2011-06-17 00:15:02 +02:00
|
|
|
<?xml version="1.0" encoding="UTF-8"?> <!--*-nxml-*-->
|
|
|
|
<!DOCTYPE policyconfig PUBLIC "-//freedesktop//DTD PolicyKit Policy Configuration 1.0//EN"
|
|
|
|
"http://www.freedesktop.org/standards/PolicyKit/1/policyconfig.dtd">
|
|
|
|
|
|
|
|
<!--
|
2020-11-09 05:23:58 +01:00
|
|
|
SPDX-License-Identifier: LGPL-2.1-or-later
|
2017-11-18 18:18:16 +01:00
|
|
|
|
2011-06-17 00:15:02 +02:00
|
|
|
This file is part of systemd.
|
|
|
|
|
|
|
|
systemd is free software; you can redistribute it and/or modify it
|
2012-04-12 00:20:58 +02:00
|
|
|
under the terms of the GNU Lesser General Public License as published by
|
|
|
|
the Free Software Foundation; either version 2.1 of the License, or
|
2011-06-17 00:15:02 +02:00
|
|
|
(at your option) any later version.
|
|
|
|
-->
|
|
|
|
|
|
|
|
<policyconfig>
|
|
|
|
|
|
|
|
<vendor>The systemd Project</vendor>
|
|
|
|
<vendor_url>http://www.freedesktop.org/wiki/Software/systemd</vendor_url>
|
|
|
|
|
2012-09-18 01:16:23 +02:00
|
|
|
<action id="org.freedesktop.login1.inhibit-block-shutdown">
|
2018-02-15 21:21:58 +01:00
|
|
|
<description gettext-domain="systemd">Allow applications to inhibit system shutdown</description>
|
|
|
|
<message gettext-domain="systemd">Authentication is required for an application to inhibit system shutdown.</message>
|
2012-04-16 16:47:33 +02:00
|
|
|
<defaults>
|
2012-09-19 13:10:10 +02:00
|
|
|
<allow_any>no</allow_any>
|
|
|
|
<allow_inactive>yes</allow_inactive>
|
|
|
|
<allow_active>yes</allow_active>
|
|
|
|
</defaults>
|
2012-12-25 11:36:37 +01:00
|
|
|
<annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.inhibit-delay-shutdown org.freedesktop.login1.inhibit-block-sleep org.freedesktop.login1.inhibit-delay-sleep org.freedesktop.login1.inhibit-block-idle</annotate>
|
2012-09-19 13:10:10 +02:00
|
|
|
</action>
|
|
|
|
|
|
|
|
<action id="org.freedesktop.login1.inhibit-delay-shutdown">
|
2018-02-15 21:21:58 +01:00
|
|
|
<description gettext-domain="systemd">Allow applications to delay system shutdown</description>
|
|
|
|
<message gettext-domain="systemd">Authentication is required for an application to delay system shutdown.</message>
|
2012-09-19 13:10:10 +02:00
|
|
|
<defaults>
|
|
|
|
<allow_any>yes</allow_any>
|
2012-04-16 16:47:33 +02:00
|
|
|
<allow_inactive>yes</allow_inactive>
|
|
|
|
<allow_active>yes</allow_active>
|
|
|
|
</defaults>
|
2012-12-25 11:36:37 +01:00
|
|
|
<annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.inhibit-delay-sleep</annotate>
|
2012-04-16 16:47:33 +02:00
|
|
|
</action>
|
|
|
|
|
2012-09-18 01:16:23 +02:00
|
|
|
<action id="org.freedesktop.login1.inhibit-block-sleep">
|
2018-02-15 21:21:58 +01:00
|
|
|
<description gettext-domain="systemd">Allow applications to inhibit system sleep</description>
|
|
|
|
<message gettext-domain="systemd">Authentication is required for an application to inhibit system sleep.</message>
|
2012-09-18 01:16:23 +02:00
|
|
|
<defaults>
|
2012-09-19 13:10:10 +02:00
|
|
|
<allow_any>no</allow_any>
|
|
|
|
<allow_inactive>yes</allow_inactive>
|
|
|
|
<allow_active>yes</allow_active>
|
|
|
|
</defaults>
|
2012-12-25 11:36:37 +01:00
|
|
|
<annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.inhibit-delay-sleep org.freedesktop.login1.inhibit-block-idle</annotate>
|
2012-09-19 13:10:10 +02:00
|
|
|
</action>
|
|
|
|
|
|
|
|
<action id="org.freedesktop.login1.inhibit-delay-sleep">
|
2018-02-15 21:21:58 +01:00
|
|
|
<description gettext-domain="systemd">Allow applications to delay system sleep</description>
|
|
|
|
<message gettext-domain="systemd">Authentication is required for an application to delay system sleep.</message>
|
2012-09-19 13:10:10 +02:00
|
|
|
<defaults>
|
|
|
|
<allow_any>yes</allow_any>
|
2012-09-18 01:16:23 +02:00
|
|
|
<allow_inactive>yes</allow_inactive>
|
|
|
|
<allow_active>yes</allow_active>
