src/login/org.freedesktop.login1.policy.in

   1 <?xml version="1.0" encoding="UTF-8"?> <!--*-nxml-*-->
   2 <!DOCTYPE policyconfig PUBLIC "-//freedesktop//DTD PolicyKit Policy Configuration 1.0//EN"
   3         "http://www.freedesktop.org/standards/PolicyKit/1/policyconfig.dtd">
   4
   5 <!--
   6   This file is part of elogind.
   7
   8   elogind is free software; you can redistribute it and/or modify it
   9   under the terms of the GNU Lesser General Public License as published by
  10   the Free Software Foundation; either version 2.1 of the License, or
  11   (at your option) any later version.
  12 -->
  13
  14 <policyconfig>
  15
  16         <vendor>The systemd project's "logind", extracted to a standalone package</vendor>
  17         <vendor_url>https://github.com/elogind/elogind</vendor_url>
  18
  19         <action id="org.freedesktop.login1.inhibit-block-shutdown">
  20                 <_description>Allow applications to inhibit system shutdown</_description>
  21                 <_message>Authentication is required for an application to inhibit system shutdown.</_message>
  22                 <defaults>
  23                         <allow_any>no</allow_any>
  24                         <allow_inactive>yes</allow_inactive>
  25                         <allow_active>yes</allow_active>
  26                 </defaults>
  27                 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.inhibit-delay-shutdown org.freedesktop.login1.inhibit-block-sleep org.freedesktop.login1.inhibit-delay-sleep org.freedesktop.login1.inhibit-block-idle</annotate>
  28         </action>
  29
  30         <action id="org.freedesktop.login1.inhibit-delay-shutdown">
  31                 <_description>Allow applications to delay system shutdown</_description>
  32                 <_message>Authentication is required for an application to delay system shutdown.</_message>
  33                 <defaults>
  34                         <allow_any>yes</allow_any>
  35                         <allow_inactive>yes</allow_inactive>
  36                         <allow_active>yes</allow_active>
  37                 </defaults>
  38                 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.inhibit-delay-sleep</annotate>
  39         </action>
  40
  41         <action id="org.freedesktop.login1.inhibit-block-sleep">
  42                 <_description>Allow applications to inhibit system sleep</_description>
  43                 <_message>Authentication is required for an application to inhibit system sleep.</_message>
  44                 <defaults>
  45                         <allow_any>no</allow_any>
  46                         <allow_inactive>yes</allow_inactive>
  47                         <allow_active>yes</allow_active>
  48                 </defaults>
  49                 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.inhibit-delay-sleep org.freedesktop.login1.inhibit-block-idle</annotate>
  50         </action>
  51
  52         <action id="org.freedesktop.login1.inhibit-delay-sleep">
  53                 <_description>Allow applications to delay system sleep</_description>
  54                 <_message>Authentication is required for an application to delay system sleep.</_message>
  55                 <defaults>
  56                         <allow_any>yes</allow_any>
  57                         <allow_inactive>yes</allow_inactive>
  58                         <allow_active>yes</allow_active>
  59                 </defaults>
  60         </action>
  61
  62         <action id="org.freedesktop.login1.inhibit-block-idle">
  63                 <_description>Allow applications to inhibit automatic system suspend</_description>
  64                 <_message>Authentication is required for an application to inhibit automatic system suspend.</_message>
  65                 <defaults>
  66                         <allow_any>yes</allow_any>
  67                         <allow_inactive>yes</allow_inactive>
  68                         <allow_active>yes</allow_active>
  69                 </defaults>
  70         </action>
  71
  72         <action id="org.freedesktop.login1.inhibit-handle-power-key">
  73                 <_description>Allow applications to inhibit system handling of the power key</_description>
  74                 <_message>Authentication is required for an application to inhibit system handling of the power key.</_message>
  75                 <defaults>
  76                         <allow_any>no</allow_any>
  77                         <allow_inactive>yes</allow_inactive>
  78                         <allow_active>yes</allow_active>
  79                 </defaults>
  80                 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.inhibit-handle-suspend-key org.freedesktop.login1.inhibit-handle-hibernate-key org.freedesktop.login1.inhibit-handle-lid-switch</annotate>
  81         </action>
