Attachment 5957 Details for Bug 7258 – Conflicting parts

[patch] Conflicting parts

conflict.patch (text/plain), 24.08 KB, created by Torsten Schönfeld on 2006-06-17 08:57:30 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Torsten Schönfeld

Created: 2006-06-17 08:57:30 UTC

Size: 24.08 KB

patch

obsolete

>Index: doc/spec/polkit-spec.html
>===================================================================
>RCS file: /cvs/hal/PolicyKit/doc/spec/polkit-spec.html,v
>retrieving revision 1.7
>diff -u -d -p -r1.7 polkit-spec.html
>--- doc/spec/polkit-spec.html	7 Jun 2006 00:26:55 -0000	1.7
>+++ doc/spec/polkit-spec.html	17 Jun 2006 15:42:12 -0000
>@@ -1,14 +1,255 @@
>+<<<<<<< polkit-spec.html
>+<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN""http://www.w3.org/TR/html4/loose.dtd">
>+<HTML
>+><HEAD
>+><TITLE
>+>PolicyKit 0.1 Specification</TITLE
>+><META
>+NAME="GENERATOR"
>+CONTENT="Modular DocBook HTML Stylesheet Version 1.79"></HEAD
>+><BODY
>+CLASS="book"
>+BGCOLOR="#FFFFFF"
>+TEXT="#000000"
>+LINK="#0000FF"
>+VLINK="#840084"
>+ALINK="#0000FF"
>+><DIV
>+CLASS="BOOK"
>+><A
>+NAME="index"
>+></A
>+><DIV
>+CLASS="TITLEPAGE"
>+><H1
>+CLASS="title"
>+><A
>+NAME="AEN2"
>+>PolicyKit 0.1 Specification</A
>+></H1
>+><H3
>+CLASS="author"
>+><A
>+NAME="AEN7"
>+></A
>+>David Zeuthen</H3
>+><DIV
>+CLASS="affiliation"
>+><DIV
>+CLASS="address"
>+><P
>+CLASS="address"
>+><br>
>+	&nbsp;&nbsp;&nbsp;&nbsp;<CODE
>+CLASS="email"
>+>&#60;<A
>+HREF="mailto:david@fubar.dk"
>+>david@fubar.dk</A
>+>&#62;</CODE
>+><br>
>+	&nbsp;&nbsp;</P
>+></DIV
>+></DIV
>+><HR></DIV
>+><DIV
>+CLASS="TOC"
>+><DL
>+><DT
>+><B
>+>Table of Contents</B
>+></DT
>+><DT
>+>1. <A
>+HREF="#introduction"
>+>Introduction</A
>+></DT
>+><DD
>+><DL
>+><DT
>+>1.1. <A
>+HREF="#AEN15"
>+>About</A
>+></DT
>+></DL
>+></DD
>+><DT
>+>2. <A
>+HREF="#operation"
>+>Theory of operation</A
>+></DT
>+><DD
>+><DL
>+><DT
>+>2.1. <A
>+HREF="#AEN20"
>+>Privileges</A
>+></DT
>+><DT
>+>2.2. <A
>+HREF="#AEN26"
>+>Architecture</A
>+></DT
>+><DT
>+>2.3. <A
>+HREF="#AEN37"
>+>Example</A
>+></DT
>+></DL
>+></DD
>+><DT
>+>3. <A
>+HREF="#resources"
>+>Resources</A
>+></DT
>+><DD
>+><DL
>+><DT
>+>3.1. <A
>+HREF="#AEN78"
>+>Resource Identifiers</A
>+></DT
>+></DL
>+></DD
>+><DT
>+>4. <A
>+HREF="#privileges"
>+>Privileges</A
>+></DT
>+><DD
>+><DL
>+><DT
>+>4.1. <A
>+HREF="#AEN88"
>+>Privilege Descriptors</A
>+></DT
>+><DT
>+>4.2. <A
>+HREF="#AEN102"
>+>File Format</A
>+></DT
>+><DD
>+><DL
>+><DT
>+>4.2.1. <A
>+HREF="#AEN107"
>+><TT
>+CLASS="literal"
>+>RequiredPrivileges</TT
>+>: Required Privileges</A
>+></DT
>+><DT
>+>4.2.2. <A
>+HREF="#AEN111"
>+><TT
>+CLASS="literal"
>+>Allow, Deny</TT
>+>: Criteria for Possesing a Privilege</A
>+></DT
>+><DT
>+>4.2.3. <A
>+HREF="#AEN155"
>+><TT
>+CLASS="literal"
>+>CanObtain</TT
>+>: Obtaining Privileges</A
>+></DT
>+><DT
>+>4.2.4. <A
>+HREF="#AEN165"
>+><TT
>+CLASS="literal"
>+>CanGrant</TT
>+>: Granting Privileges</A
>+></DT
>+><DT
>+>4.2.5. <A
>+HREF="#AEN177"
>+><TT
>+CLASS="literal"
>+>ObtainRequireRoot, ObtainPAMService</TT
