Date: Mon, 16 Jul 2012 21:08:43 -0700 From: Doug Barton <dougb@FreeBSD.org> To: "J.R. Oldroyd" <fbsd@opal.com> Cc: xfce@freebsd.org Subject: Re: x11-wm/xfce4-session default reboot/halt/suspend permissions Message-ID: <5004E54B.9040600@FreeBSD.org> In-Reply-To: <20120716214429.5a7664ce@shibato.opal.com> References: <20120716214429.5a7664ce@shibato.opal.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On 07/16/2012 12:44, J.R. Oldroyd wrote:
> Hi folks,
>
> Port x11-wm/xfce4-session currently provides a pkg-message that advises
> folk to add a .pkla file in:
> %%LOCALBASE%%/etc/polkit-1/localauthority/50-local.d
> that adds the necessary PolicyKit permissions to add reboot/halt and
> now also suspend capabilities to the xfce4-session-logout dialog.
>
> It requires users to copy a sample, and edit:
> Identity=unix-group:PUTYOURGROUPHERE
>
> I would like to propose that this file be installed by the port with
> the above line set to:
> Identity=unix-group:wheel
>
> My intent here is to automatically enable reboot/halt/suspend capability
> in a way that doesn't open new holes. Users in group wheel can already
> reboot/halt/suspend, so this will work as expected on systems with users
> in the wheel group. Users in other groups can still edit the file as
> they need.
>
> Any problems with this?
I proposed this a while back, so I'm in favor. :) One thing though,
since suspend/resume doesn't work for most of our users, that bit should
be an option, off by default.
Doug
--
Change is hard.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?5004E54B.9040600>