diff options
| author | Stef Walter <stefw@redhat.com> | 2014-05-05 08:49:12 +0200 |
|---|---|---|
| committer | Stef Walter <stefw@redhat.com> | 2014-05-07 10:48:07 +0200 |
| commit | 74aa92e3f30deb455e1fe9b543ea8a8b12f82d8b (patch) | |
| tree | 118ef74a2754ffe49e7f017ea2a9d6ed45e370e4 /data | |
| parent | 9e0036ad45f23a87e4c75ce7a9c0f1de8023cd76 (diff) | |
data: Fix desktop-centric polkit policy
Change the polkit policy so accountsservice allows use of the
DBus API by admin users that are not logged in via a monitor+keyboard.
This includes users logged in via ssh or Cockpit.
https://bugs.freedesktop.org/show_bug.cgi?id=78279
Diffstat (limited to 'data')
| -rw-r--r-- | data/org.freedesktop.accounts.policy.in | 12 |
1 files changed, 6 insertions, 6 deletions
diff --git a/data/org.freedesktop.accounts.policy.in b/data/org.freedesktop.accounts.policy.in index 0a2cd15..1c97c3a 100644 --- a/data/org.freedesktop.accounts.policy.in +++ b/data/org.freedesktop.accounts.policy.in @@ -11,8 +11,8 @@ <_description>Change your own user data</_description> <_message>Authentication is required to change your own user data</_message> <defaults> - <allow_any>no</allow_any> - <allow_inactive>no</allow_inactive> + <allow_any>auth_self</allow_any> + <allow_inactive>auth_self</allow_inactive> <allow_active>yes</allow_active> </defaults> </action> @@ -21,8 +21,8 @@ <_description>Manage user accounts</_description> <_message>Authentication is required to change user data</_message> <defaults> - <allow_any>no</allow_any> - <allow_inactive>no</allow_inactive> + <allow_any>auth_admin</allow_any> + <allow_inactive>auth_admin</allow_inactive> <allow_active>auth_admin_keep</allow_active> </defaults> </action> @@ -31,8 +31,8 @@ <_description>Change the login screen configuration</_description> <_message>Authentication is required to change the login screen configuration</_message> <defaults> - <allow_any>no</allow_any> - <allow_inactive>no</allow_inactive> + <allow_any>auth_admin</allow_any> + <allow_inactive>auth_admin</allow_inactive> <allow_active>auth_admin_keep</allow_active> </defaults> <annotate key="org.gnome.gconf.defaults.set-mandatory.prefix">/apps/gdm/simple-greeter</annotate> |