mikkeli
aa72100148
--allow-poweroff becomes --allow-power. deploy/50-yukart-gw-power.pkla adds logind's reboot actions and the deploy removes the old poweroff-only file. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01DDwfd6Ki8UfG4hK6W5YpJz
14 lines
904 B
Plaintext
14 lines
904 B
Plaintext
# polkit (0.105, local authority): lets the svc-gw user power the host off or reboot it
|
|
# through logind, with no sudo. svc-gw runs `systemctl poweroff` / `systemctl reboot`
|
|
# for the display's `poweroff` and `reboot` commands (contracts BOUNDARY.md). Nothing
|
|
# else is granted.
|
|
# Installed to /etc/polkit-1/localauthority/50-local.d/ by scripts/deploy.sh.
|
|
# multiple-sessions: an ssh login is another session; ignore-inhibit: no inhibitor lock
|
|
# (none are taken on this host today) should leave the button silently doing nothing.
|
|
[yukart-gw: power off and reboot]
|
|
Identity=unix-user:mikkeli
|
|
Action=org.freedesktop.login1.power-off;org.freedesktop.login1.power-off-multiple-sessions;org.freedesktop.login1.power-off-ignore-inhibit;org.freedesktop.login1.reboot;org.freedesktop.login1.reboot-multiple-sessions;org.freedesktop.login1.reboot-ignore-inhibit
|
|
ResultAny=yes
|
|
ResultInactive=yes
|
|
ResultActive=yes
|