chiark / gitweb /
login: lose policy a bit: allow user suspend unauthenticated when multiple sessions...
[elogind.git] / src / login / org.freedesktop.login1.policy.in
1 <?xml version="1.0" encoding="UTF-8"?> <!--*-nxml-*-->
2 <!DOCTYPE policyconfig PUBLIC "-//freedesktop//DTD PolicyKit Policy Configuration 1.0//EN"
3         "http://www.freedesktop.org/standards/PolicyKit/1/policyconfig.dtd">
4
5 <!--
6   This file is part of systemd.
7
8   systemd is free software; you can redistribute it and/or modify it
9   under the terms of the GNU Lesser General Public License as published by
10   the Free Software Foundation; either version 2.1 of the License, or
11   (at your option) any later version.
12 -->
13
14 <policyconfig>
15
16         <vendor>The systemd Project</vendor>
17         <vendor_url>http://www.freedesktop.org/wiki/Software/systemd</vendor_url>
18
19         <action id="org.freedesktop.login1.inhibit-block">
20                 <_description>Allow applications to inhibit system shutdown and suspend</_description>
21                 <_message>Authentication is required to allow an application to inhibit system shutdown or suspend.</_message>
22                 <defaults>
23                         <allow_any>auth_admin_keep</allow_any>
24                         <allow_inactive>yes</allow_inactive>
25                         <allow_active>yes</allow_active>
26                 </defaults>
27         </action>
28
29         <action id="org.freedesktop.login1.inhibit-delay">
30                 <_description>Allow applications to delay system shutdown and suspend</_description>
31                 <_message>Authentication is required to allow an application to delay system shutdown or suspend.</_message>
32                 <defaults>
33                         <allow_any>yes</allow_any>
34                         <allow_inactive>yes</allow_inactive>
35                         <allow_active>yes</allow_active>
36                 </defaults>
37         </action>
38
39         <action id="org.freedesktop.login1.set-user-linger">
40                 <_description>Allow non-logged-in users to run programs</_description>
41                 <_message>Authentication is required to allow a non-logged-in user to run programs.</_message>
42                 <defaults>
43                         <allow_any>auth_admin_keep</allow_any>
44                         <allow_inactive>auth_admin_keep</allow_inactive>
45                         <allow_active>auth_admin_keep</allow_active>
46                 </defaults>
47         </action>
48
49         <action id="org.freedesktop.login1.attach-device">
50                 <_description>Allow attaching devices to seats</_description>
51                 <_message>Authentication is required for attaching a device to a seat.</_message>
52                 <defaults>
53                         <allow_any>auth_admin_keep</allow_any>
54                         <allow_inactive>auth_admin_keep</allow_inactive>
55                         <allow_active>auth_admin_keep</allow_active>
56                 </defaults>
57         </action>
58
59         <action id="org.freedesktop.login1.flush-devices">
60                 <_description>Flush device to seat attachments</_description>
61                 <_message>Authentication is required for resetting how devices are attached to seats.</_message>
62                 <defaults>
63                         <allow_any>auth_admin_keep</allow_any>
64                         <allow_inactive>auth_admin_keep</allow_inactive>
65                         <allow_active>auth_admin_keep</allow_active>
66                 </defaults>
67         </action>
68
69         <action id="org.freedesktop.login1.power-off">
70                 <_description>Power off the system</_description>
71                 <_message>Authentication is required for powering off the system.</_message>
72                 <defaults>
73                         <allow_any>auth_admin_keep</allow_any>
74                         <allow_inactive>auth_admin_keep</allow_inactive>
75                         <allow_active>yes</allow_active>
76                 </defaults>
77         </action>
78
79         <action id="org.freedesktop.login1.power-off-multiple-sessions">
80                 <_description>Power off the system while other users are logged in</_description>
81                 <_message>Authentication is required for powering off the system while other users are logged in.</_message>
82                 <defaults>
83                         <allow_any>auth_admin_keep</allow_any>
84                         <allow_inactive>auth_admin_keep</allow_inactive>
85                         <allow_active>auth_admin_keep</allow_active>
86                 </defaults>
87         </action>
88
89         <action id="org.freedesktop.login1.power-off-ignore-inhibit">
90                 <_description>Power off the system while an application asked to inhibit it</_description>
91                 <_message>Authentication is required for powering off the system while an application asked to inhibit it.</_message>
92                 <defaults>
93                         <allow_any>auth_admin_keep</allow_any>
94                         <allow_inactive>auth_admin_keep</allow_inactive>
95                         <allow_active>auth_admin_keep</allow_active>
