policykit-desktop-privileges-0.20/0000755000000000000000000000000013502223455014147 5ustar policykit-desktop-privileges-0.20/debian/0000755000000000000000000000000013502426044015370 5ustar policykit-desktop-privileges-0.20/debian/rules0000755000000000000000000000003612404244651016451 0ustar #!/usr/bin/make -f %: dh $@ policykit-desktop-privileges-0.20/debian/control0000644000000000000000000000225113502426060016771 0ustar Source: policykit-desktop-privileges Section: admin Priority: optional Maintainer: Ubuntu Developers Build-Depends: debhelper (>= 7) Standards-Version: 3.9.6 Package: policykit-desktop-privileges Architecture: all Depends: ${misc:Depends} Recommends: policykit-1 Breaks: gnome-settings-daemon (<< 3.6.4-0ubuntu8) Description: run common desktop actions without password This package provides a set of PolicyKit privileges which allow Administrators to run common actions without being asked for their password: . * mounting and checking internal disk drives (through udisks) * setting the CPU speed and policy (through the GNOME CPU frequency applet) * setting the time and timezone (through the GNOME clock applet or through KDE) * Adding/changing system-wide NetworkManager connections * Update already installed software * Configure printers . It does not change privileges for non-Administrators (users who are not in the "admin" or "sudo" group). So this satisfies the typical desktop/laptop use case where the user has full control over the hardware anyway. . This is implemented by shipping a pklocalauthority(8) file. policykit-desktop-privileges-0.20/debian/compat0000644000000000000000000000000212404244651016570 0ustar 7 policykit-desktop-privileges-0.20/debian/copyright0000644000000000000000000000075012404244651017327 0ustar Format: http://www.debian.org/doc/packaging-manuals/copyright-format/1.0/ Files: * Copyright: (C) 2010-2012 Canonical Ltd. License: GPL-2+ This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version. . The full text of the GPL is distributed as in /usr/share/common-licenses/GPL-2 on Debian systems. policykit-desktop-privileges-0.20/debian/policykit-desktop-privileges.install0000644000000000000000000000006412404244651024607 0ustar *.pkla var/lib/polkit-1/localauthority/10-vendor.d/ policykit-desktop-privileges-0.20/debian/changelog0000644000000000000000000001254313502426044017247 0ustar policykit-desktop-privileges (0.20ubuntu16.04.1) xenial-security; urgency=medium * Don't allow usb-creator to overwrite devices without authentication. (LP: #1832337) -- Marc Deslauriers Tue, 18 Jun 2019 13:56:08 -0400 policykit-desktop-privileges (0.20) xenial; urgency=medium * Copy the gnome-control-center hostnamed/localed actions, that's a more logical place to have those and avoid depending on GNOME components from other desktops environments (lp: #1512435) -- Sebastien Bacher Mon, 02 Nov 2015 19:34:05 +0100 policykit-desktop-privileges (0.19) utopic; urgency=medium * Really disable hibernating in logind - some other PK actions now imply org.freedesktop.login1.hibernate so we need to disable those too. * Bump S-V to 3.9.6. -- Iain Lane Thu, 25 Sep 2014 10:37:41 +0100 policykit-desktop-privileges (0.18) utopic; urgency=medium * Add support for MATE desktop CPU freq selector and date/time mechanism. (LP: #1356326) -- Martin Wimpress Thu, 11 Sep 2014 09:05:21 +0200 policykit-desktop-privileges (0.17) trusty; urgency=medium * List the new unity-control-center action as well -- Sebastien Bacher Mon, 17 Feb 2014 17:30:41 +0100 policykit-desktop-privileges (0.16) saucy; urgency=low * Allow administrators to change the error reporting settings without further authentication. -- Evan Dandrea Fri, 04 Oct 2013 13:05:56 +0100 policykit-desktop-privileges (0.15) saucy; urgency=low * Add the timedated actions implied by gnome-control-center directly. We don't install gnome-control-center on phone/tablet images yet want the equivalent authorisations to control timedated. -- Iain Lane Thu, 26 Sep 2013 16:41:19 +0000 policykit-desktop-privileges (0.14) raring; urgency=low * Disable hibernate by default in logind as well. -- Martin Pitt Thu, 04 Apr 2013 05:47:23 +0200 policykit-desktop-privileges (0.13) raring; urgency=low * debian/control: breaks on old gnome-settings-daemon version. [ Ryan Lortie ] * Change the authorisation name for datetime control functions since we are no longer carrying the mechanism in gnome-settings-daemon. (lp: #1153567) -- Sebastien Bacher Tue, 26 Mar 2013 21:35:18 +0100 policykit-desktop-privileges (0.12) quantal; urgency=low * Allow local admins to unlock encrypted system drives with udisks2. (LP: #1007149) -- Martin Pitt Wed, 13 Jun 2012 06:43:17 +0200 policykit-desktop-privileges (0.11) quantal; urgency=low * Allow local admins to mount system drives with udisks2. (LP: #1005643) * debian/copyright: Move to copyright format 1.0, and update copyright. * debian/control: Bump Standards-Version to 3.9.3. -- Martin Pitt Tue, 29 May 2012 17:21:36 +0200 policykit-desktop-privileges (0.10) precise; urgency=low * Group "sudo" is the new "admin", allow both. (LP: #893842) * debian/control: Fix overly long line. * debian/control: Add recently added privileges to description. * debian/control: Bump Standards-Version to 3.9.2, no changes necessary. -- Martin Pitt Fri, 25 Nov 2011 08:03:49 +0100 policykit-desktop-privileges (0.9) precise; urgency=low * Allow members of "lpadmin" or "admin" to call the cups-pk-helper methods without a password. cups itself only checks for lpadmin membership, so this provides an equivalency. (LP: #847896) -- Martin Pitt Wed, 09 Nov 2011 12:55:57 +0100 policykit-desktop-privileges (0.8) precise; urgency=low * Disable hibernation by default. (LP: #812394) -- Martin Pitt Thu, 20 Oct 2011 11:49:35 +0200 policykit-desktop-privileges (0.7) oneiric; urgency=low * Allow local admins to do the less harmful usb-creator actions (mounting and writing image) without a password. -- Martin Pitt Wed, 06 Jul 2011 10:12:36 +0200 policykit-desktop-privileges (0.6) oneiric; urgency=low * Allow local admins to update already installed software without password. * Update passwordless time zone configuration to GNOME 3. -- Martin Pitt Thu, 30 Jun 2011 16:43:39 +0100 policykit-desktop-privileges (0.5) oneiric; urgency=low * Allow local admins to create and edit system-wide NetworkManager connections. -- Martin Pitt Wed, 29 Jun 2011 18:38:15 +0100 policykit-desktop-privileges (0.4) natty; urgency=low * Re-enable hibernation by default. It can be disabled by dropping a file into /etc/polkit-1/localauthority/ by OEMs if desired. (LP: #710796) -- Martin Pitt Fri, 25 Feb 2011 12:16:02 +0100 policykit-desktop-privileges (0.3) natty; urgency=low * Disable hibernation by default. It's very slow, and reportedly unreliable. -- Martin Pitt Tue, 25 Jan 2011 11:40:59 +0100 policykit-desktop-privileges (0.2) maverick; urgency=low * Add support for setting the clock in KDE as well -- Jonathan Thomas Mon, 19 Jul 2010 11:06:04 -0400 policykit-desktop-privileges (0.1) lucid; urgency=low * Initial release. (LP: #455694) -- Martin Pitt Wed, 17 Mar 2010 09:50:07 +0100 policykit-desktop-privileges-0.20/com.ubuntu.desktop.pkla0000644000000000000000000000426213502223455020573 0ustar [Mounting, checking, etc. of internal drives] Identity=unix-group:admin;unix-group:sudo Action=org.freedesktop.udisks.filesystem-*;org.freedesktop.udisks.drive-ata-smart*;org.freedesktop.udisks2.filesystem-mount-system;org.freedesktop.udisks2.encrypted-unlock-system;org.freedesktop.udisks2.filesystem-fstab; ResultActive=yes [Change CPU Frequency scaling] Identity=unix-group:admin;unix-group:sudo Action=org.gnome.cpufreqselector;org.mate.cpufreqselector ResultActive=yes [Setting the clock] Identity=unix-group:admin;unix-group:sudo Action=org.gnome.clockapplet.mechanism.*;org.gnome.controlcenter.datetime.configure;org.kde.kcontrol.kcmclock.save;org.freedesktop.timedate1.set-time;org.freedesktop.timedate1.set-timezone;org.freedesktop.timedate1.set-local-rtc;org.freedesktop.timedate1.set-ntp;com.canonical.controlcenter.datetime.configure;org.mate.settingsdaemon.datetimemechanism.settime ResultActive=yes [Adding or changing system-wide NetworkManager connections] Identity=unix-group:admin;unix-group:sudo Action=org.freedesktop.NetworkManager.settings.modify.system ResultActive=yes [Update already installed software] Identity=unix-group:admin;unix-group:sudo Action=org.debian.apt.upgrade-packages ResultActive=yes [Printer administration] Identity=unix-group:lpadmin;unix-group:admin;unix-group:sudo Action=org.opensuse.cupspkhelper.mechanism.* ResultActive=yes [Disable hibernate by default in upower] Identity=unix-user:* Action=org.freedesktop.upower.hibernate ResultActive=no [Disable hibernate by default in logind] Identity=unix-user:* Action=org.freedesktop.login1.hibernate;org.freedesktop.login1.handle-hibernate-key;org.freedesktop.login1;org.freedesktop.login1.hibernate-multiple-sessions;org.freedesktop.login1.hibernate-ignore-inhibit ResultActive=no [Modify error reporting settings] Identity=unix-group:admin;unix-group:sudo Action=com.ubuntu.whoopsiepreferences.change ResultActive=yes [Allow admins to set the hostname,locale,keyboard,date/time without prompting] Identity=unix-group:admin;unix-group:sudo Action=org.freedesktop.locale1.set-locale;org.freedesktop.locale1.set-keyboard;org.freedesktop.hostname1.set-static-hostname;org.freedesktop.hostname1.set-hostname ResultActive=yes