summaryrefslogtreecommitdiff
path: root/policy/hal-storage.policy
blob: 1674dcda63e581fb1204b84cb31e391fd148bcd1 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
<!DOCTYPE policyconfig PUBLIC
 "-//freedesktop//DTD PolicyKit Policy Configuration 1.0//EN"
 "http://www.freedesktop.org/standards/PolicyKit/1.0/policyconfig.dtd">

<!-- 
Policy definitions for HAL's drives/media mechanims.

Copyright (c) 2007 David Zeuthen <david@fubar.dk>

HAL is licensed to you under your choice of the the Academic Free
License Version 2.1, or the GNU General Public License version 2. Some
individual source files may be under the GPL only. See COPYING for
details.

NOTE: If you make changes to this file, make sure to validate the file
using the polkit-policy-file-validate(1) tool. Changes made to this
file are instantly applied.
-->

<policyconfig>
  <group id="hal-storage">
    <description>Storage Drives and Media</description>

    <policy id="hal-storage-mount-fixed">
      <description>Mount file systems from internal drives.</description>
      <defaults>
        <allow_inactive>no</allow_inactive>
        <allow_active>auth_admin_keep_always</allow_active>
      </defaults>
    </policy>

    <policy id="hal-storage-mount-removable">
      <description>Mount file systems from removable drives.</description>
      <defaults>
        <allow_inactive>no</allow_inactive>
        <allow_active>yes</allow_active>
      </defaults>
    </policy>

    <policy id="hal-storage-unmount-others">
      <description>Unmount file systems mounted by other users.</description>
      <defaults>
        <allow_inactive>no</allow_inactive>
        <allow_active>auth_admin_keep_always</allow_active>
      </defaults>
    </policy>

    <policy id="hal-storage-eject">
      <description>Eject removable media.</description>
      <defaults>
        <allow_inactive>no</allow_inactive>
        <allow_active>yes</allow_active>
      </defaults>
    </policy>

    <policy id="hal-storage-crypto-setup">
      <description>Set up decryption for encrypted storage devices.</description>
      <defaults>
        <allow_inactive>no</allow_inactive>
        <allow_active>yes</allow_active>
      </defaults>
    </policy>

  </group>
</policyconfig>