summaryrefslogtreecommitdiff
path: root/policy
AgeCommit message (Collapse)AuthorFilesLines
2012-10-04build: distcheck fixesDan Winship1-1/+1
2012-09-28policy: add a configure option for a permissive modify.system defaultDan Winship2-4/+4
Add --enable-modify-system, to change the default for org.freedesktop.NetworkManager.settings.modify.system to allow users to edit system connections without needing to authenticate.
2011-03-21policy: revert system modify permission to auth_admin_keepDan Williams1-1/+1
For now, until we figure out a better story here. We don't necessarily want to require an admin password just to connect to a wifi network after installing, but for now lets be secure-by-default while we figure out the right solution.
2011-02-11policy: rename HOSTNAME_MODIFY -> MODIFY_HOSTNAME for consistencyDan Williams1-1/+1
2011-02-11policy: add a "modify own" permission for single-user-visible connectionsDan Williams1-0/+9
This policy will allow users to modify their personal connections (ie maybe VPN connections, etc) distinctly from system-wide connections that affect more than just their user. It makes sense to be more lenient when making changes to settings that don't affect other users.
2011-02-11policy: rename "modfiy" permission to "modify system"Dan Williams1-4/+4
Meaning stays the same, but this will allow us to differentiate in the future between personal connections (ie, just visible to one user) and system connections (visible to more than one user).
2011-01-12Merge remote branch 'origin/master' into rm-usersetDan Williams1-0/+9
2011-01-02wimax: fix up WiMAX radio enable/disable and add polkit permissionDan Williams1-0/+9
2010-08-26core: consolidate all permissions checking into main D-Bus interfaceDan Williams1-16/+16
Moves the system settings permissions checking into the core service's permissions checking, which at the same time enables 3-way permission reporting (yes, no, auth) instead of the old yes/no that we had for system settings permissions before. This allows UI to show a lock icon or such when the user could authenticate to gain the permission. It also moves the wifi-create permissions' namespace to the main namespace (not .settings) since they really should be checked before starting a shared wifi connection, rather than having anything to do with the settings service.
2010-08-07NetworkMangerSettings -> NetworkManager.SettingsDaniel Gnoutcheff3-49/+36
Just for consistency, make settings related stuff live under the org.freedesktop.NetworkManager namespace, rather than its own org.freedesktop.NetworkManagerSettings namespace. Renames are done for DBus interface names, DBus object paths, and polkit actions.
2010-08-06Remove use-user-connections polkit actionDaniel Gnoutcheff1-9/+0
2010-07-14policy: don't tear down user connections on VT switch (rh #614556)Dan Williams1-1/+1
PK's "allow_inactive" actually means "allow inactive *local* users", so we do want to allow inactive local users to provide user connections. We don't want to allow non-local inactive users to provide user connections. So make the use-user-connections privilege match for both active and inactive so we get the behavior we want.
2010-06-02core: add policy for overall network controlDan Williams1-0/+9
Allows for locking down connections completely and disallowing certain users from touching networking at all.
2010-05-29core: PolicyKit-protect sleep/wakeDan Williams1-0/+9
Default to 'not allowed', distros that need backwards compatibility can flip this to 'yes' if they need to. At this point, only power management scripts should call these functions.
2010-05-28core: add permissions framework for various operations (rh #585182) (bgo ↵Dan Williams2-1/+53
#619323)
2009-08-26libnm-glib: libnm_glib -> libnm-glibDan Williams1-13/+14
Bothered me for a long time; now that we've bumped the soname, we can rename the library too.
2009-08-24system-settings: add permissionsDan Williams1-0/+27
Since the new PolicyKit does away with easy checking of authorizations, we get to implement it by ourselves, but that's OK since we can actually use it for a lot more stuff. So add the GetPermissions call which returns the permissions the caller actually has, and a signal informing callers that their permissions might have changed. Hook this all up to PolicyKit so it's useful.
2009-08-11polkit: fix policy for polkit >= 0.92Dan Williams2-2/+2
2009-07-28build: remove duplicate automake bitsDan Williams1-2/+0
2009-07-08fix distcheckDan Williams1-0/+2
2009-06-11distcheck: fix itDan Williams1-0/+1
2009-05-18policy-kit: make .policy file translatable (bgo #582918)David Planella2-4/+6
2008-05-09Build fixes from Michael BieblDan Williams1-2/+2
git-svn-id: http://svn-archive.gnome.org/svn/NetworkManager/trunk@3653 4912f4e0-d625-0410-9fb7-b9a5a253dbdc
2008-05-09Remove duplicate bitDan Williams1-1/+0
git-svn-id: http://svn-archive.gnome.org/svn/NetworkManager/trunk@3652 4912f4e0-d625-0410-9fb7-b9a5a253dbdc
2008-05-09remove duplicated sectionDan Williams1-20/+1
git-svn-id: http://svn-archive.gnome.org/svn/NetworkManager/trunk@3651 4912f4e0-d625-0410-9fb7-b9a5a253dbdc
2008-05-092008-05-09 Tambet Ingo <tambet@gmail.com>Tambet Ingo1-0/+21
* Add another missing file, sigh. git-svn-id: http://svn-archive.gnome.org/svn/NetworkManager/trunk@3649 4912f4e0-d625-0410-9fb7-b9a5a253dbdc
2008-05-092008-05-08 Tambet Ingo <tambet@gmail.com>Tambet Ingo1-0/+42
* Add the missing policy/Makefile.am git-svn-id: http://svn-archive.gnome.org/svn/NetworkManager/trunk@3647 4912f4e0-d625-0410-9fb7-b9a5a253dbdc