|
|
|
|
</defaults>
|
|
|
|
</action>
|
|
|
|
|
|
|
|
<action id="org.freedesktop.login1.inhibit-block-idle">
|
2018-02-15 21:21:58 +01:00
|
|
|
<description gettext-domain="systemd">Allow applications to inhibit automatic system suspend</description>
|
|
|
|
<message gettext-domain="systemd">Authentication is required for an application to inhibit automatic system suspend.</message>
|
2012-09-18 01:16:23 +02:00
|
|
|
<defaults>
|
|
|
|
<allow_any>yes</allow_any>
|
|
|
|
<allow_inactive>yes</allow_inactive>
|
|
|
|
<allow_active>yes</allow_active>
|
|
|
|
</defaults>
|
|
|
|
</action>
|
|
|
|
|
2012-09-19 13:10:10 +02:00
|
|
|
<action id="org.freedesktop.login1.inhibit-handle-power-key">
|
2018-02-15 21:21:58 +01:00
|
|
|
<description gettext-domain="systemd">Allow applications to inhibit system handling of the power key</description>
|
|
|
|
<message gettext-domain="systemd">Authentication is required for an application to inhibit system handling of the power key.</message>
|
2012-09-18 01:16:23 +02:00
|
|
|
<defaults>
|
2012-09-19 13:10:10 +02:00
|
|
|
<allow_any>no</allow_any>
|
2012-09-18 01:16:23 +02:00
|
|
|
<allow_inactive>yes</allow_inactive>
|
|
|
|
<allow_active>yes</allow_active>
|
|
|
|
</defaults>
|
2012-12-25 11:36:37 +01:00
|
|
|
<annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.inhibit-handle-suspend-key org.freedesktop.login1.inhibit-handle-hibernate-key org.freedesktop.login1.inhibit-handle-lid-switch</annotate>
|
2012-09-18 01:16:23 +02:00
|
|
|
</action>
|
|
|
|
|
2012-09-21 15:44:14 +02:00
|
|
|
<action id="org.freedesktop.login1.inhibit-handle-suspend-key">
|
2018-02-15 21:21:58 +01:00
|
|
|
<description gettext-domain="systemd">Allow applications to inhibit system handling of the suspend key</description>
|
|
|
|
<message gettext-domain="systemd">Authentication is required for an application to inhibit system handling of the suspend key.</message>
|
2012-09-21 15:44:14 +02:00
|
|
|
<defaults>
|
|
|
|
<allow_any>no</allow_any>
|
|
|
|
<allow_inactive>yes</allow_inactive>
|
|
|
|
<allow_active>yes</allow_active>
|
|
|
|
</defaults>
|
2012-12-25 11:36:37 +01:00
|
|
|
<annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.inhibit-handle-hibernate-key org.freedesktop.login1.inhibit-handle-lid-switch</annotate>
|
2012-09-21 15:44:14 +02:00
|
|
|
</action>
|
|
|
|
|
|
|
|
<action id="org.freedesktop.login1.inhibit-handle-hibernate-key">
|
2018-02-15 21:21:58 +01:00
|
|
|
<description gettext-domain="systemd">Allow applications to inhibit system handling of the hibernate key</description>
|
|
|
|
<message gettext-domain="systemd">Authentication is required for an application to inhibit system handling of the hibernate key.</message>
|
2012-09-18 01:16:23 +02:00
|
|
|
<defaults>
|
2012-09-19 13:10:10 +02:00
|
|
|
<allow_any>no</allow_any>
|
2012-09-18 01:16:23 +02:00
|
|
|
<allow_inactive>yes</allow_inactive>
|
|
|
|
<allow_active>yes</allow_active>
|
|
|
|
</defaults>
|
|
|
|
</action>
|
|
|
|
|
2012-09-19 13:10:10 +02:00
|
|
|
<action id="org.freedesktop.login1.inhibit-handle-lid-switch">
|
2018-02-15 21:21:58 +01:00
|
|
|
<description gettext-domain="systemd">Allow applications to inhibit system handling of the lid switch</description>
|
|
|
|
<message gettext-domain="systemd">Authentication is required for an application to inhibit system handling of the lid switch.</message>
|
2012-05-05 00:34:48 +02:00
|
|
|
<defaults>
|
2012-09-19 13:10:10 +02:00
|
|
|
<allow_any>no</allow_any>
|
2012-05-05 00:34:48 +02:00
|
|
|
<allow_inactive>yes</allow_inactive>
|
|
|
|
<allow_active>yes</allow_active>
|
|
|
|
</defaults>
|
|
|
|
</action>
|
|
|
|
|
2020-08-14 13:10:18 +02:00
|
|
|
<action id="org.freedesktop.login1.inhibit-handle-reboot-key">
|
|
|
|
<description gettext-domain="systemd">Allow applications to inhibit system handling of the reboot key</description>
