summaryrefslogtreecommitdiff
path: root/src/org.freedesktop.systemd1.policy
diff options
context:
space:
mode:
authorLennart Poettering <lennart@poettering.net>2011-03-12 01:03:13 +0100
committerLennart Poettering <lennart@poettering.net>2011-03-12 01:07:17 +0100
commita8f11321c209830a35edd0357e8def5d4437d854 (patch)
tree6624318fbfc07042729a69ad29b4e0ffc2402263 /src/org.freedesktop.systemd1.policy
parente75c058023a7e130599f5a3ae2981540d8e397c8 (diff)
systemctl: support remote and privileged systemctl access via SSH and pkexec
This adds support for executing systemctl operations remotely or as privileged user while still running systemctl itself unprivileged and locally. This currently requires a D-Bus patch to work properly. https://bugs.freedesktop.org/show_bug.cgi?id=35230
Diffstat (limited to 'src/org.freedesktop.systemd1.policy')
-rw-r--r--src/org.freedesktop.systemd1.policy11
1 files changed, 11 insertions, 0 deletions
diff --git a/src/org.freedesktop.systemd1.policy b/src/org.freedesktop.systemd1.policy
index bb07b827fc..a9958c2e33 100644
--- a/src/org.freedesktop.systemd1.policy
+++ b/src/org.freedesktop.systemd1.policy
@@ -27,4 +27,15 @@
<annotate key="org.freedesktop.policykit.exec.path">/lib/systemd/systemd-reply-password</annotate>
</action>
+ <action id="org.freedesktop.systemd1.BusAccess">
+ <description>Privileged system and service manager access</description>
+ <message>Authentication is required to access the system and service manager.</message>
+ <defaults>
+ <allow_any>no</allow_any>
+ <allow_inactive>no</allow_inactive>
+ <allow_active>auth_admin_keep</allow_active>
+ </defaults>
+ <annotate key="org.freedesktop.policykit.exec.path">/usr/bin/systemd-stdio-bridge</annotate>
+ </action>
+
</policyconfig>