summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorStef Walter <stefw@redhat.com>2014-05-05 08:49:12 +0200
committerStef Walter <stefw@redhat.com>2014-05-07 10:48:07 +0200
commit74aa92e3f30deb455e1fe9b543ea8a8b12f82d8b (patch)
tree118ef74a2754ffe49e7f017ea2a9d6ed45e370e4
parent9e0036ad45f23a87e4c75ce7a9c0f1de8023cd76 (diff)
data: Fix desktop-centric polkit policy
Change the polkit policy so accountsservice allows use of the DBus API by admin users that are not logged in via a monitor+keyboard. This includes users logged in via ssh or Cockpit. https://bugs.freedesktop.org/show_bug.cgi?id=78279
-rw-r--r--data/org.freedesktop.accounts.policy.in12
1 files changed, 6 insertions, 6 deletions
diff --git a/data/org.freedesktop.accounts.policy.in b/data/org.freedesktop.accounts.policy.in
index 0a2cd15..1c97c3a 100644
--- a/data/org.freedesktop.accounts.policy.in
+++ b/data/org.freedesktop.accounts.policy.in
@@ -11,8 +11,8 @@
<_description>Change your own user data</_description>
<_message>Authentication is required to change your own user data</_message>
<defaults>
- <allow_any>no</allow_any>
- <allow_inactive>no</allow_inactive>
+ <allow_any>auth_self</allow_any>
+ <allow_inactive>auth_self</allow_inactive>
<allow_active>yes</allow_active>
</defaults>
</action>
@@ -21,8 +21,8 @@
<_description>Manage user accounts</_description>
<_message>Authentication is required to change user data</_message>
<defaults>
- <allow_any>no</allow_any>
- <allow_inactive>no</allow_inactive>
+ <allow_any>auth_admin</allow_any>
+ <allow_inactive>auth_admin</allow_inactive>
<allow_active>auth_admin_keep</allow_active>
</defaults>
</action>
@@ -31,8 +31,8 @@
<_description>Change the login screen configuration</_description>
<_message>Authentication is required to change the login screen configuration</_message>
<defaults>
- <allow_any>no</allow_any>
- <allow_inactive>no</allow_inactive>
+ <allow_any>auth_admin</allow_any>
+ <allow_inactive>auth_admin</allow_inactive>
<allow_active>auth_admin_keep</allow_active>
</defaults>
<annotate key="org.gnome.gconf.defaults.set-mandatory.prefix">/apps/gdm/simple-greeter</annotate>