  82
  83         <action id="org.freedesktop.login1.inhibit-handle-suspend-key">
  84                 <_description>Allow applications to inhibit system handling of the suspend key</_description>
  85                 <_message>Authentication is required for an application to inhibit system handling of the suspend key.</_message>
  86                 <defaults>
  87                         <allow_any>no</allow_any>
  88                         <allow_inactive>yes</allow_inactive>
  89                         <allow_active>yes</allow_active>
  90                 </defaults>
  91                 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.inhibit-handle-hibernate-key org.freedesktop.login1.inhibit-handle-lid-switch</annotate>
  92         </action>
  93
  94         <action id="org.freedesktop.login1.inhibit-handle-hibernate-key">
  95                 <_description>Allow applications to inhibit system handling of the hibernate key</_description>
  96                 <_message>Authentication is required for an application to inhibit system handling of the hibernate key.</_message>
  97                 <defaults>
  98                         <allow_any>no</allow_any>
  99                         <allow_inactive>yes</allow_inactive>
 100                         <allow_active>yes</allow_active>
 101                 </defaults>
 102         </action>
 103
 104         <action id="org.freedesktop.login1.inhibit-handle-lid-switch">
 105                 <_description>Allow applications to inhibit system handling of the lid switch</_description>
 106                 <_message>Authentication is required for an application to inhibit system handling of the lid switch.</_message>
 107                 <defaults>
 108                         <allow_any>no</allow_any>
 109                         <allow_inactive>yes</allow_inactive>
 110                         <allow_active>yes</allow_active>
 111                 </defaults>
 112         </action>
 113
 114         <action id="org.freedesktop.login1.set-self-linger">
 115                 <_description>Allow non-logged-in user to run programs</_description>
 116                 <_message>Explicit request is required to run programs as a non-logged-in user.</_message>
 117                 <defaults>
 118                         <allow_any>yes</allow_any>
 119                         <allow_inactive>yes</allow_inactive>
 120                         <allow_active>yes</allow_active>
 121                 </defaults>
 122         </action>
 123
 124         <action id="org.freedesktop.login1.set-user-linger">
 125                 <_description>Allow non-logged-in users to run programs</_description>
 126                 <_message>Authentication is required to run programs as a non-logged-in user.</_message>
 127                 <defaults>
 128                         <allow_any>auth_admin_keep</allow_any>
 129                         <allow_inactive>auth_admin_keep</allow_inactive>
 130                         <allow_active>auth_admin_keep</allow_active>
 131                 </defaults>
 132         </action>
 133
 134         <action id="org.freedesktop.login1.attach-device">
 135                 <_description>Allow attaching devices to seats</_description>
 136                 <_message>Authentication is required for attaching a device to a seat.</_message>
 137                 <defaults>
 138                         <allow_any>auth_admin_keep</allow_any>
 139                         <allow_inactive>auth_admin_keep</allow_inactive>
 140                         <allow_active>auth_admin_keep</allow_active>
 141                 </defaults>
 142                 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.flush-devices</annotate>
 143         </action>
 144
 145         <action id="org.freedesktop.login1.flush-devices">
 146                 <_description>Flush device to seat attachments</_description>
 147                 <_message>Authentication is required for resetting how devices are attached to seats.</_message>
 148                 <defaults>
 149                         <allow_any>auth_admin_keep</allow_any>
 150                         <allow_inactive>auth_admin_keep</allow_inactive>
 151                         <allow_active>auth_admin_keep</allow_active>
 152                 </defaults>
 153         </action>
 154
 155         <action id="org.freedesktop.login1.power-off">
 156                 <_description>Power off the system</_description>
 157                 <_message>Authentication is required for powering off the system.</_message>
 158                 <defaults>
 159                         <allow_any>auth_admin_keep</allow_any>
 160                         <allow_inactive>auth_admin_keep</allow_inactive>
 161                         <allow_active>yes</allow_active>
 162                 </defaults>
