diff options
| author | Richard Hughes <hughsient@gmail.com> | 2006-01-10 19:03:45 +0000 |
|---|---|---|
| committer | Richard Hughes <hughsient@gmail.com> | 2006-01-10 19:03:45 +0000 |
| commit | de0a2503720ad947c3259417df2213eb2e373fef (patch) | |
| tree | 1f611cab0c6a29ec1fb8cf173f290b9b37e126c6 /hal.conf.in | |
| parent | 62f9b2469ba1be30f939225abc5f475613fecd8f (diff) | |
Add a fallback for the root user for distros that do not have working
at_console support. Also refactor these a little to make updating
easier, and to stop the multiple matches overhead.
Diffstat (limited to 'hal.conf.in')
| -rw-r--r-- | hal.conf.in | 28 |
1 files changed, 12 insertions, 16 deletions
diff --git a/hal.conf.in b/hal.conf.in index 243fa120..20e2222b 100644 --- a/hal.conf.in +++ b/hal.conf.in @@ -25,31 +25,27 @@ receive_sender="org.freedesktop.Hal"/> </policy> + <!-- Default policy for the exported interfaces --> <policy context="default"> <deny send_interface="org.freedesktop.Hal.Device.SystemPowerManagement"/> - </policy> - <policy at_console="true"> - <allow send_interface="org.freedesktop.Hal.Device.SystemPowerManagement"/> - </policy> - - <policy context="default"> <deny send_interface="org.freedesktop.Hal.Device.LaptopPanel"/> - </policy> - <policy at_console="true"> - <allow send_interface="org.freedesktop.Hal.Device.LaptopPanel"/> - </policy> - - <policy context="default"> <deny send_interface="org.freedesktop.Hal.Device.Volume"/> + <deny send_interface="org.freedesktop.Hal.Device.Volume.Crypto"/> </policy> + + <!-- This will not work if pam_console support is not enabled --> <policy at_console="true"> + <allow send_interface="org.freedesktop.Hal.Device.SystemPowerManagement"/> + <allow send_interface="org.freedesktop.Hal.Device.LaptopPanel"/> <allow send_interface="org.freedesktop.Hal.Device.Volume"/> + <allow send_interface="org.freedesktop.Hal.Device.Volume.Crypto"/> </policy> - <policy context="default"> - <deny send_interface="org.freedesktop.Hal.Device.Volume.Crypto"/> - </policy> - <policy at_console="true"> + <!-- You can change this to a more suitable user, or make per-group --> + <policy user="0"> + <allow send_interface="org.freedesktop.Hal.Device.SystemPowerManagement"/> + <allow send_interface="org.freedesktop.Hal.Device.LaptopPanel"/> + <allow send_interface="org.freedesktop.Hal.Device.Volume"/> <allow send_interface="org.freedesktop.Hal.Device.Volume.Crypto"/> </policy> |