|
|
|
|
<message gettext-domain="systemd">Authentication is required for an application to inhibit system handling of the reboot key.</message>
|
|
|
|
<defaults>
|
|
|
|
<allow_any>no</allow_any>
|
|
|
|
<allow_inactive>yes</allow_inactive>
|
|
|
|
<allow_active>yes</allow_active>
|
|
|
|
</defaults>
|
|
|
|
<annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.inhibit-handle-suspend-key org.freedesktop.login1.inhibit-handle-hibernate-key org.freedesktop.login1.inhibit-handle-lid-switch</annotate>
|
|
|
|
</action>
|
|
|
|
|
2016-04-13 04:52:28 +02:00
|
|
|
<action id="org.freedesktop.login1.set-self-linger">
|
2018-02-15 21:21:58 +01:00
|
|
|
<description gettext-domain="systemd">Allow non-logged-in user to run programs</description>
|
|
|
|
<message gettext-domain="systemd">Explicit request is required to run programs as a non-logged-in user.</message>
|
2016-04-13 04:52:28 +02:00
|
|
|
<defaults>
|
|
|
|
<allow_any>yes</allow_any>
|
2016-05-28 11:03:03 +02:00
|
|
|
<allow_inactive>yes</allow_inactive>
|
|
|
|
<allow_active>yes</allow_active>
|
2016-04-13 04:52:28 +02:00
|
|
|
</defaults>
|
|
|
|
</action>
|
|
|
|
|
2011-06-28 03:52:22 +02:00
|
|
|
<action id="org.freedesktop.login1.set-user-linger">
|
2018-02-15 21:21:58 +01:00
|
|
|
<description gettext-domain="systemd">Allow non-logged-in users to run programs</description>
|
|
|
|
<message gettext-domain="systemd">Authentication is required to run programs as a non-logged-in user.</message>
|
2011-06-17 00:15:02 +02:00
|
|
|
<defaults>
|
|
|
|
<allow_any>auth_admin_keep</allow_any>
|
|
|
|
<allow_inactive>auth_admin_keep</allow_inactive>
|
|
|
|
<allow_active>auth_admin_keep</allow_active>
|
|
|
|
</defaults>
|
|
|
|
</action>
|
|
|
|
|
2011-06-28 20:50:43 +02:00
|
|
|
<action id="org.freedesktop.login1.attach-device">
|
2018-02-15 21:21:58 +01:00
|
|
|
<description gettext-domain="systemd">Allow attaching devices to seats</description>
|
2020-02-26 11:24:54 +01:00
|
|
|
<message gettext-domain="systemd">Authentication is required to attach a device to a seat.</message>
|
2011-06-28 20:50:43 +02:00
|
|
|
<defaults>
|
|
|
|
<allow_any>auth_admin_keep</allow_any>
|
|
|
|
<allow_inactive>auth_admin_keep</allow_inactive>
|
|
|
|
<allow_active>auth_admin_keep</allow_active>
|
|
|
|
</defaults>
|
2012-12-25 11:36:37 +01:00
|
|
|
<annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.flush-devices</annotate>
|
2011-06-28 20:50:43 +02:00
|
|
|
</action>
|
|
|
|
|
2011-06-29 03:12:23 +02:00
|
|
|
<action id="org.freedesktop.login1.flush-devices">
|
2018-02-15 21:21:58 +01:00
|
|
|
<description gettext-domain="systemd">Flush device to seat attachments</description>
|
2020-02-26 11:24:54 +01:00
|
|
|
<message gettext-domain="systemd">Authentication is required to reset how devices are attached to seats.</message>
|
2011-07-15 01:52:52 +02:00
|
|
|
<defaults>
|
|
|
|
<allow_any>auth_admin_keep</allow_any>
|
|
|
|
<allow_inactive>auth_admin_keep</allow_inactive>
|
|
|
|
<allow_active>auth_admin_keep</allow_active>
|
|
|
|
</defaults>
|
|
|
|
</action>
|
|
|
|
|
|
|
|
<action id="org.freedesktop.login1.power-off">
|
2018-02-15 21:21:58 +01:00
|
|
|
<description gettext-domain="systemd">Power off the system</description>
|
2020-02-26 11:24:54 +01:00
|
|
|
<message gettext-domain="systemd">Authentication is required to power off the system.</message>
|
2011-07-15 01:52:52 +02:00
|
|
|
<defaults>
|
|
|
|
<allow_any>auth_admin_keep</allow_any>
|
|
|
|
<allow_inactive>auth_admin_keep</allow_inactive>
|
|
|
|
<allow_active>yes</allow_active>
|
|
|
|
</defaults>
|
2015-08-24 14:54:22 +02:00
|
|
|
<annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.set-wall-message</annotate>
|
2011-07-15 01:52:52 +02:00
|
|
|
</action>
|
|
|
|
|
|
|
|
<action id="org.freedesktop.login1.power-off-multiple-sessions">
|
2018-02-15 21:21:58 +01:00
|
