diff options
| author | Lennart Poettering <lennart@poettering.net> | 2015-08-24 21:05:09 +0200 |
|---|---|---|
| committer | Lennart Poettering <lennart@poettering.net> | 2015-08-24 22:46:45 +0200 |
| commit | fbe550738d03b178bb004a1390e74115e904118a (patch) | |
| tree | a4a281a5c7d7fb95ad409ba424eb2a430f1cc664 /src/machine/org.freedesktop.machine1.policy.in | |
| parent | b9a8d250810d4803bc9bf6b36932b528cb991d1e (diff) | |
machined: introduce pseudo-machine ".host" refererring to the host system
Some of the operations machined/machinectl implement are also very
useful when applied to the host system (such as machinectl login,
machinectl shell or machinectl status), hence introduce a pseudo-machine
by the name of ".host" in machined that refers to the host system, and
may be used top execute operations on the host system with.
This copies the pseudo-image ".host" machined already implements for
image related commands.
(This commit also adds a PK privilege for opening a PTY in a container,
which was previously not accessible for non-root.)
Diffstat (limited to 'src/machine/org.freedesktop.machine1.policy.in')
| -rw-r--r-- | src/machine/org.freedesktop.machine1.policy.in | 10 |
1 files changed, 10 insertions, 0 deletions
diff --git a/src/machine/org.freedesktop.machine1.policy.in b/src/machine/org.freedesktop.machine1.policy.in index b3b2fa29c1..f1557806d1 100644 --- a/src/machine/org.freedesktop.machine1.policy.in +++ b/src/machine/org.freedesktop.machine1.policy.in @@ -26,6 +26,16 @@ </defaults> </action> + <action id="org.freedesktop.machine1.open-pty"> + <_description>Acquire a pseudo TTY in a local container</_description> + <_message>Authentication is acquire a pseudo TTY in a local container.</_message> + <defaults> + <allow_any>auth_admin</allow_any> + <allow_inactive>auth_admin</allow_inactive> + <allow_active>auth_admin_keep</allow_active> + </defaults> + </action> + <action id="org.freedesktop.machine1.shell"> <_description>Acquire a shell in a local container</_description> <_message>Authentication is required to acquire a shell in a local container.</_message> |