Olivier Duchateau
85 lines
5.2 KiB
XML
85 lines
5.2 KiB
XML
--- docs/man/polkit.xml.orig 2025-12-17 16:14:53 UTC
|
|
+++ docs/man/polkit.xml
|
|
@@ -104,17 +104,15 @@ +------------------+ |
|
|
+------------------+ |
|
|
^ |
|
|
| +--------------------------------------------+
|
|
- | | /etc/polkit-1/actions/*.policy |
|
|
+ | | %%LOCALBASE%%/etc/polkit-1/actions/*.policy |
|
|
| | /run/polkit-1/actions/*.policy |
|
|
| | /usr/local/share/polkit-1/actions/*.policy |
|
|
- | | /usr/share/polkit-1/actions/*.policy |
|
|
| +--------------------------------------------+
|
|
|
|
|
+--------------------------------------------+
|
|
- | /etc/polkit-1/rules.d/*.rules |
|
|
+ | %%LOCALBASE%%/etc/polkit-1/rules.d/*.rules |
|
|
| /run/polkit-1/rules.d/*.rules |
|
|
| /usr/local/share/polkit-1/rules.d/*.rules |
|
|
- | /usr/share/polkit-1/rules.d/*.rules |
|
|
+--------------------------------------------+
|
|
]]></programlisting>
|
|
</textobject>
|
|
@@ -222,7 +220,7 @@ +-----------------------------------------------------
|
|
order to use polkit. Actions correspond to operations that
|
|
clients can request the mechanism to carry out and are defined
|
|
in XML files that the mechanism installs into the <filename
|
|
- class='directory'>/usr/share/polkit-1/actions</filename>
|
|
+ class='directory'>%%LOCALBASE%%/share/polkit-1/actions</filename>
|
|
directory.
|
|
</para>
|
|
|
|
@@ -481,10 +479,9 @@ +-----------------------------------------------------
|
|
directories in this order:
|
|
</para>
|
|
<itemizedlist mark='opencircle' spacing='compact'>
|
|
- <listitem><para><filename>/etc/polkit-1/rules.d</filename></para></listitem>
|
|
+ <listitem><para><filename>%%LOCALBASE%%/etc/polkit-1/rules.d</filename></para></listitem>
|
|
<listitem><para><filename>/run/polkit-1/rules.d</filename></para></listitem>
|
|
<listitem><para><filename>/usr/local/share/polkit-1/rules.d</filename></para></listitem>
|
|
- <listitem><para><filename>/usr/share/polkit-1/rules.d</filename></para></listitem>
|
|
</itemizedlist>
|
|
<para>
|
|
These directories are processed in lexical order based on the basename
|
|
@@ -493,10 +490,9 @@ +-----------------------------------------------------
|
|
files, the order is:
|
|
</para>
|
|
<itemizedlist mark='opencircle' spacing='compact'>
|
|
- <listitem><para><filename>/etc/polkit-1/rules.d/10-auth.rules</filename></para></listitem>
|
|
+ <listitem><para><filename>%%LOCALBASE%%/etc/polkit-1/rules.d/10-auth.rules</filename></para></listitem>
|
|
<listitem><para><filename>/run/polkit-1/rules.d/10-auth.rules</filename></para></listitem>
|
|
<listitem><para><filename>/usr/local/share/polkit-1/rules.d/10-auth.rules</filename></para></listitem>
|
|
- <listitem><para><filename>/usr/share/polkit-1/rules.d/10-auth.rules</filename></para></listitem>
|
|
</itemizedlist>
|
|
<para>
|
|
All of these directories are monitored, so if a rules file is changed,
|
|
@@ -576,7 +572,7 @@ +-----------------------------------------------------
|
|
called in the order they have been added until one of the
|
|
functions returns a value. Hence, to add an authorization rule
|
|
that is processed before other rules, put it in a file in
|
|
- <filename class='directory'>/etc/polkit-1/rules.d</filename>
|
|
+ <filename class='directory'>%%LOCALBASE%%/etc/polkit-1/rules.d</filename>
|
|
with a name that sorts before other rules files, for example
|
|
<filename>00-early-checks.rules</filename>. Each function should
|
|
return a value from <literal>polkit.Result</literal>
|
|
@@ -692,8 +688,8 @@ polkit.addRule(function(action, subject) {
|
|
will produce the following when the user runs 'pkexec -u bateman bash -i' from a shell:
|
|
</para>
|
|
<programlisting><![CDATA[
|
|
-May 24 14:28:50 thinkpad polkitd[32217]: /etc/polkit-1/rules.d/10-test.rules:3: action=[Action id='org.freedesktop.policykit.exec' command_line='/usr/bin/bash -i' program='/usr/bin/bash' user='bateman' user.gecos='Patrick Bateman' user.display='Patrick Bateman (bateman)']
|
|
-May 24 14:28:50 thinkpad polkitd[32217]: /etc/polkit-1/rules.d/10-test.rules:4: subject=[Subject pid=1352 user='davidz' groups=davidz,wheel, seat='seat0' session='1' local=true active=true]
|
|
+May 24 14:28:50 thinkpad polkitd[32217]: %%LOCALBASE%%/etc/polkit-1/rules.d/10-test.rules:3: action=[Action id='org.freedesktop.policykit.exec' command_line='%%LOCALBASE%%/bin/bash -i' program='%%LOCALBASE%%/bin/bash' user='bateman' user.gecos='Patrick Bateman' user.display='Patrick Bateman (bateman)']
|
|
+May 24 14:28:50 thinkpad polkitd[32217]: %%LOCALBASE%%/etc/polkit-1/rules.d/10-test.rules:4: subject=[Subject pid=1352 user='davidz' groups=davidz,wheel, seat='seat0' session='1' local=true active=true]
|
|
]]></programlisting>
|
|
|
|
</refsect2>
|
|
@@ -960,7 +956,7 @@ polkit.addRule(function(action, subject) {
|
|
<programlisting><![CDATA[
|
|
polkit.addRule(function(action, subject) {
|
|
if (action.id == "org.freedesktop.policykit.exec" &&
|
|
- action.lookup("program") == "/usr/bin/cat") {
|
|
+ action.lookup("program") == "/bin/cat") {
|
|
return polkit.Result.AUTH_ADMIN;
|
|
}
|
|
});
|