|
|
<description gettext-domain="systemd">Power off the system while other users are logged in</description>
|
2020-02-26 11:24:54 +01:00
|
|
|
<message gettext-domain="systemd">Authentication is required to power off the system while other users are logged in.</message>
|
2011-07-15 01:52:52 +02:00
|
|
|
<defaults>
|
|
|
|
<allow_any>auth_admin_keep</allow_any>
|
|
|
|
<allow_inactive>auth_admin_keep</allow_inactive>
|
2013-02-06 14:24:56 +01:00
|
|
|
<allow_active>yes</allow_active>
|
2011-07-15 01:52:52 +02:00
|
|
|
</defaults>
|
2012-12-25 11:36:37 +01:00
|
|
|
<annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.power-off</annotate>
|
2011-07-15 01:52:52 +02:00
|
|
|
</action>
|
|
|
|
|
2012-04-16 16:47:33 +02:00
|
|
|
<action id="org.freedesktop.login1.power-off-ignore-inhibit">
|
2020-02-26 11:32:32 +01:00
|
|
|
<description gettext-domain="systemd">Power off the system while an application is inhibiting this</description>
|
|
|
|
<message gettext-domain="systemd">Authentication is required to power off the system while an application is inhibiting this.</message>
|
2012-04-16 16:47:33 +02:00
|
|
|
<defaults>
|
|
|
|
<allow_any>auth_admin_keep</allow_any>
|
|
|
|
<allow_inactive>auth_admin_keep</allow_inactive>
|
|
|
|
<allow_active>auth_admin_keep</allow_active>
|
|
|
|
</defaults>
|
2012-12-25 11:36:37 +01:00
|
|
|
<annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.power-off</annotate>
|
2012-04-16 16:47:33 +02:00
|
|
|
</action>
|
|
|
|
|
2011-07-15 01:52:52 +02:00
|
|
|
<action id="org.freedesktop.login1.reboot">
|
2018-02-15 21:21:58 +01:00
|
|
|
<description gettext-domain="systemd">Reboot the system</description>
|
2020-02-26 11:24:54 +01:00
|
|
|
<message gettext-domain="systemd">Authentication is required to reboot the system.</message>
|
2011-07-15 01:52:52 +02:00
|
|
|
<defaults>
|
|
|
|
<allow_any>auth_admin_keep</allow_any>
|
|
|
|
<allow_inactive>auth_admin_keep</allow_inactive>
|
|
|
|
<allow_active>yes</allow_active>
|
|
|
|
</defaults>
|
2015-08-24 14:54:22 +02:00
|
|
|
<annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.set-wall-message</annotate>
|
2011-07-15 01:52:52 +02:00
|
|
|
</action>
|
|
|
|
|
|
|
|
<action id="org.freedesktop.login1.reboot-multiple-sessions">
|
2018-02-15 21:21:58 +01:00
|
|
|
<description gettext-domain="systemd">Reboot the system while other users are logged in</description>
|
2020-02-26 11:24:54 +01:00
|
|
|
<message gettext-domain="systemd">Authentication is required to reboot the system while other users are logged in.</message>
|
2011-06-29 03:12:23 +02:00
|
|
|
<defaults>
|
|
|
|
<allow_any>auth_admin_keep</allow_any>
|
|
|
|
<allow_inactive>auth_admin_keep</allow_inactive>
|
2013-09-26 20:31:37 +02:00
|
|
|
<allow_active>yes</allow_active>
|
2011-06-29 03:12:23 +02:00
|
|
|
</defaults>
|
2012-12-25 11:36:37 +01:00
|
|
|
<annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.reboot</annotate>
|
2011-06-29 03:12:23 +02:00
|
|
|
</action>
|
|
|
|
|
2012-04-16 16:47:33 +02:00
|
|
|
<action id="org.freedesktop.login1.reboot-ignore-inhibit">
|
2020-02-26 11:32:32 +01:00
|
|
|
<description gettext-domain="systemd">Reboot the system while an application is inhibiting this</description>
|
|
|
|
<message gettext-domain="systemd">Authentication is required to reboot the system while an application is inhibiting this.</message>
|
2012-05-08 19:02:25 +02:00
|
|
|
<defaults>
|
|
|
|
<allow_any>auth_admin_keep</allow_any>
|
|
|
|
<allow_inactive>auth_admin_keep</allow_inactive>
|
|
|
|
<allow_active>auth_admin_keep</allow_active>
|
|
|
|
</defaults>
|
2012-12-25 11:36:37 +01:00
|
|
|
<annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.reboot</annotate>
|
2012-05-08 19:02:25 +02:00
|
|
|
</action>
|
|
|
|
|
logind: add Halt() and CanHalt() APIs
This adds new method calls Halt() and CanHalt() to the logind bus APIs.