>+>: Authentication Requirements</A
>+></DT
>+></DL
>+></DD
>+><DT
>+>4.3. <A
>+HREF="#AEN190"
>+>Privileges defined by PolicyKit</A
>+></DT
>+></DL
>+></DD
>+></DL
>+></DIV
>+><DIV
>+CLASS="chapter"
>+><HR><H1
>+><A
>+NAME="introduction"
>+></A
>+>Chapter 1. Introduction</H1
>+><DIV
>+CLASS="sect1"
>+><H2
>+CLASS="sect1"
>+><A
>+NAME="AEN15"
>+>1.1. About</A
>+></H2
>+><P
>+>&#13;	PolicyKit is a system for enabling unprivileged desktop
>+=======
> <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>PolicyKit 0.2 Specification</title><meta name="generator" content="DocBook XSL Stylesheets V1.69.1"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="book" lang="en"><div class="titlepage"><div><div><h1 class="title"><a name="index"></a>PolicyKit 0.2 Specification</h1></div><div><div class="authorgroup"><div class="author"><h3 class="author"><span class="firstname">David</span> <span class="surname">Zeuthen</span></h3><div class="affiliation"><div class="address"><p><br>
> 	    <code class="email">&lt;<a href="mailto:david@fubar.dk">david@fubar.dk</a>&gt;</code><br>
> 	  </p></div></div></div></div></div><div><p class="releaseinfo">Version 0.2</p></div></div><hr></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><span class="chapter"><a href="#introduction">1. Introduction</a></span></dt><dd><dl><dt><span class="sect1"><a href="#id2993332">About</a></span></dt></dl></dd><dt><span class="chapter"><a href="#operation">2. Theory of operation</a></span></dt><dd><dl><dt><span class="sect1"><a href="#id2993355">Privileges</a></span></dt><dt><span class="sect1"><a href="#id3024047">Architecture</a></span></dt><dt><span class="sect1"><a href="#id2988556">Example</a></span></dt></dl></dd><dt><span class="chapter"><a href="#resources">3. Resources</a></span></dt><dd><dl><dt><span class="sect1"><a href="#id2988781">Resource Identifiers</a></span></dt></dl></dd><dt><span class="chapter"><a href="#privileges">4. Privileges</a></span></dt><dd><dl><dt><span class="sect1"><a href="#id2992592">Privilege Descriptors</a></span></dt><dt><span class="sect1"><a href="#id2992668">File Format</a></span></dt><dd><dl><dt><span class="sect2"><a href="#id2992694"><code class="literal">RequiredPrivileges</code>: Required Privileges</a></span></dt><dt><span class="sect2"><a href="#id2992722"><code class="literal">SufficientPrivileges</code>: Sufficient Privileges</a></span></dt><dt><span class="sect2"><a href="#id2992755"><code class="literal">Allow, Deny</code>: Criteria for Possesing a Privilege</a></span></dt><dt><span class="sect2"><a href="#can-obtain"><code class="literal">CanObtain</code>: Obtaining Privileges</a></span></dt><dt><span class="sect2"><a href="#id2988375"><code class="literal">CanGrant</code>: Granting Privileges</a></span></dt><dt><span class="sect2"><a href="#id3033039"><code class="literal">ObtainRequireRoot</code>: Authentication Requirements</a></span></dt></dl></dd><dt><span class="sect1"><a href="#privs-by-polkit">Privileges defined by PolicyKit</a></span></dt><dd><dl><dt><span class="sect2"><a