allow_any>
 278                         <allow_inactive>auth_admin_keep</allow_inactive>
 279                         <allow_active>auth_admin_keep</allow_active>
 280                 </defaults>
 281         </action>
 282
 283         <action id="org.freedesktop.login1.lock-sessions">
 284                 <_description>Lock or unlock active sessions</_description>
 285                 <_message>Authentication is required to lock or unlock active sessions.</_message>
 286                 <defaults>
 287                         <allow_any>auth_admin_keep</allow_any>
 288                         <allow_inactive>auth_admin_keep</allow_inactive>
 289                         <allow_active>auth_admin_keep</allow_active>
 290                 </defaults>
 291         </action>
 292
 293         <action id="org.freedesktop.login1.set-reboot-to-firmware-setup">
 294                 <_description>Allow indication to the firmware to boot to setup interface</_description>
 295                 <_message>Authentication is required to indicate to the firmware to boot to setup interface.</_message>
 296                 <defaults>
 297                         <allow_any>auth_admin_keep</allow_any>
 298                         <allow_inactive>auth_admin_keep</allow_inactive>
 299                         <allow_active>auth_admin_keep</allow_active>
 300                 </defaults>
 301         </action>
 302
 303 </policyconfig>