They aren't overly useful (as the whole concept of halting isn't really
too useful), however they clean up one major asymmetry: currently, using
the "shutdown" legacy commands it is possibly to enqueue a "halt"
operation through logind, while logind officially doesn't actually
support this. Moreover, the path through "shutdown" currently ultimately
fails, since the referenced "halt" action isn't actually defined in
PolicyKit.
Finally, the current logic results in an unexpected asymmetry in
systemctl: "systemctl poweroff", "systemctl reboot" are currently
asynchronous (due to the logind involvement) while "systemctl halt"
isnt. Let's clean this up, and make all three APIs implemented by
logind natively, and all three hence asynchronous in "systemctl".
Moreover, let's add the missing PK action.
Fixes: #6957
2017-10-02 16:03:55 +02:00
|
|
|
<action id="org.freedesktop.login1.halt">
|
2018-02-15 21:21:58 +01:00
|
|
|
<description gettext-domain="systemd">Halt the system</description>
|
2020-02-26 11:24:54 +01:00
|
|
|
<message gettext-domain="systemd">Authentication is required to halt the system.</message>
|
logind: add Halt() and CanHalt() APIs
This adds new method calls Halt() and CanHalt() to the logind bus APIs.
They aren't overly useful (as the whole concept of halting isn't really
too useful), however they clean up one major asymmetry: currently, using
the "shutdown" legacy commands it is possibly to enqueue a "halt"
operation through logind, while logind officially doesn't actually
support this. Moreover, the path through "shutdown" currently ultimately
fails, since the referenced "halt" action isn't actually defined in
PolicyKit.
Finally, the current logic results in an unexpected asymmetry in
systemctl: "systemctl poweroff", "systemctl reboot" are currently
asynchronous (due to the logind involvement) while "systemctl halt"
isnt. Let's clean this up, and make all three APIs implemented by
logind natively, and all three hence asynchronous in "systemctl".
Moreover, let's add the missing PK action.
Fixes: #6957
2017-10-02 16:03:55 +02:00
|
|
|
<defaults>
|
|
|
|
<allow_any>auth_admin_keep</allow_any>
|
|
|
|
<allow_inactive>auth_admin_keep</allow_inactive>
|
|
|
|
<allow_active>auth_admin_keep</allow_active>
|
|
|
|
</defaults>
|
|
|
|
<annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.set-wall-message</annotate>
|
|
|
|
</action>
|
|
|
|
|
|
|
|
<action id="org.freedesktop.login1.halt-multiple-sessions">
|
2018-02-15 21:21:58 +01:00
|
|
|
<description gettext-domain="systemd">Halt the system while other users are logged in</description>
|
2020-02-26 11:24:54 +01:00
|
|
|
<message gettext-domain="systemd">Authentication is required to halt the system while other users are logged in.</message>
|
logind: add Halt() and CanHalt() APIs
This adds new method calls Halt() and CanHalt() to the logind bus APIs.
They aren't overly useful (as the whole concept of halting isn't really
too useful), however they clean up one major asymmetry: currently, using
the "shutdown" legacy commands it is possibly to enqueue a "halt"
operation through logind, while logind officially doesn't actually
support this. Moreover, the path through "shutdown" currently ultimately
fails, since the referenced "halt" action isn't actually defined in
PolicyKit.
Finally, the current logic results in an unexpected asymmetry in
systemctl: "systemctl poweroff", "systemctl reboot" are currently
asynchronous (due to the logind involvement) while "systemctl halt"
isnt. Let's clean this up, and make all three APIs implemented by
logind natively, and all three hence asynchronous in "systemctl".
Moreover, let's add the missing PK action.