href="#priv-desktop-console"><code class="literal">desktop-console</code> : Users at a local console</a></span></dt></dl></dd></dl></dd></dl></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="introduction"></a>Chapter 1. Introduction</h2></div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><span class="sect1"><a href="#id2993332">About</a></span></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2993332"></a>About</h2></div></div></div><p>
> 	PolicyKit is a system for enabling unprivileged desktop
>+>>>>>>> 1.7
> 	applications to invoke privileged methods on system-wide
> 	components in a controlled manner.
>+<<<<<<< polkit-spec.html
>+      </P
>+></DIV
>+></DIV
>+><DIV
>+CLASS="chapter"
>+><HR><H1
>+><A
>+NAME="operation"
>+></A
>+>Chapter 2. Theory of operation</H1
>+><DIV
>+CLASS="sect1"
>+><H2
>+CLASS="sect1"
>+><A
>+NAME="AEN20"
>+>2.1. Privileges</A
>+></H2
>+><P
>+>&#13;	One major concept of the PolicyKit system is the notion of
>+	privileges; a <SPAN
>+CLASS="emphasis"
>+><I
>+CLASS="emphasis"
>+>PolicyKit privilege</I
>+></SPAN
>+>
>+=======
>       </p></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="operation"></a>Chapter 2. Theory of operation</h2></div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><span class="sect1"><a href="#id2993355">Privileges</a></span></dt><dt><span class="sect1"><a href="#id3024047">Architecture</a></span></dt><dt><span class="sect1"><a href="#id2988556">Example</a></span></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2993355"></a>Privileges</h2></div></div></div><p>
> 	One major concept of the PolicyKit system is the notion of
> 	privileges; a <span class="emphasis"><em>PolicyKit privilege</em></span>
>+>>>>>>> 1.7
> 	(referred to simply as
>+<<<<<<< polkit-spec.html
>+	<SPAN
>+CLASS="emphasis"
>+><I
>+CLASS="emphasis"
>+>privilege</I
>+></SPAN
>+> in the following) is something
>+=======
> 	<span class="emphasis"><em>privilege</em></span> in the following) is something
>+>>>>>>> 1.7
> 	that a given user may or may not possess. The thinking behind
> 	PolicyKit is that privileged system level components offer
> 	functionality to unprivileged desktop applications as D-BUS
>@@ -16,9 +257,31 @@
> 	a flexible security policy defining the set of users that are
> 	allowed to invoke a method, the system level component defines
> 	a set of
>+<<<<<<< polkit-spec.html
>+	<SPAN
>+CLASS="emphasis"
>+><I
>+CLASS="emphasis"
>+>privileges</I
>+></SPAN
>+>. 
>+      </P
>+></DIV
>+><DIV
>+CLASS="sect1"
>+><HR><H2
>+CLASS="sect1"
>+><A
>+NAME="AEN26"
>+>2.2. Architecture</A
>+></H2
>+><P
>+>&#13;	The PolicyKit system is basically client/server and is
>+=======
> 	<span class="emphasis"><em>privileges</em></span>. 
>       </p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3024047"></a>Architecture</h2></div></div></div><p>
> 	The PolicyKit system is basically client/server and is
>+>>>>>>> 1.7
> 	implemented as the
> 	system-wide <code class="literal">org.freedesktop.PolicyKit</code> D-BUS
> 	service. This D-BUS service serves two purposes
