matteo
/
malcontent
1
0
Fork 0
Code Issues Pull Requests 2 Packages Projects Releases Wiki Activity

Add option to tweak privileged group in polkit rules 

Signed-off-by: Sergey Shatunov <me@prok.pw>
This commit is contained in:
Sergey Shatunov 2020-06-18 03:34:55 +07:00
parent ce26ca909c
commit 0114e4d965
No known key found for this signature in database
GPG Key ID: C9228B4C880E14B6
3 changed files with 15 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
accounts-service/com.endlessm.ParentalControls.rules → accounts-service/com.endlessm.ParentalControls.rules.in
View File

@ -27,7 +27,7 @@ polkit.addRule(function(action, subject) {
action.id == "com.endlessm.ParentalControls.SessionLimits.ReadOwn" || action.id == "com.endlessm.ParentalControls.SessionLimits.ReadOwn" ||
action.id == "com.endlessm.ParentalControls.SessionLimits.ReadAny") && action.id == "com.endlessm.ParentalControls.SessionLimits.ReadAny") &&
subject.active && subject.local && subject.active && subject.local &&
subject.isInGroup("sudo")) { subject.isInGroup("@PRIVILEGED_GROUP@")) {
return polkit.Result.YES; return polkit.Result.YES;
} }

10
accounts-service/meson.build
View File

@ -21,5 +21,11 @@ foreach dbus_interface: dbus_interfaces
join_paths(accountsserviceinterfacesdir, filename)) join_paths(accountsserviceinterfacesdir, filename))
endforeach endforeach
install_data('com.endlessm.ParentalControls.rules', polkit_conf = configuration_data()
install_dir: join_paths(get_option('datadir'), 'polkit-1', 'rules.d')) polkit_conf.set('PRIVILEGED_GROUP', get_option('privileged_group'))
configure_file(
input: 'com.endlessm.ParentalControls.rules.in',
output: 'com.endlessm.ParentalControls.rules',
configuration: polkit_conf,
install_dir: join_paths(get_option('datadir'), 'polkit-1', 'rules.d')
)

6
meson_options.txt
View File

@ -21,3 +21,9 @@ option(
value: false, value: false,
description: 'use installed libmalcontent rather than building it; used in distros to break a dependency cycle' description: 'use installed libmalcontent rather than building it; used in distros to break a dependency cycle'
) )
option(
'privileged_group',
type: 'string',
value: 'wheel',
description: 'name of group that has elevated permissions'
)