Fixes: #6957
2017-10-02 16:03:55 +02:00
|
|
|
<defaults>
|
|
|
|
<allow_any>auth_admin_keep</allow_any>
|
|
|
|
<allow_inactive>auth_admin_keep</allow_inactive>
|
|
|
|
<allow_active>auth_admin_keep</allow_active>
|
|
|
|
</defaults>
|
|
|
|
<annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.halt</annotate>
|
|
|
|
</action>
|
|
|
|
|
|
|
|
<action id="org.freedesktop.login1.halt-ignore-inhibit">
|
2020-02-26 11:32:32 +01:00
|
|
|
<description gettext-domain="systemd">Halt the system while an application is inhibiting this</description>
|
|
|
|
<message gettext-domain="systemd">Authentication is required to halt the system while an application is inhibiting this.</message>
|
logind: add Halt() and CanHalt() APIs
This adds new method calls Halt() and CanHalt() to the logind bus APIs.
They aren't overly useful (as the whole concept of halting isn't really
too useful), however they clean up one major asymmetry: currently, using
the "shutdown" legacy commands it is possibly to enqueue a "halt"
operation through logind, while logind officially doesn't actually
support this. Moreover, the path through "shutdown" currently ultimately
fails, since the referenced "halt" action isn't actually defined in
PolicyKit.
Finally, the current logic results in an unexpected asymmetry in
systemctl: "systemctl poweroff", "systemctl reboot" are currently
asynchronous (due to the logind involvement) while "systemctl halt"
isnt. Let's clean this up, and make all three APIs implemented by
logind natively, and all three hence asynchronous in "systemctl".
Moreover, let's add the missing PK action.
Fixes: #6957
2017-10-02 16:03:55 +02:00
|
|
|
<defaults>
|
|
|
|
<allow_any>auth_admin_keep</allow_any>
|
|
|
|
<allow_inactive>auth_admin_keep</allow_inactive>
|
|
|
|
<allow_active>auth_admin_keep</allow_active>
|
|
|
|
</defaults>
|
|
|
|
<annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.halt</annotate>
|
|
|
|
</action>
|
|
|
|
|
2012-05-08 19:02:25 +02:00
|
|
|
<action id="org.freedesktop.login1.suspend">
|
2018-02-15 21:21:58 +01:00
|
|
|
<description gettext-domain="systemd">Suspend the system</description>
|
2020-02-26 11:24:54 +01:00
|
|
|
<message gettext-domain="systemd">Authentication is required to suspend the system.</message>
|
2012-05-08 19:02:25 +02:00
|
|
|
<defaults>
|
|
|
|
<allow_any>auth_admin_keep</allow_any>
|
|
|
|
<allow_inactive>auth_admin_keep</allow_inactive>
|
|
|
|
<allow_active>yes</allow_active>
|
|
|
|
</defaults>
|
|
|
|
</action>
|
|
|
|
|
|
|
|
<action id="org.freedesktop.login1.suspend-multiple-sessions">
|
2018-02-15 21:21:58 +01:00
|
|
|
<description gettext-domain="systemd">Suspend the system while other users are logged in</description>
|
2020-02-26 11:24:54 +01:00
|
|
|
<message gettext-domain="systemd">Authentication is required to suspend the system while other users are logged in.</message>
|
2012-05-08 19:02:25 +02:00
|
|
|
<defaults>
|
|
|
|
<allow_any>auth_admin_keep</allow_any>
|
|
|
|
<allow_inactive>auth_admin_keep</allow_inactive>
|
2012-07-26 15:56:36 +02:00
|
|
|
<allow_active>yes</allow_active>
|
2012-05-08 19:02:25 +02:00
|
|
|
</defaults>
|
2012-12-25 11:36:37 +01:00
|
|
|
<annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.suspend</annotate>
|
2012-05-08 19:02:25 +02:00
|
|
|
</action>
|
|
|
|
|
|
|
|
<action id="org.freedesktop.login1.suspend-ignore-inhibit">
|
2020-02-26 11:32:32 +01:00
|
|
|
<description gettext-domain="systemd">Suspend the system while an application is inhibiting this</description>
|
|
|
|
<message gettext-domain="systemd">Authentication is required to suspend the system while an application is inhibiting this.</message>
|
2012-05-08 19:02:25 +02:00
|
|
|
<defaults>
|
|
|
|
<allow_any>auth_admin_keep</allow_any>
