src/login/org.freedesktop.login1.policy.in

   1 <?xml version="1.0" encoding="UTF-8"?> <!--*-nxml-*-->
   2 <!DOCTYPE policyconfig PUBLIC "-//freedesktop//DTD PolicyKit Policy Configuration 1.0//EN"
   3         "http://www.freedesktop.org/standards/PolicyKit/1/policyconfig.dtd">
   4
   5 <!--
   6   This file is part of elogind.
   7   SPDX-License-Identifier: LGPL-2.1+
   8
   9   elogind is free software; you can redistribute it and/or modify it
  10
  11   under the terms of the GNU Lesser General Public License as published by
  12   the Free Software Foundation; either version 2.1 of the License, or
  13   (at your option) any later version.
  14 -->
  15
  16 <policyconfig>
  17
  18         <vendor>The elogind Project</vendor>
  19         <!-- 0 /// Need to set this to the elogind project url
  20         <vendor_url>http://www.freedesktop.org/wiki/Software/systemd</vendor_url>
  21         --><!-- else -->
  22         <vendor_url>https://github.com/elogind/elogind</vendor_url>
  23         <!-- // 0 -->
  24
  25         <action id="org.freedesktop.login1.inhibit-block-shutdown">
  26                 <description>Allow applications to inhibit system shutdown</description>
  27                 <message>Authentication is required for an application to inhibit system shutdown.</message>
  28                 <defaults>
  29                         <allow_any>no</allow_any>
  30                         <allow_inactive>yes</allow_inactive>
  31                         <allow_active>yes</allow_active>
  32                 </defaults>
  33                 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.inhibit-delay-shutdown org.freedesktop.login1.inhibit-block-sleep org.freedesktop.login1.inhibit-delay-sleep org.freedesktop.login1.inhibit-block-idle</annotate>
  34         </action>
  35
  36         <action id="org.freedesktop.login1.inhibit-delay-shutdown">
  37                 <description>Allow applications to delay system shutdown</description>
  38                 <message>Authentication is required for an application to delay system shutdown.</message>
  39                 <defaults>
  40                         <allow_any>yes</allow_any>
  41                         <allow_inactive>yes</allow_inactive>
  42                         <allow_active>yes</allow_active>
  43                 </defaults>
  44                 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.inhibit-delay-sleep</annotate>
  45         </action>
  46
  47         <action id="org.freedesktop.login1.inhibit-block-sleep">
  48                 <description>Allow applications to inhibit system sleep</description>
  49                 <message>Authentication is required for an application to inhibit system sleep.</message>
  50                 <defaults>
  51                         <allow_any>no</allow_any>
  52                         <allow_inactive>yes</allow_inactive>
  53                         <allow_active>yes</allow_active>
  54                 </defaults>
  55                 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.inhibit-delay-sleep org.freedesktop.login1.inhibit-block-idle</annotate>
  56         </action>
  57
  58         <action id="org.freedesktop.login1.inhibit-delay-sleep">
  59                 <description>Allow applications to delay system sleep</description>
  60                 <message>Authentication is required for an application to delay system sleep.</message>
  61                 <defaults>
  62                         <allow_any>yes</allow_any>
  63                         <allow_inactive>yes</allow_inactive>
  64                         <allow_active>yes</allow_active>
  65                 </defaults>
  66         </action>
  67
  68         <action id="org.freedesktop.login1.inhibit-block-idle">
  69                 <description>Allow applications to inhibit automatic system suspend</description>
  70                 <message>Authentication is required for an application to inhibit automatic system suspend.</message>
  71                 <defaults>
  72                         <allow_any>yes</allow_any>
  73                         <allow_inactive>yes</allow_inactive>
  74                         <allow_active>yes</allow_active>
  75                 </defaults>
  76         </action>
  77
  78         <action id="org.freedesktop.login1.inhibit-handle-power-key">
  79                 <description>Allow applications to inhibit system handling of the power key</description>
  80                 <message>Authentication is required for an application to inhibit system handling of the power key.</message>
  81                 <defaults>
  82                         <allow_any>no</allow_any>
  83                         <allow_inactive>yes</allow_inactive>
  84                         <allow_active>yes</allow_active>
  85                 </defaults>
  86                 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.inhibit-handle-suspend-key org.freedesktop.login1.inhibit-handle-hibernate-key org.freedesktop.login1.inhibit-handle-lid-switch</annotate>
  87         </action>
  88
  89         <action id="org.freedesktop.login1.inhibit-handle-suspend-key">
  90                 <description>Allow applications to inhibit system handling of the suspend key</description>
  91                 <message>Authentication is required for an application to inhibit system handling of the suspend key.</message>