 163                 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.set-wall-message</annotate>
 164         </action>
 165
 166         <action id="org.freedesktop.login1.power-off-multiple-sessions">
 167                 <_description>Power off the system while other users are logged in</_description>
 168                 <_message>Authentication is required for powering off the system while other users are logged in.</_message>
 169                 <defaults>
 170                         <allow_any>auth_admin_keep</allow_any>
 171                         <allow_inactive>auth_admin_keep</allow_inactive>
 172                         <allow_active>yes</allow_active>
 173                 </defaults>
 174                 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.power-off</annotate>
 175         </action>
 176
 177         <action id="org.freedesktop.login1.power-off-ignore-inhibit">
 178                 <_description>Power off the system while an application asked to inhibit it</_description>
 179                 <_message>Authentication is required for powering off the system while an application asked to inhibit it.</_message>
 180                 <defaults>
 181                         <allow_any>auth_admin_keep</allow_any>
 182                         <allow_inactive>auth_admin_keep</allow_inactive>
 183                         <allow_active>auth_admin_keep</allow_active>
 184                 </defaults>
 185                 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.power-off</annotate>
 186         </action>
 187
 188         <action id="org.freedesktop.login1.reboot">
 189                 <_description>Reboot the system</_description>
 190                 <_message>Authentication is required for rebooting the system.</_message>
 191                 <defaults>
 192                         <allow_any>auth_admin_keep</allow_any>
 193                         <allow_inactive>auth_admin_keep</allow_inactive>
 194                         <allow_active>yes</allow_active>
 195                 </defaults>
 196                 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.set-wall-message</annotate>
 197         </action>
 198
 199         <action id="org.freedesktop.login1.reboot-multiple-sessions">
 200                 <_description>Reboot the system while other users are logged in</_description>
 201                 <_message>Authentication is required for rebooting the system while other users are logged in.</_message>
 202                 <defaults>
 203                         <allow_any>auth_admin_keep</allow_any>
 204                         <allow_inactive>auth_admin_keep</allow_inactive>
 205                         <allow_active>yes</allow_active>
 206                 </defaults>
 207                 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.reboot</annotate>
 208         </action>
 209
 210         <action id="org.freedesktop.login1.reboot-ignore-inhibit">
 211                 <_description>Reboot the system while an application asked to inhibit it</_description>
 212                 <_message>Authentication is required for rebooting the system while an application asked to inhibit it.</_message>
 213                 <defaults>
 214                         <allow_any>auth_admin_keep</allow_any>
 215                         <allow_inactive>auth_admin_keep</allow_inactive>
 216                         <allow_active>auth_admin_keep</allow_active>
 217                 </defaults>
 218                 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.reboot</annotate>
 219         </action>
 220
 221         <action id="org.freedesktop.login1.suspend">
 222                 <_description>Suspend the system</_description>
 223                 <_message>Authentication is required for suspending the system.</_message>
 224                 <defaults>
 225                         <allow_any>auth_admin_keep</allow_any>
 226                         <allow_inactive>auth_admin_keep</allow_inactive>
 227                         <allow_active>yes</allow_active>
 228                 </defaults>
 229         </action>
 230
 231         <action id="org.freedesktop.login1.suspend-multiple-sessions">
 232                 <_description>Suspend the system while other users are logged in</_description>
 233                 <_message>Authentication is required for suspending the system while other users are logged in.</_message>
 234                 <defaults>
 235                         <allow_any>auth_admin_keep</allow_any>
 236                         <allow_inactive>auth_admin_keep</allow_inactive>
 237                         <allow_active>yes</allow_active>
 238                 </defaults>
 239                 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.suspend</annotate>
 240         </action>
 241
 242         <action id="org.freedesktop.login1.suspend-ignore-inhibit">