96                 </defaults>
97         </action>
98
99         <action id="org.freedesktop.login1.reboot">
100                 <_description>Reboot the system</_description>
101                 <_message>Authentication is required for rebooting the system.</_message>
102                 <defaults>
103                         <allow_any>auth_admin_keep</allow_any>
104                         <allow_inactive>auth_admin_keep</allow_inactive>
105                         <allow_active>yes</allow_active>
106                 </defaults>
107         </action>
108
109         <action id="org.freedesktop.login1.reboot-multiple-sessions">
110                 <_description>Reboot the system while other users are logged in</_description>
111                 <_message>Authentication is required for rebooting the system while other users are logged in.</_message>
112                 <defaults>
113                         <allow_any>auth_admin_keep</allow_any>
114                         <allow_inactive>auth_admin_keep</allow_inactive>
115                         <allow_active>auth_admin_keep</allow_active>
116                 </defaults>
117         </action>
118
119         <action id="org.freedesktop.login1.reboot-ignore-inhibit">
120                 <_description>Reboot the system while an application asked to inhibit it</_description>
121                 <_message>Authentication is required for rebooting the system while an application asked to inhibit it.</_message>
122                 <defaults>
123                         <allow_any>auth_admin_keep</allow_any>
124                         <allow_inactive>auth_admin_keep</allow_inactive>
125                         <allow_active>auth_admin_keep</allow_active>
126                 </defaults>
127         </action>
128
129         <action id="org.freedesktop.login1.suspend">
130                 <_description>Suspend the system</_description>
131                 <_message>Authentication is required for suspending the system.</_message>
132                 <defaults>
133                         <allow_any>auth_admin_keep</allow_any>
134                         <allow_inactive>auth_admin_keep</allow_inactive>
135                         <allow_active>yes</allow_active>
136                 </defaults>
137         </action>
138
139         <action id="org.freedesktop.login1.suspend-multiple-sessions">
140                 <_description>Suspend the system while other users are logged in</_description>
141                 <_message>Authentication is required for suspending the system while other users are logged in.</_message>
142                 <defaults>
143                         <allow_any>auth_admin_keep</allow_any>
144                         <allow_inactive>auth_admin_keep</allow_inactive>
145                         <allow_active>yes</allow_active>
146                 </defaults>
147         </action>
148
149         <action id="org.freedesktop.login1.suspend-ignore-inhibit">
150                 <_description>Suspend the system while an application asked to inhibit it</_description>
151                 <_message>Authentication is required for suspending the system while an application asked to inhibit it.</_message>
152                 <defaults>
153                         <allow_any>auth_admin_keep</allow_any>
154                         <allow_inactive>auth_admin_keep</allow_inactive>
155                         <allow_active>auth_admin_keep</allow_active>
156                 </defaults>
157         </action>
158
159         <action id="org.freedesktop.login1.hibernate">
160                 <_description>Hibernate the system</_description>
161                 <_message>Authentication is required for hibernating the system.</_message>
162                 <defaults>
163                         <allow_any>auth_admin_keep</allow_any>
164                         <allow_inactive>auth_admin_keep</allow_inactive>
165                         <allow_active>yes</allow_active>
166                 </defaults>
167         </action>
168
169         <action id="org.freedesktop.login1.hibernate-multiple-sessions">
170                 <_description>Hibernate the system while other users are logged in</_description>
171                 <_message>Authentication is required for hibernating the system while other users are logged in.</_message>
172                 <defaults>
173                         <allow_any>auth_admin_keep</allow_any>
174                         <allow_inactive>auth_admin_keep</allow_inactive>
175                         <allow_active>auth_admin_keep</allow_active>
176                 </defaults>
177         </action>
178
179         <action id="org.freedesktop.login1.hibernate-ignore-inhibit">
180                 <_description>Hibernate the system while an application asked to inhibit it</_description>
181                 <_message>Authentication is required for hibernating the system while an application asked to inhibit it.</_message>
182                 <defaults>
183                         <allow_any>auth_admin_keep</allow_any>
184                         <allow_inactive>auth_admin_keep</allow_inactive>
185                         <allow_active>auth_admin_keep</allow_active>
186                 </defaults>
187         </action>
188
189 </policyconfig>