  92                 <defaults>
  93                         <allow_any>no</allow_any>
  94                         <allow_inactive>yes</allow_inactive>
  95                         <allow_active>yes</allow_active>
  96                 </defaults>
  97                 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.inhibit-handle-hibernate-key org.freedesktop.login1.inhibit-handle-lid-switch</annotate>
  98         </action>
  99
 100         <action id="org.freedesktop.login1.inhibit-handle-hibernate-key">
 101                 <description>Allow applications to inhibit system handling of the hibernate key</description>
 102                 <message>Authentication is required for an application to inhibit system handling of the hibernate key.</message>
 103                 <defaults>
 104                         <allow_any>no</allow_any>
 105                         <allow_inactive>yes</allow_inactive>
 106                         <allow_active>yes</allow_active>
 107                 </defaults>
 108         </action>
 109
 110         <action id="org.freedesktop.login1.inhibit-handle-lid-switch">
 111                 <description>Allow applications to inhibit system handling of the lid switch</description>
 112                 <message>Authentication is required for an application to inhibit system handling of the lid switch.</message>
 113                 <defaults>
 114                         <allow_any>no</allow_any>
 115                         <allow_inactive>yes</allow_inactive>
 116                         <allow_active>yes</allow_active>
 117                 </defaults>
 118         </action>
 119
 120         <action id="org.freedesktop.login1.set-self-linger">
 121                 <description>Allow non-logged-in user to run programs</description>
 122                 <message>Explicit request is required to run programs as a non-logged-in user.</message>
 123                 <defaults>
 124                         <allow_any>yes</allow_any>
 125                         <allow_inactive>yes</allow_inactive>
 126                         <allow_active>yes</allow_active>
 127                 </defaults>
 128         </action>
 129
 130         <action id="org.freedesktop.login1.set-user-linger">
 131                 <description>Allow non-logged-in users to run programs</description>
 132                 <message>Authentication is required to run programs as a non-logged-in user.</message>
 133                 <defaults>
 134                         <allow_any>auth_admin_keep</allow_any>
 135                         <allow_inactive>auth_admin_keep</allow_inactive>
 136                         <allow_active>auth_admin_keep</allow_active>
 137                 </defaults>
 138         </action>
 139
 140         <action id="org.freedesktop.login1.attach-device">
 141                 <description>Allow attaching devices to seats</description>
 142                 <message>Authentication is required for attaching a device to a seat.</message>
 143                 <defaults>
 144                         <allow_any>auth_admin_keep</allow_any>
 145                         <allow_inactive>auth_admin_keep</allow_inactive>
 146                         <allow_active>auth_admin_keep</allow_active>
 147                 </defaults>
 148                 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.flush-devices</annotate>
 149         </action>
 150
 151         <action id="org.freedesktop.login1.flush-devices">
 152                 <description>Flush device to seat attachments</description>
 153                 <message>Authentication is required for resetting how devices are attached to seats.</message>
 154                 <defaults>
 155                         <allow_any>auth_admin_keep</allow_any>
 156                         <allow_inactive>auth_admin_keep</allow_inactive>
 157                         <allow_active>auth_admin_keep</allow_active>
 158                 </defaults>
 159         </action>
 160
 161         <action id="org.freedesktop.login1.power-off">
 162                 <description>Power off the system</description>
 163                 <message>Authentication is required for powering off the system.</message>
 164                 <defaults>
 165                         <allow_any>auth_admin_keep</allow_any>
 166                         <allow_inactive>auth_admin_keep</allow_inactive>
 167                         <allow_active>yes</allow_active>
 168                 </defaults>
 169                 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.set-wall-message</annotate>
 170         </action>
 171
 172         <action id="org.freedesktop.login1.power-off-multiple-sessions">
 173                 <description>Power off the system while other users are logged in</description>
 174                 <message>Authentication is required for powering off the system while other users are logged in.</message>
 175                 <defaults>
 176                         <allow_any>auth_admin_keep</allow_any>
 177                         <allow_inactive>auth_admin_keep</allow_inactive>
 178                         <allow_active>yes</allow_active>
 179                 </defaults>
 180                 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.power-off</annotate>
 181         </action>
 182
 183         <action id="org.freedesktop.login1.power-off-ignore-inhibit">
