diff options
| author | Lennart Poettering <lennart@poettering.net> | 2020-01-22 12:04:38 +0100 |
|---|---|---|
| committer | Lennart Poettering <lennart@poettering.net> | 2020-01-22 12:34:31 +0100 |
| commit | 4acf0cfd2f92edb94ad48d04f1ce6c9ab4e19d55 (patch) | |
| tree | a21806b65f6612d270d833994708be61a8b1a5d7 /src/login/org.freedesktop.login1.policy | |
| parent | 269e4d2d6b75329ae39a71ebe2c14500e03cda95 (diff) | |
| download | systemd-4acf0cfd2f92edb94ad48d04f1ce6c9ab4e19d55.tar.gz | |
logind: check PolicyKit before allowing VT switch
Let's lock this down a bit. Effectively nothing much changes, since the
default PK policy will allow users on the VT to change VT. Only users
with no local VT session won't be able to switch VTs.
Diffstat (limited to 'src/login/org.freedesktop.login1.policy')
| -rw-r--r-- | src/login/org.freedesktop.login1.policy | 10 |
1 files changed, 10 insertions, 0 deletions
diff --git a/src/login/org.freedesktop.login1.policy b/src/login/org.freedesktop.login1.policy index 6dc79aa32a..a269c8e313 100644 --- a/src/login/org.freedesktop.login1.policy +++ b/src/login/org.freedesktop.login1.policy @@ -391,4 +391,14 @@ </defaults> </action> + <action id="org.freedesktop.login1.chvt"> + <description gettext-domain="systemd">Change Session</description> + <message gettext-domain="systemd">Authentication is required for changing the virtual terminal.</message> + <defaults> + <allow_any>auth_admin_keep</allow_any> + <allow_inactive>auth_admin_keep</allow_inactive> + <allow_active>yes</allow_active> + </defaults> + </action> + </policyconfig> |