|
|
|
|
<allow_inactive>auth_admin_keep</allow_inactive>
|
|
|
|
<allow_active>auth_admin_keep</allow_active>
|
|
|
|
</defaults>
|
2012-12-25 11:36:37 +01:00
|
|
|
<annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.suspend</annotate>
|
2012-05-08 19:02:25 +02:00
|
|
|
</action>
|
|
|
|
|
|
|
|
<action id="org.freedesktop.login1.hibernate">
|
2018-02-15 21:21:58 +01:00
|
|
|
<description gettext-domain="systemd">Hibernate the system</description>
|
2020-02-26 11:24:54 +01:00
|
|
|
<message gettext-domain="systemd">Authentication is required to hibernate the system.</message>
|
2012-05-08 19:02:25 +02:00
|
|
|
<defaults>
|
|
|
|
<allow_any>auth_admin_keep</allow_any>
|
|
|
|
<allow_inactive>auth_admin_keep</allow_inactive>
|
|
|
|
<allow_active>yes</allow_active>
|
|
|
|
</defaults>
|
|
|
|
</action>
|
|
|
|
|
|
|
|
<action id="org.freedesktop.login1.hibernate-multiple-sessions">
|
2018-02-15 21:21:58 +01:00
|
|
|
<description gettext-domain="systemd">Hibernate the system while other users are logged in</description>
|
2020-02-26 11:24:54 +01:00
|
|
|
<message gettext-domain="systemd">Authentication is required to hibernate the system while other users are logged in.</message>
|
2012-05-08 19:02:25 +02:00
|
|
|
<defaults>
|
|
|
|
<allow_any>auth_admin_keep</allow_any>
|
|
|
|
<allow_inactive>auth_admin_keep</allow_inactive>
|
2014-05-15 18:30:07 +02:00
|
|
|
<allow_active>yes</allow_active>
|
2012-05-08 19:02:25 +02:00
|
|
|
</defaults>
|
2012-12-25 11:36:37 +01:00
|
|
|
<annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.hibernate</annotate>
|
2012-05-08 19:02:25 +02:00
|
|
|
</action>
|
|
|
|
|
|
|
|
<action id="org.freedesktop.login1.hibernate-ignore-inhibit">
|
2020-02-26 11:32:32 +01:00
|
|
|
<description gettext-domain="systemd">Hibernate the system while an application is inhibiting this</description>
|
|
|
|
<message gettext-domain="systemd">Authentication is required to hibernate the system while an application is inhibiting this.</message>
|
2012-04-16 16:47:33 +02:00
|
|
|
<defaults>
|
|
|
|
<allow_any>auth_admin_keep</allow_any>
|
|
|
|
<allow_inactive>auth_admin_keep</allow_inactive>
|
|
|
|
<allow_active>auth_admin_keep</allow_active>
|
|
|
|
</defaults>
|
2012-12-25 11:36:37 +01:00
|
|
|
<annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.hibernate</annotate>
|
2012-04-16 16:47:33 +02:00
|
|
|
</action>
|
|
|
|
|
2015-02-18 12:55:25 +01:00
|
|
|
<action id="org.freedesktop.login1.manage">
|
2018-02-15 21:21:58 +01:00
|
|
|
<description gettext-domain="systemd">Manage active sessions, users and seats</description>
|
2020-02-26 11:24:54 +01:00
|
|
|
<message gettext-domain="systemd">Authentication is required to manage active sessions, users and seats.</message>
|
2015-02-18 12:55:25 +01:00
|
|
|
<defaults>
|
|
|
|
<allow_any>auth_admin_keep</allow_any>
|
|
|
|
<allow_inactive>auth_admin_keep</allow_inactive>
|
|
|
|
<allow_active>auth_admin_keep</allow_active>
|
|
|
|
</defaults>
|
|
|
|
</action>
|
|
|
|
|
|
|
|
<action id="org.freedesktop.login1.lock-sessions">
|
2018-02-15 21:21:58 +01:00
|
|
|
<description gettext-domain="systemd">Lock or unlock active sessions</description>
|
|
|
|
<message gettext-domain="systemd">Authentication is required to lock or unlock active sessions.</message>
|
2015-02-18 12:55:25 +01:00
|
|
|
<defaults>
|
|
|
|
<allow_any>auth_admin_keep</allow_any>
|
|
|
|
<allow_inactive>auth_admin_keep</allow_inactive>
|
|
|
|
<allow_active>auth_admin_keep</allow_active>
|
|
|
|
</defaults>
|
|
|
|
</action>
|
|
|
|
|
2019-03-09 21:30:58 +01:00
|
|
|
<action id="org.freedesktop.login1.set-reboot-parameter">
|
2019-03-25 14:28:25 +01:00
|
|
|
<description gettext-domain="systemd">Set the reboot "reason" in the kernel</description>