 184                 <description>Power off the system while an application asked to inhibit it</description>
 185                 <message>Authentication is required for powering off the system while an application asked to inhibit it.</message>
 186                 <defaults>
 187                         <allow_any>auth_admin_keep</allow_any>
 188                         <allow_inactive>auth_admin_keep</allow_inactive>
 189                         <allow_active>auth_admin_keep</allow_active>
 190                 </defaults>
 191                 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.power-off</annotate>
 192         </action>
 193
 194         <action id="org.freedesktop.login1.reboot">
 195                 <description>Reboot the system</description>
 196                 <message>Authentication is required for rebooting the system.</message>
 197                 <defaults>
 198                         <allow_any>auth_admin_keep</allow_any>
 199                         <allow_inactive>auth_admin_keep</allow_inactive>
 200                         <allow_active>yes</allow_active>
 201                 </defaults>
 202                 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.set-wall-message</annotate>
 203         </action>
 204
 205         <action id="org.freedesktop.login1.reboot-multiple-sessions">
 206                 <description>Reboot the system while other users are logged in</description>
 207                 <message>Authentication is required for rebooting the system while other users are logged in.</message>
 208                 <defaults>
 209                         <allow_any>auth_admin_keep</allow_any>
 210                         <allow_inactive>auth_admin_keep</allow_inactive>
 211                         <allow_active>yes</allow_active>
 212                 </defaults>
 213                 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.reboot</annotate>
 214         </action>
 215
 216         <action id="org.freedesktop.login1.reboot-ignore-inhibit">
 217                 <description>Reboot the system while an application asked to inhibit it</description>
 218                 <message>Authentication is required for rebooting the system while an application asked to inhibit it.</message>
 219                 <defaults>
 220                         <allow_any>auth_admin_keep</allow_any>
 221                         <allow_inactive>auth_admin_keep</allow_inactive>
 222                         <allow_active>auth_admin_keep</allow_active>
 223                 </defaults>
 224                 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.reboot</annotate>
 225         </action>
 226
 227         <action id="org.freedesktop.login1.halt">
 228                 <description>Halt the system</description>
 229                 <message>Authentication is required for halting the system.</message>
 230                 <defaults>
 231                         <allow_any>auth_admin_keep</allow_any>
 232                         <allow_inactive>auth_admin_keep</allow_inactive>
 233                         <allow_active>auth_admin_keep</allow_active>
 234                 </defaults>
 235                 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.set-wall-message</annotate>
 236         </action>
 237
 238         <action id="org.freedesktop.login1.halt-multiple-sessions">
 239                 <description>Halt the system while other users are logged in</description>
 240                 <message>Authentication is required for halting the system while other users are logged in.</message>
 241                 <defaults>
 242                         <allow_any>auth_admin_keep</allow_any>
 243                         <allow_inactive>auth_admin_keep</allow_inactive>
 244                         <allow_active>auth_admin_keep</allow_active>
 245                 </defaults>
 246                 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.halt</annotate>
 247         </action>
 248
 249         <action id="org.freedesktop.login1.halt-ignore-inhibit">
 250                 <description>Halt the system while an application asked to inhibit it</description>
 251                 <message>Authentication is required for halting the system while an application asked to inhibit it.</message>
 252                 <defaults>
 253                         <allow_any>auth_admin_keep</allow_any>
 254                         <allow_inactive>auth_admin_keep</allow_inactive>
 255                         <allow_active>auth_admin_keep</allow_active>
 256                 </defaults>
 257                 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.halt</annotate>
 258         </action>
 259
 260         <action id="org.freedesktop.login1.suspend">
 261                 <description>Suspend the system</description>
 262                 <message>Authentication is required for suspending the system.</message>
 263                 <defaults>
 264                         <allow_any>auth_admin_keep</allow_any>
 265                         <allow_inactive>auth_admin_keep</allow_inactive>
 266                         <allow_active>yes</allow_active>
 267                 </defaults>
 268         </action>
 269
 270         <action id="org.freedesktop.login1.suspend-multiple-sessions">
 271                 <description>Suspend the system while other users are logged in</description>
 272                 <message>Authentication is required for suspending the system while other users are logged in.</message>
