policykit-desktop-privileges-0.22/0000775000000000000000000000000014437330705014160 5ustar policykit-desktop-privileges-0.22/com.ubuntu.desktop.pkla0000664000000000000000000000366114437330705020606 0ustar [Mounting, checking, etc. of internal drives] Identity=unix-group:admin;unix-group:sudo Action=org.freedesktop.udisks2.filesystem-mount-system;org.freedesktop.udisks2.encrypted-unlock-system;org.freedesktop.udisks2.filesystem-fstab; ResultActive=yes [Change CPU Frequency scaling] Identity=unix-group:admin;unix-group:sudo Action=org.gnome.cpufreqselector;org.mate.cpufreqselector ResultActive=yes [Setting the clock] Identity=unix-group:admin;unix-group:sudo Action=org.gnome.clockapplet.mechanism.*;org.gnome.controlcenter.datetime.configure;org.kde.kcontrol.kcmclock.save;org.freedesktop.timedate1.set-time;org.freedesktop.timedate1.set-timezone;org.freedesktop.timedate1.set-local-rtc;org.freedesktop.timedate1.set-ntp;com.canonical.controlcenter.datetime.configure;org.mate.settingsdaemon.datetimemechanism.settime ResultActive=yes [Update already installed software] Identity=unix-group:admin;unix-group:sudo Action=org.debian.apt.upgrade-packages ResultActive=yes [Printer administration] Identity=unix-group:lpadmin;unix-group:admin;unix-group:sudo Action=org.opensuse.cupspkhelper.mechanism.* ResultActive=yes [Disable hibernate by default in upower] Identity=unix-user:* Action=org.freedesktop.upower.hibernate ResultActive=no [Disable hibernate by default in logind] Identity=unix-user:* Action=org.freedesktop.login1.hibernate;org.freedesktop.login1.handle-hibernate-key;org.freedesktop.login1;org.freedesktop.login1.hibernate-multiple-sessions;org.freedesktop.login1.hibernate-ignore-inhibit ResultActive=no [Modify error reporting settings] Identity=unix-group:admin;unix-group:sudo Action=com.ubuntu.whoopsiepreferences.change ResultActive=yes [Allow admins to set the hostname,locale,keyboard,date/time without prompting] Identity=unix-group:admin;unix-group:sudo Action=org.freedesktop.locale1.set-locale;org.freedesktop.locale1.set-keyboard;org.freedesktop.hostname1.set-static-hostname;org.freedesktop.hostname1.set-hostname ResultActive=yes policykit-desktop-privileges-0.22/com.ubuntu.desktop.rules0000664000000000000000000000645514437330705021015 0ustar // Allow admin users to change error reporting settings polkit.addRule(function(action, subject) { if (action.id == "com.ubuntu.whoopsiepreferences.change" && subject.active == true && subject.local == true && subject.isInGroup("sudo")) { return polkit.Result.YES; } }); // Mounting, checking, etc. of internal drives polkit.addRule(function(action, subject) { if ((action.id == "org.freedesktop.udisks2.filesystem-mount-system" || action.id == "org.freedesktop.udisks2.encrypted-unlock-system" || action.id == "org.freedesktop.udisks2.filesystem-fstab") && subject.active == true && subject.local == true && subject.isInGroup("sudo")) { return polkit.Result.YES; } }); // Change CPU Frequency scaling polkit.addRule(function(action, subject) { if ((action.id == "org.gnome.cpufreqselector" || action.id == "org.mate.cpufreqselector" ) && subject.active == true && subject.local == true && subject.isInGroup("sudo")) { return polkit.Result.YES; } }); // Setting the clock polkit.addRule(function(action, subject) { if ((action.id == "org.gnome.controlcenter.datetime.configure" || action.id == "org.kde.kcontrol.kcmclock.save" || action.id == "org.freedesktop.timedate1.set-time" || action.id == "org.freedesktop.timedate1.set-timezone" || action.id == "org.freedesktop.timedate1.set-local-rtc" || action.id == "org.freedesktop.timedate1.set-ntp" || action.id == "com.canonical.controlcenter.datetime.configure" || action.id == "org.mate.settingsdaemon.datetimemechanism.settime") && subject.active == true && subject.local == true && subject.isInGroup("sudo")) { return polkit.Result.YES; } }); // Update already installed software polkit.addRule(function(action, subject) { if (action.id == "org.debian.apt.upgrade-packages" && subject.active == true && subject.local == true && subject.isInGroup("sudo")) { return polkit.Result.YES; } }); // Printer administration polkit.addRule(function(action, subject) { if (action.id.indexOf("org.opensuse.cupspkhelper.mechanism.") == 0 && subject.active == true && subject.local == true && (subject.isInGroup("sudo") || subject.isInGroup("lpadmin"))) { return polkit.Result.YES; } }); // Disable hibernate by default in Ubuntu polkit.addRule(function(action, subject) { if (action.id == "org.freedesktop.upower.hibernate" || action.id == "org.freedesktop.login1.hibernate" || action.id == "org.freedesktop.login1.handle-hibernate-key" || action.id == "org.freedesktop.login1.hibernate-multiple-sessions") { return polkit.Result.NO; } }); // Allow admins to set the hostname,locale,keyboard,date/time without prompting polkit.addRule(function(action, subject) { if ((action.id == "org.freedesktop.locale1.set-locale" || action.id == "org.freedesktop.locale1.set-keyboard" || action.id == "org.freedesktop.hostname1.set-static-hostname" || action.id == "org.freedesktop.hostname1.set-hostname") && subject.active == true && subject.local == true && subject.isInGroup("sudo")) { return polkit.Result.YES; } }); policykit-desktop-privileges-0.22/debian/0000775000000000000000000000000014437330705015402 5ustar policykit-desktop-privileges-0.22/debian/changelog0000664000000000000000000001350114437330705017254 0ustar policykit-desktop-privileges (0.22) mantic; urgency=medium * Include a .rules in the new javascript format for newer polkitd * Remove old legacy udisks1 actions (lp: #1899019) * Remove the network manager system connection override there is a similar entry included in the network-manager package * Update copyright, debhelper and standards version * Remove old breaks, update for the new polkitd binary naming -- Sebastien Bacher Mon, 05 Jun 2023 11:58:29 +0200 policykit-desktop-privileges (0.21) eoan; urgency=medium * Don't allow usb-creator to overwrite devices without authentication. (LP: #1832337) -- Marc Deslauriers Tue, 18 Jun 2019 13:56:08 -0400 policykit-desktop-privileges (0.20) xenial; urgency=medium * Copy the gnome-control-center hostnamed/localed actions, that's a more logical place to have those and avoid depending on GNOME components from other desktops environments (lp: #1512435) -- Sebastien Bacher Mon, 02 Nov 2015 19:34:05 +0100 policykit-desktop-privileges (0.19) utopic; urgency=medium * Really disable hibernating in logind - some other PK actions now imply org.freedesktop.login1.hibernate so we need to disable those too. * Bump S-V to 3.9.6. -- Iain Lane Thu, 25 Sep 2014 10:37:41 +0100 policykit-desktop-privileges (0.18) utopic; urgency=medium * Add support for MATE desktop CPU freq selector and date/time mechanism. (LP: #1356326) -- Martin Wimpress Thu, 11 Sep 2014 09:05:21 +0200 policykit-desktop-privileges (0.17) trusty; urgency=medium * List the new unity-control-center action as well -- Sebastien Bacher Mon, 17 Feb 2014 17:30:41 +0100 policykit-desktop-privileges (0.16) saucy; urgency=low * Allow administrators to change the error reporting settings without further authentication. -- Evan Dandrea Fri, 04 Oct 2013 13:05:56 +0100 policykit-desktop-privileges (0.15) saucy; urgency=low * Add the timedated actions implied by gnome-control-center directly. We don't install gnome-control-center on phone/tablet images yet want the equivalent authorisations to control timedated. -- Iain Lane Thu, 26 Sep 2013 16:41:19 +0000 policykit-desktop-privileges (0.14) raring; urgency=low * Disable hibernate by default in logind as well. -- Martin Pitt Thu, 04 Apr 2013 05:47:23 +0200 policykit-desktop-privileges (0.13) raring; urgency=low * debian/control: breaks on old gnome-settings-daemon version. [ Ryan Lortie ] * Change the authorisation name for datetime control functions since we are no longer carrying the mechanism in gnome-settings-daemon. (lp: #1153567) -- Sebastien Bacher Tue, 26 Mar 2013 21:35:18 +0100 policykit-desktop-privileges (0.12) quantal; urgency=low * Allow local admins to unlock encrypted system drives with udisks2. (LP: #1007149) -- Martin Pitt Wed, 13 Jun 2012 06:43:17 +0200 policykit-desktop-privileges (0.11) quantal; urgency=low * Allow local admins to mount system drives with udisks2. (LP: #1005643) * debian/copyright: Move to