Administrace komentářů

# cat /etc/PolicyKit/PolicyKit.conf
<?xml version="1.0" encoding="UTF-8"?> <!-- -*- XML -*- -->

<!DOCTYPE pkconfig PUBLIC "-//freedesktop//DTD PolicyKit Configuration 1.0//EN"
"http://hal.freedesktop.org/releases/PolicyKit/1.0/config.dtd">

<!-- See the manual page PolicyKit.conf(5) for file format -->

<config version="0.1">

</config>

# cat /usr/share/PolicyKit/policy/org.freedesktop.hal.storage.policy
<?xml version="1.0" encoding="UTF-8"?>                                       
<!DOCTYPE policyconfig PUBLIC                                                
 "-//freedesktop//DTD PolicyKit Policy Configuration 1.0//EN"                
 "http://www.freedesktop.org/standards/PolicyKit/1.0/policyconfig.dtd">      

<!-- 
Policy definitions for HAL's drives/media mechanims.

Copyright (c) 2007 David Zeuthen <david@fubar.dk>

HAL is licensed to you under your choice of the the Academic Free
License Version 2.1, or the GNU General Public License version 2. Some
individual source files may be under the GPL only. See COPYING for    
details.                                                              
-->                                                                   

<policyconfig>

  <action id="org.freedesktop.hal.storage.mount-fixed">
    <description>Mount file systems from internal drives.</description>
    <message>System policy prevents mounting internal media</message>  
    <defaults>                                                         
      <allow_inactive>no</allow_inactive>                              
      <allow_active>auth_admin_keep_always</allow_active>              
    </defaults>                                                        
  </action>                                                            
                                                                       
  <action id="org.freedesktop.hal.storage.mount-removable">            
    <description>Mount file systems from removable drives.</description>
    <message>System policy prevents mounting removable media</message>  
    <defaults>                                                          
      <allow_inactive>no</allow_inactive>                               
      <allow_active>yes</allow_active>                                  
    </defaults>                                                         
  </action>                                                             
                                                                        
  <action id="org.freedesktop.hal.storage.unmount-others">              
    <description>Unmount file systems mounted by other users.</description>
    <message>System policy prevents unmounting media mounted by other users</message>                                                                           
    <defaults>                                                                  
      <allow_inactive>no</allow_inactive>                                       
      <allow_active>auth_admin_keep_always</allow_active>                       
    </defaults>                                                                 
  </action>                                                                     

  <action id="org.freedesktop.hal.storage.eject">
    <description>Eject removable media.</description>
    <message>System policy prevents ejecting removable media</message>
    <defaults>
      <allow_inactive>no</allow_inactive>
      <allow_active>yes</allow_active>
    </defaults>
  </action>

  <action id="org.freedesktop.hal.storage.crypto-setup-fixed">
    <description>Set up decryption for encrypted fixed storage devices.</description>
    <message>System policy prevents accessing encrypted fixed media</message>
    <defaults>
      <allow_inactive>no</allow_inactive>
      <allow_active>auth_admin_keep_always</allow_active>
    </defaults>
  </action>

  <action id="org.freedesktop.hal.storage.crypto-setup-removable">
    <description>Set up decryption for encrypted removable storage devices.</description>
    <message>System policy prevents accessing encrypted removable media</message>
    <defaults>
      <allow_inactive>no</allow_inactive>
      <allow_active>yes</allow_active>
    </defaults>
  </action>

</policyconfig>