summaryrefslogtreecommitdiff
path: root/src/machine/org.freedesktop.machine1.policy.in
diff options
context:
space:
mode:
authorLennart Poettering <lennart@poettering.net>2015-08-23 13:20:58 +0200
committerLennart Poettering <lennart@poettering.net>2015-08-24 22:46:45 +0200
commit49af9e1368571f4e423cde0fd45ee284451434d1 (patch)
tree979c0660f04cdf59cd5574a82cfe0b198dd10f59 /src/machine/org.freedesktop.machine1.policy.in
parent506711fddd432aff2aacadfe0e43b0ff5411b106 (diff)
machined: add new OpenShell() bus call
This new bus call opens an interactive shell in a container. It works like the existing OpenLogin() call, but does not involve getty, and instead opens an arbitrary command line. This is similar to "systemd-run -t -M" but is controlled by a specific PolicyKit privilege.
Diffstat (limited to 'src/machine/org.freedesktop.machine1.policy.in')
-rw-r--r--src/machine/org.freedesktop.machine1.policy.in10
1 files changed, 10 insertions, 0 deletions
diff --git a/src/machine/org.freedesktop.machine1.policy.in b/src/machine/org.freedesktop.machine1.policy.in
index 02714e83ae..b3b2fa29c1 100644
--- a/src/machine/org.freedesktop.machine1.policy.in
+++ b/src/machine/org.freedesktop.machine1.policy.in
@@ -26,6 +26,16 @@
</defaults>
</action>
+ <action id="org.freedesktop.machine1.shell">
+ <_description>Acquire a shell in a local container</_description>
+ <_message>Authentication is required to acquire a shell in a local container.</_message>
+ <defaults>
+ <allow_any>auth_admin</allow_any>
+ <allow_inactive>auth_admin</allow_inactive>
+ <allow_active>auth_admin_keep</allow_active>
+ </defaults>
+ </action>
+
<action id="org.freedesktop.machine1.manage-machines">
<_description>Manage local virtual machines and containers</_description>
<_message>Authentication is required to manage local virtual machines and containers.</_message>