|
|
|
|
<message gettext-domain="systemd">Authentication is required to set the reboot "reason" in the kernel.</message>
|
2019-03-09 21:30:58 +01:00
|
|
|
<defaults>
|
|
|
|
<allow_any>auth_admin_keep</allow_any>
|
|
|
|
<allow_inactive>auth_admin_keep</allow_inactive>
|
|
|
|
<allow_active>yes</allow_active>
|
|
|
|
</defaults>
|
|
|
|
<annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.reboot</annotate>
|
|
|
|
</action>
|
|
|
|
|
2015-04-03 18:03:06 +02:00
|
|
|
<action id="org.freedesktop.login1.set-reboot-to-firmware-setup">
|
2018-10-22 20:06:52 +02:00
|
|
|
<description gettext-domain="systemd">Indicate to the firmware to boot to setup interface</description>
|
2018-02-15 21:21:58 +01:00
|
|
|
<message gettext-domain="systemd">Authentication is required to indicate to the firmware to boot to setup interface.</message>
|
2015-04-03 18:03:06 +02:00
|
|
|
<defaults>
|
|
|
|
<allow_any>auth_admin_keep</allow_any>
|
|
|
|
<allow_inactive>auth_admin_keep</allow_inactive>
|
2018-07-20 23:22:50 +02:00
|
|
|
<allow_active>yes</allow_active>
|
2015-04-03 18:03:06 +02:00
|
|
|
</defaults>
|
2018-10-22 20:00:31 +02:00
|
|
|
<annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.reboot</annotate>
|
2015-04-03 18:03:06 +02:00
|
|
|
</action>
|
|
|
|
|
2018-10-22 20:06:52 +02:00
|
|
|
<action id="org.freedesktop.login1.set-reboot-to-boot-loader-menu">
|
|
|
|
<description gettext-domain="systemd">Indicate to the boot loader to boot to the boot loader menu</description>
|
|
|
|
<message gettext-domain="systemd">Authentication is required to indicate to the boot loader to boot to the boot loader menu.</message>
|
|
|
|
<defaults>
|
|
|
|
<allow_any>auth_admin_keep</allow_any>
|
|
|
|
<allow_inactive>auth_admin_keep</allow_inactive>
|
|
|
|
<allow_active>yes</allow_active>
|
|
|
|
</defaults>
|
|
|
|
<annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.reboot</annotate>
|
|
|
|
</action>
|
|
|
|
|
|
|
|
<action id="org.freedesktop.login1.set-reboot-to-boot-loader-entry">
|
|
|
|
<description gettext-domain="systemd">Indicate to the boot loader to boot a specific entry</description>
|
|
|
|
<message gettext-domain="systemd">Authentication is required to indicate to the boot loader to boot into a specific boot loader entry.</message>
|
|
|
|
<defaults>
|
|
|
|
<allow_any>auth_admin_keep</allow_any>
|
|
|
|
<allow_inactive>auth_admin_keep</allow_inactive>
|
|
|
|
<allow_active>yes</allow_active>
|
|
|
|
</defaults>
|
|
|
|
<annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.reboot</annotate>
|
|
|
|
</action>
|
|
|
|
|
2015-08-24 14:54:22 +02:00
|
|
|
<action id="org.freedesktop.login1.set-wall-message">
|
2018-02-15 21:21:58 +01:00
|
|
|
<description gettext-domain="systemd">Set a wall message</description>
|
|
|
|
<message gettext-domain="systemd">Authentication is required to set a wall message</message>
|
2015-08-24 14:54:22 +02:00
|
|
|
<defaults>
|
|
|
|
<allow_any>auth_admin_keep</allow_any>
|
|
|
|
<allow_inactive>auth_admin_keep</allow_inactive>
|
|
|
|
<allow_active>auth_admin_keep</allow_active>
|
|
|
|
</defaults>
|
|
|
|
</action>
|
|
|
|
|
2020-01-22 12:04:38 +01:00
|
|
|
<action id="org.freedesktop.login1.chvt">
|
|
|
|
<description gettext-domain="systemd">Change Session</description>
|
2020-01-30 12:34:05 +01:00
|
|
|
<message gettext-domain="systemd">Authentication is required to change the virtual terminal.</message>
|
2020-01-22 12:04:38 +01:00
|
|
|
<defaults>
|
|
|
|
<allow_any>auth_admin_keep</allow_any>
|
2020-03-14 02:08:50 +01:00
|
|
|
<allow_inactive>yes</allow_inactive>
|
2020-01-22 12:04:38 +01:00
|
|
|
<allow_active>yes</allow_active>
|
|
|
|
</defaults>
|
|
|
|
</action>
|
|
|
|
|
2011-06-17 00:15:02 +02:00
|
|
|
</policyconfig>
|