mirror of
https://gitlab.freedesktop.org/NetworkManager/NetworkManager.git
synced 2026-05-23 00:08:13 +02:00
Moves the system settings permissions checking into the core service's permissions checking, which at the same time enables 3-way permission reporting (yes, no, auth) instead of the old yes/no that we had for system settings permissions before. This allows UI to show a lock icon or such when the user could authenticate to gain the permission. It also moves the wifi-create permissions' namespace to the main namespace (not .settings) since they really should be checked before starting a shared wifi connection, rather than having anything to do with the settings service.
94 lines
3.5 KiB
XML
94 lines
3.5 KiB
XML
<?xml version="1.0" encoding="UTF-8"?>
|
|
<!DOCTYPE policyconfig PUBLIC
|
|
"-//freedesktop//DTD PolicyKit Policy Configuration 1.0//EN"
|
|
"http://www.freedesktop.org/standards/PolicyKit/1.0/policyconfig.dtd">
|
|
|
|
<policyconfig>
|
|
|
|
<vendor>NetworkManager</vendor>
|
|
<vendor_url>http://www.gnome.org/projects/NetworkManager</vendor_url>
|
|
<icon_name>nm-icon</icon_name>
|
|
|
|
<action id="org.freedesktop.NetworkManager.enable-disable-network">
|
|
<_description>Enable or disable system networking</_description>
|
|
<_message>System policy prevents enabling or disabling system networking</_message>
|
|
<defaults>
|
|
<allow_inactive>no</allow_inactive>
|
|
<allow_active>yes</allow_active>
|
|
</defaults>
|
|
</action>
|
|
|
|
<action id="org.freedesktop.NetworkManager.sleep-wake">
|
|
<_description>Put NetworkManager to sleep or wake it up (should only be used by system power management)</_description>
|
|
<_message>System policy prevents putting NetworkManager to sleep or waking it up</_message>
|
|
<defaults>
|
|
<allow_inactive>no</allow_inactive>
|
|
<allow_active>no</allow_active>
|
|
</defaults>
|
|
</action>
|
|
|
|
<action id="org.freedesktop.NetworkManager.enable-disable-wifi">
|
|
<_description>Enable or disable WiFi devices</_description>
|
|
<_message>System policy prevents enabling or disabling WiFi devices</_message>
|
|
<defaults>
|
|
<allow_inactive>no</allow_inactive>
|
|
<allow_active>yes</allow_active>
|
|
</defaults>
|
|
</action>
|
|
|
|
<action id="org.freedesktop.NetworkManager.enable-disable-wwan">
|
|
<_description>Enable or disable mobile broadband devices</_description>
|
|
<_message>System policy prevents enabling or disabling mobile broadband devices</_message>
|
|
<defaults>
|
|
<allow_inactive>no</allow_inactive>
|
|
<allow_active>yes</allow_active>
|
|
</defaults>
|
|
</action>
|
|
|
|
<action id="org.freedesktop.NetworkManager.network-control">
|
|
<_description>Allow control of network connections</_description>
|
|
<_message>System policy prevents control of network connections</_message>
|
|
<defaults>
|
|
<allow_inactive>yes</allow_inactive>
|
|
<allow_active>yes</allow_active>
|
|
</defaults>
|
|
</action>
|
|
|
|
<action id="org.freedesktop.NetworkManager.wifi.share.protected">
|
|
<_description>Connection sharing via a protected WiFi network</_description>
|
|
<_message>System policy prevents sharing connections via a protected WiFi network</_message>
|
|
<defaults>
|
|
<allow_inactive>no</allow_inactive>
|
|
<allow_active>yes</allow_active>
|
|
</defaults>
|
|
</action>
|
|
|
|
<action id="org.freedesktop.NetworkManager.wifi.share.open">
|
|
<_description>Connection sharing via an open WiFi network</_description>
|
|
<_message>System policy prevents sharing connections via an open WiFi network</_message>
|
|
<defaults>
|
|
<allow_inactive>no</allow_inactive>
|
|
<allow_active>yes</allow_active>
|
|
</defaults>
|
|
</action>
|
|
|
|
<action id="org.freedesktop.NetworkManager.settings.modify">
|
|
<_description>Modify system connections</_description>
|
|
<_message>System policy prevents modification of system settings</_message>
|
|
<defaults>
|
|
<allow_inactive>no</allow_inactive>
|
|
<allow_active>auth_admin_keep</allow_active>
|
|
</defaults>
|
|
</action>
|
|
|
|
<action id="org.freedesktop.NetworkManager.settings.hostname.modify">
|
|
<_description>Modify persistent system hostname</_description>
|
|
<_message>System policy prevents modification of the persistent system hostname</_message>
|
|
<defaults>
|
|
<allow_inactive>no</allow_inactive>
|
|
<allow_active>auth_admin_keep</allow_active>
|
|
</defaults>
|
|
</action>
|
|
|
|
</policyconfig>
|
|
|