From e72cb4437700b4b34ac5c6de0e30dff8bb0ed89e Mon Sep 17 00:00:00 2001
From: Martin Pitt <martin.pitt@ubuntu.com>
Date: Thu, 27 Nov 2008 13:42:24 +0100
Subject: add ACL support to removable block devices

This adds support for adding ACLs to removable block devices (such as
USB keys) on insertion. This is useful for allowing users to run mkfs
or fsck on their USB keys.

Please note that the patch does *not* enable it by default, that's up
to distros or individual users (gnome-polkit-authorization), but it
provides a standard flip to configure this behaviour.
---
 policy/org.freedesktop.hal.device-access.policy | 9 +++++++++
 1 file changed, 9 insertions(+)

(limited to 'policy')

diff --git a/policy/org.freedesktop.hal.device-access.policy b/policy/org.freedesktop.hal.device-access.policy
index 3c07e72c..53711744 100644
--- a/policy/org.freedesktop.hal.device-access.policy
+++ b/policy/org.freedesktop.hal.device-access.policy
@@ -55,6 +55,15 @@ NOTE: Please keep the actions in alpabetical order
     </defaults>
   </action>
 
+  <action id="org.freedesktop.hal.device-access.removable-block">
+    <description>Directly access removable block devices</description>
+    <message>System policy prevents access to removable block devices</message>
+    <defaults>
+      <allow_inactive>no</allow_inactive>
+      <allow_active>no</allow_active>
+    </defaults>
+  </action>
+
   <action id="org.freedesktop.hal.device-access.dvb">
     <description>Directly access DVB devices</description>
     <message>System policy prevents access to DVB devices</message>
-- 
cgit v1.2.3