copyright format 1.0, and update copyright. * debian/control: Bump Standards-Version to 3.9.3. -- Martin Pitt Tue, 29 May 2012 17:21:36 +0200 policykit-desktop-privileges (0.10) precise; urgency=low * Group "sudo" is the new "admin", allow both. (LP: #893842) * debian/control: Fix overly long line. * debian/control: Add recently added privileges to description. * debian/control: Bump Standards-Version to 3.9.2, no changes necessary. -- Martin Pitt Fri, 25 Nov 2011 08:03:49 +0100 policykit-desktop-privileges (0.9) precise; urgency=low * Allow members of "lpadmin" or "admin" to call the cups-pk-helper methods without a password. cups itself only checks for lpadmin membership, so this provides an equivalency. (LP: #847896) -- Martin Pitt Wed, 09 Nov 2011 12:55:57 +0100 policykit-desktop-privileges (0.8) precise; urgency=low * Disable hibernation by default. (LP: #812394) -- Martin Pitt Thu, 20 Oct 2011 11:49:35 +0200 policykit-desktop-privileges (0.7) oneiric; urgency=low * Allow local admins to do the less harmful usb-creator actions (mounting and writing image) without a password. -- Martin Pitt Wed, 06 Jul 2011 10:12:36 +0200 policykit-desktop-privileges (0.6) oneiric; urgency=low * Allow local admins to update already installed software without password. * Update passwordless time zone configuration to GNOME 3. -- Martin Pitt Thu, 30 Jun 2011 16:43:39 +0100 policykit-desktop-privileges (0.5) oneiric; urgency=low * Allow local admins to create and edit system-wide NetworkManager connections. -- Martin Pitt Wed, 29 Jun 2011 18:38:15 +0100 policykit-desktop-privileges (0.4) natty; urgency=low * Re-enable hibernation by default. It can be disabled by dropping a file into /etc/polkit-1/localauthority/ by OEMs if desired. (LP: #710796) -- Martin Pitt Fri, 25 Feb 2011 12:16:02 +0100 policykit-desktop-privileges (0.3) natty; urgency=low * Disable hibernation by default. It's very slow, and reportedly unreliable. -- Martin Pitt Tue, 25 Jan 2011 11:40:59 +0100 policykit-desktop-privileges (0.2) maverick; urgency=low * Add support for setting the clock in KDE as well -- Jonathan Thomas Mon, 19 Jul 2010 11:06:04 -0400 policykit-desktop-privileges (0.1) lucid; urgency=low * Initial release. (LP: #455694) -- Martin Pitt Wed, 17 Mar 2010 09:50:07 +0100 policykit-desktop-privileges-0.22/debian/control0000664000000000000000000000206714437330573017015 0ustar Source: policykit-desktop-privileges Section: admin Priority: optional Maintainer: Ubuntu Core Developers Build-Depends: debhelper-compat (= 13) Standards-Version: 4.6.2.0 Package: policykit-desktop-privileges Architecture: all Depends: ${misc:Depends} Recommends: polkitd Description: run common desktop actions without password This package provides a set of PolicyKit privileges which allow Administrators to run common actions without being asked for their password: . * mounting and checking internal disk drives (through udisks) * setting the CPU speed and policy (through the GNOME CPU frequency applet) * setting the time and timezone (through the GNOME clock applet or through KDE) * Update already installed software * Configure printers . It does not change privileges for non-Administrators (users who are not in the "sudo" group). So this satisfies the typical desktop/laptop use case where the user has full control over the hardware anyway. . This is implemented by shipping a polkitd set of rules. policykit-desktop-privileges-0.22/debian/copyright0000664000000000000000000000075014437330573017342 0ustar Format: http://www.debian.org/doc/packaging-manuals/copyright-format/1.0/ Files: * Copyright: (C) 2010-2023 Canonical Ltd. License: GPL-2+ This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version. . The full text of the GPL is distributed as in /usr/share/common-licenses/GPL-2 on Debian systems. policykit-desktop-privileges-0.22/debian/policykit-desktop-privileges.install0000664000000000000000000000015114437330573024617 0ustar *.pkla var/lib/polkit-1/localauthority/10-vendor.d/ com.ubuntu.desktop.rules usr/share/polkit-1/rules.d/ policykit-desktop-privileges-0.22/debian/rules0000775000000000000000000000003614437330573016464 0ustar #!/usr/bin/make -f %: dh $@