68bb447a0f
Dropped dbus at_console policy and implemented polkit authorization. By the default policy the query actions are allowed for all users, actions which do modification to the system settings or Tuned state are by default allowed only for active users that have console, others need admin authorization. Resolves: rhbz#1095142 Signed-off-by: Jaroslav Škarvada <jskarvad@redhat.com>
129 lines
4.3 KiB
XML
129 lines
4.3 KiB
XML
<?xml version="1.0" encoding="UTF-8"?>
|
|
<!DOCTYPE policyconfig PUBLIC "-//freedesktop//DTD polkit Policy Configuration 1.0//EN"
|
|
"http://www.freedesktop.org/software/polkit/policyconfig-1.dtd">
|
|
<policyconfig>
|
|
|
|
<vendor>Tuned</vendor>
|
|
<vendor_url>https://fedorahosted.org/tuned/</vendor_url>
|
|
<icon_name>tuned</icon_name>
|
|
|
|
<action id="com.redhat.tuned.active_profile">
|
|
<description>Show active profile</description>
|
|
<message>Authentication is required to show active profile</message>
|
|
<defaults>
|
|
<allow_any>yes</allow_any>
|
|
<allow_inactive>yes</allow_inactive>
|
|
<allow_active>yes</allow_active>
|
|
</defaults>
|
|
</action>
|
|
|
|
<action id="com.redhat.tuned.disable">
|
|
<description>Disable Tuned</description>
|
|
<message>Authentication is required to disable Tuned</message>
|
|
<defaults>
|
|
<allow_any>auth_admin</allow_any>
|
|
<allow_inactive>auth_admin</allow_inactive>
|
|
<allow_active>yes</allow_active>
|
|
</defaults>
|
|
</action>
|
|
|
|
<action id="com.redhat.tuned.is_running">
|
|
<description>Check whether Tuned is running</description>
|
|
<message>Authentication is required to check whether Tuned is running</message>
|
|
<defaults>
|
|
<allow_any>yes</allow_any>
|
|
<allow_inactive>yes</allow_inactive>
|
|
<allow_active>yes</allow_active>
|
|
</defaults>
|
|
</action>
|
|
|
|
<action id="com.redhat.tuned.profile_info">
|
|
<description>Show information about Tuned profile</description>
|
|
<message>Authentication is required to show information about Tuned profile</message>
|
|
<defaults>
|
|
<allow_any>yes</allow_any>
|
|
<allow_inactive>yes</allow_inactive>
|
|
<allow_active>yes</allow_active>
|
|
</defaults>
|
|
</action>
|
|
|
|
<action id="com.redhat.tuned.profiles">
|
|
<description>List Tuned profiles</description>
|
|
<message>Authentication is required to list Tuned profiles</message>
|
|
<defaults>
|
|
<allow_any>yes</allow_any>
|
|
<allow_inactive>yes</allow_inactive>
|
|
<allow_active>yes</allow_active>
|
|
</defaults>
|
|
</action>
|
|
|
|
<action id="com.redhat.tuned.profiles2">
|
|
<description>List Tuned profiles</description>
|
|
<message>Authentication is required to list Tuned profiles</message>
|
|
<defaults>
|
|
<allow_any>yes</allow_any>
|
|
<allow_inactive>yes</allow_inactive>
|
|
<allow_active>yes</allow_active>
|
|
</defaults>
|
|
</action>
|
|
|
|
<action id="com.redhat.tuned.recommend_profile">
|
|
<description>Show Tuned profile name which is recommended for your system</description>
|
|
<message>Authentication is required to show recommended profile name</message>
|
|
<defaults>
|
|
<allow_any>yes</allow_any>
|
|
<allow_inactive>yes</allow_inactive>
|
|
<allow_active>yes</allow_active>
|
|
</defaults>
|
|
</action>
|
|
|
|
<action id="com.redhat.tuned.reload">
|
|
<description>Reload Tuned configuration</description>
|
|
<message>Authentication is required to reload Tuned configuration</message>
|
|
<defaults>
|
|
<allow_any>auth_admin</allow_any>
|
|
<allow_inactive>auth_admin</allow_inactive>
|
|
<allow_active>yes</allow_active>
|
|
</defaults>
|
|
</action>
|
|
|
|
<action id="com.redhat.tuned.start">
|
|
<description>Start Tuned daemon</description>
|
|
<message>Authentication is required to start Tuned daemon</message>
|
|
<defaults>
|
|
<allow_any>auth_admin</allow_any>
|
|
<allow_inactive>auth_admin</allow_inactive>
|
|
<allow_active>yes</allow_active>
|
|
</defaults>
|
|
</action>
|
|
|
|
<action id="com.redhat.tuned.stop">
|
|
<description>Stop Tuned daemon</description>
|
|
<message>Authentication is required to stop Tuned daemon</message>
|
|
<defaults>
|
|
<allow_any>auth_admin</allow_any>
|
|
<allow_inactive>auth_admin</allow_inactive>
|
|
<allow_active>yes</allow_active>
|
|
</defaults>
|
|
</action>
|
|
|
|
<action id="com.redhat.tuned.switch_profile">
|
|
<description>Switch Tuned profile</description>
|
|
<message>Authentication is required to switch Tuned profile</message>
|
|
<defaults>
|
|
<allow_any>auth_admin</allow_any>
|
|
<allow_inactive>auth_admin</allow_inactive>
|
|
<allow_active>yes</allow_active>
|
|
</defaults>
|
|
</action>
|
|
|
|
<action id="com.redhat.tuned.verify_profile">
|
|
<description>Verify Tuned profile</description>
|
|
<message>Authentication is required to verify Tuned profile</message>
|
|
<defaults>
|
|
<allow_any>yes</allow_any>
|
|
<allow_inactive>yes</allow_inactive>
|
|
<allow_active>yes</allow_active>
|
|
</defaults>
|
|
</action>
|
|
</policyconfig>
|