 273                 <defaults>
 274                         <allow_any>auth_admin_keep</allow_any>
 275                         <allow_inactive>auth_admin_keep</allow_inactive>
 276                         <allow_active>yes</allow_active>
 277                 </defaults>
 278                 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.suspend</annotate>
 279         </action>
 280
 281         <action id="org.freedesktop.login1.suspend-ignore-inhibit">
 282                 <description>Suspend the system while an application asked to inhibit it</description>
 283                 <message>Authentication is required for suspending the system while an application asked to inhibit it.</message>
 284                 <defaults>
 285                         <allow_any>auth_admin_keep</allow_any>
 286                         <allow_inactive>auth_admin_keep</allow_inactive>
 287                         <allow_active>auth_admin_keep</allow_active>
 288                 </defaults>
 289                 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.suspend</annotate>
 290         </action>
 291
 292         <action id="org.freedesktop.login1.hibernate">
 293                 <description>Hibernate the system</description>
 294                 <message>Authentication is required for hibernating the system.</message>
 295                 <defaults>
 296                         <allow_any>auth_admin_keep</allow_any>
 297                         <allow_inactive>auth_admin_keep</allow_inactive>
 298                         <allow_active>yes</allow_active>
 299                 </defaults>
 300         </action>
 301
 302         <action id="org.freedesktop.login1.hibernate-multiple-sessions">
 303                 <description>Hibernate the system while other users are logged in</description>
 304                 <message>Authentication is required for hibernating the system while other users are logged in.</message>
 305                 <defaults>
 306                         <allow_any>auth_admin_keep</allow_any>
 307                         <allow_inactive>auth_admin_keep</allow_inactive>
 308                         <allow_active>yes</allow_active>
 309                 </defaults>
 310                 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.hibernate</annotate>
 311         </action>
 312
 313         <action id="org.freedesktop.login1.hibernate-ignore-inhibit">
 314                 <description>Hibernate the system while an application asked to inhibit it</description>
 315                 <message>Authentication is required for hibernating the system while an application asked to inhibit it.</message>
 316                 <defaults>
 317                         <allow_any>auth_admin_keep</allow_any>
 318                         <allow_inactive>auth_admin_keep</allow_inactive>
 319                         <allow_active>auth_admin_keep</allow_active>
 320                 </defaults>
 321                 <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.hibernate</annotate>
 322         </action>
 323
 324         <action id="org.freedesktop.login1.manage">
 325                 <description>Manage active sessions, users and seats</description>
 326                 <message>Authentication is required for managing active sessions, users and seats.</message>
 327                 <defaults>
 328                         <allow_any>auth_admin_keep</allow_any>
 329                         <allow_inactive>auth_admin_keep</allow_inactive>
 330                         <allow_active>auth_admin_keep</allow_active>
 331                 </defaults>
 332         </action>
 333
 334         <action id="org.freedesktop.login1.lock-sessions">
 335                 <description>Lock or unlock active sessions</description>
 336                 <message>Authentication is required to lock or unlock active sessions.</message>
 337                 <defaults>
 338                         <allow_any>auth_admin_keep</allow_any>
 339                         <allow_inactive>auth_admin_keep</allow_inactive>
 340                         <allow_active>auth_admin_keep</allow_active>
 341                 </defaults>
 342         </action>
 343
 344         <action id="org.freedesktop.login1.set-reboot-to-firmware-setup">
 345                 <description>Allow indication to the firmware to boot to setup interface</description>
 346                 <message>Authentication is required to indicate to the firmware to boot to setup interface.</message>
 347                 <defaults>
 348                         <allow_any>auth_admin_keep</allow_any>
 349                         <allow_inactive>auth_admin_keep</allow_inactive>
 350                         <allow_active>auth_admin_keep</allow_active>
 351                 </defaults>
 352         </action>
 353
 354         <action id="org.freedesktop.login1.set-wall-message">
 355                 <description>Set a wall message</description>
 356                 <message>Authentication is required to set a wall message</message>
 357                 <defaults>
 358                         <allow_any>auth_admin_keep</allow_any>
 359                         <allow_inactive>auth_admin_keep</allow_inactive>
 360                         <allow_active>auth_admin_keep</allow_active>
 361                 </defaults>
 362         </action>
 363
 364 </policyconfig>