 243                 <_description>Suspend the system while an application asked to inhibit it</_description>
 244                 <_message>Authentication is required for suspending the system while an application asked to inhibit it.</_message>
 245                 <defaults>
 246                         <allow_any>auth_admin_keep</allow_any>
 247                         <allow_inactive>auth_admin_keep</allow_inactive>
 248                         <allow_active>auth_admin_keep</allow_active>
 249                 </defaults>
 250                 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.suspend</annotate>
 251         </action>
 252
 253         <action id="org.freedesktop.login1.hibernate">
 254                 <_description>Hibernate the system</_description>
 255                 <_message>Authentication is required for hibernating the system.</_message>
 256                 <defaults>
 257                         <allow_any>auth_admin_keep</allow_any>
 258                         <allow_inactive>auth_admin_keep</allow_inactive>
 259                         <allow_active>yes</allow_active>
 260                 </defaults>
 261         </action>
 262
 263         <action id="org.freedesktop.login1.hibernate-multiple-sessions">
 264                 <_description>Hibernate the system while other users are logged in</_description>
 265                 <_message>Authentication is required for hibernating the system while other users are logged in.</_message>
 266                 <defaults>
 267                         <allow_any>auth_admin_keep</allow_any>
 268                         <allow_inactive>auth_admin_keep</allow_inactive>
 269                         <allow_active>yes</allow_active>
 270                 </defaults>
 271                 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.hibernate</annotate>
 272         </action>
 273
 274         <action id="org.freedesktop.login1.hibernate-ignore-inhibit">
 275                 <_description>Hibernate the system while an application asked to inhibit it</_description>
 276                 <_message>Authentication is required for hibernating the system while an application asked to inhibit it.</_message>
 277                 <defaults>
 278                         <allow_any>auth_admin_keep</allow_any>
 279                         <allow_inactive>auth_admin_keep</allow_inactive>
 280                         <allow_active>auth_admin_keep</allow_active>
 281                 </defaults>
 282                 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.hibernate</annotate>
 283         </action>
 284
 285         <action id="org.freedesktop.login1.manage">
 286                 <_description>Manage active sessions, users and seats</_description>
 287                 <_message>Authentication is required for managing active sessions, users and seats.</_message>
 288                 <defaults>
 289                         <allow_any>auth_admin_keep</allow_any>
 290                         <allow_inactive>auth_admin_keep</allow_inactive>
 291                         <allow_active>auth_admin_keep</allow_active>
 292                 </defaults>
 293         </action>
 294
 295         <action id="org.freedesktop.login1.lock-sessions">
 296                 <_description>Lock or unlock active sessions</_description>
 297                 <_message>Authentication is required to lock or unlock active sessions.</_message>
 298                 <defaults>
 299                         <allow_any>auth_admin_keep</allow_any>
 300                         <allow_inactive>auth_admin_keep</allow_inactive>
 301                         <allow_active>auth_admin_keep</allow_active>
 302                 </defaults>
 303         </action>
 304
 305         <action id="org.freedesktop.login1.set-reboot-to-firmware-setup">
 306                 <_description>Allow indication to the firmware to boot to setup interface</_description>
 307                 <_message>Authentication is required to indicate to the firmware to boot to setup interface.</_message>
 308                 <defaults>
 309                         <allow_any>auth_admin_keep</allow_any>
 310                         <allow_inactive>auth_admin_keep</allow_inactive>
 311                         <allow_active>auth_admin_keep</allow_active>
 312                 </defaults>
 313         </action>
 314
 315         <action id="org.freedesktop.login1.set-wall-message">
 316                 <_description>Set a wall message</_description>
 317                 <_message>Authentication is required to set a wall message</_message>
 318                 <defaults>
 319                         <allow_any>auth_admin_keep</allow_any>
 320                         <allow_inactive>auth_admin_keep</allow_inactive>
 321                         <allow_active>auth_admin_keep</allow_active>
 322                 </defaults>
 323         </action>
 324
 325 </policyconfig>