diff options
| author | Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> | 2021-03-09 09:03:58 +0100 |
|---|---|---|
| committer | Luca Boccassi <luca.boccassi@gmail.com> | 2021-03-09 14:37:08 +0000 |
| commit | 9ca6d78061c888b77aa0c878d465aad4955864a6 (patch) | |
| tree | 66766b03ef58cf566bdc3f130473e0c508856df4 /src/login/org.freedesktop.login1.conf | |
| parent | e2dba58930bf6d1a60bb6f16481a24eb3d67c45f (diff) | |
| download | systemd-9ca6d78061c888b77aa0c878d465aad4955864a6.tar.gz | |
logind: add …WithFlags methods to policy
Without this, privilege escalation through polkit does not work, because all
methods fail with permission errors.
Forgotten in 8885fed4e3a52cf1bf105e42043203c485ed9d92.
Fixes https://bugzilla.redhat.com/show_bug.cgi?id=1933335.
Diffstat (limited to 'src/login/org.freedesktop.login1.conf')
| -rw-r--r-- | src/login/org.freedesktop.login1.conf | 28 |
1 files changed, 28 insertions, 0 deletions
diff --git a/src/login/org.freedesktop.login1.conf b/src/login/org.freedesktop.login1.conf index ac14942ba9..95d2ef0f06 100644 --- a/src/login/org.freedesktop.login1.conf +++ b/src/login/org.freedesktop.login1.conf @@ -132,30 +132,58 @@ <allow send_destination="org.freedesktop.login1" send_interface="org.freedesktop.login1.Manager" + send_member="PowerOffWithFlags"/> + + <allow send_destination="org.freedesktop.login1" + send_interface="org.freedesktop.login1.Manager" send_member="Reboot"/> <allow send_destination="org.freedesktop.login1" send_interface="org.freedesktop.login1.Manager" + send_member="RebootWithFlags"/> + + <allow send_destination="org.freedesktop.login1" + send_interface="org.freedesktop.login1.Manager" send_member="Halt"/> <allow send_destination="org.freedesktop.login1" send_interface="org.freedesktop.login1.Manager" + send_member="HaltWithFlags"/> + + <allow send_destination="org.freedesktop.login1" + send_interface="org.freedesktop.login1.Manager" send_member="Suspend"/> <allow send_destination="org.freedesktop.login1" send_interface="org.freedesktop.login1.Manager" + send_member="SuspendWithFlags"/> + + <allow send_destination="org.freedesktop.login1" + send_interface="org.freedesktop.login1.Manager" send_member="Hibernate"/> <allow send_destination="org.freedesktop.login1" send_interface="org.freedesktop.login1.Manager" + send_member="HibernateWithFlags"/> + + <allow send_destination="org.freedesktop.login1" + send_interface="org.freedesktop.login1.Manager" send_member="HybridSleep"/> <allow send_destination="org.freedesktop.login1" send_interface="org.freedesktop.login1.Manager" + send_member="HybridSleepWithFlags"/> + + <allow send_destination="org.freedesktop.login1" + send_interface="org.freedesktop.login1.Manager" send_member="SuspendThenHibernate"/> <allow send_destination="org.freedesktop.login1" send_interface="org.freedesktop.login1.Manager" + send_member="SuspendThenHibernateWithFlags"/> + + <allow send_destination="org.freedesktop.login1" + send_interface="org.freedesktop.login1.Manager" send_member="CanPowerOff"/> <allow send_destination="org.freedesktop.login1" |