>@@ -33,19 +296,103 @@
>           </p></li></ul></div><p>
> 	In addition, the PolicyKit system includes client side
> 	libraries and command-line utilities wrapping the D-BUS API of
>+<<<<<<< polkit-spec.html
>+	the <TT
>+CLASS="literal"
>+>org.freedesktop.PolicyKit</TT
>+> service.
>+      </P
>+></DIV
>+><DIV
>+CLASS="sect1"
>+><HR><H2
>+CLASS="sect1"
>+><A
>+NAME="AEN37"
>+>2.3. Example</A
>+></H2
>+><P
>+>&#13;	As an example, HAL exports the method <TT
>+CLASS="literal"
>+>Mount</TT
>+>
>+=======
> 	the <code class="literal">org.freedesktop.PolicyKit</code> service.
>       </p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2988556"></a>Example</h2></div></div></div><p>
> 	As an example, HAL exports the method <code class="literal">Mount</code>
>+>>>>>>> 1.7
> 	on the
> 	<code class="literal">org.freedesktop.Hal.Device.Volume</code> interface
> 	for each hal device object of
>+<<<<<<< polkit-spec.html
>+	capability <SPAN
>+CLASS="emphasis"
>+><I
>+CLASS="emphasis"
>+>volume</I
>+></SPAN
>+>. HAL defines a number
>+=======
> 	capability <span class="emphasis"><em>volume</em></span>. HAL defines a number
>+>>>>>>> 1.7
> 	of privileges for mounting
>+<<<<<<< polkit-spec.html
>+	including <SPAN
>+CLASS="emphasis"
>+><I
>+CLASS="emphasis"
>+>hal-storage-fixed-mount</I
>+></SPAN
>+>
>+	and <SPAN
>+CLASS="emphasis"
>+><I
>+CLASS="emphasis"
>+>hal-storage-removable-mount</I
>+></SPAN
>+>. Depending
>+=======
> 	including <span class="emphasis"><em>hal-storage-fixed-mount</em></span>
> 	and <span class="emphasis"><em>hal-storage-removable-mount</em></span>. Depending
>+>>>>>>> 1.7
> 	on the whether the volume stems from a fixed hard disk or a
> 	hotpluggable/removable drive, HAL requires the calling user to
> 	possess either
>+<<<<<<< polkit-spec.html
>+	the <SPAN
>+CLASS="emphasis"
>+><I
>+CLASS="emphasis"
>+>hal-storage-fixed-mount</I
>+></SPAN
>+>
>+	or <SPAN
>+CLASS="emphasis"
>+><I
>+CLASS="emphasis"
>+>hal-storage-removable-mount</I
>+></SPAN
>+> privilege
>+	in order to carry out the <TT
>+CLASS="literal"
>+>Mount</TT
>+> method. 
>+      </P
>+><P
>+>&#13;	Upon a user invoking the <TT
>+CLASS="literal"
>+>Mount</TT
>+> method, HAL
>+	simply asks the <TT
>+CLASS="literal"
>+>org.freedesktop.PolicyKit</TT
>+>
>+	D-BUS service if the calling user posses this privilege and if
>+	this is not the case the <TT
>+CLASS="literal"
>+>Mount</TT
>+> method
>+=======
> 	the <span class="emphasis"><em>hal-storage-fixed-mount</em></span>
> 	or <span class="emphasis"><em>hal-storage-removable-mount</em></span> privilege
> 	in order to carry out the <code class="literal">Mount</code> method. 
>@@ -54,15 +401,43 @@
> 	simply asks the <code class="literal">org.freedesktop.PolicyKit</code>
> 	D-BUS service if the calling user possess this privilege and if
> 	this is not the case the <code class="literal">Mount</code> method
>+>>>>>>> 1.7
> 	throws
> 	the <code class="literal">org.freedesktop.Hal.Device.PermissionDeniedByPolicy</code>
> 	exception. Notably, this exception will tell the caller what
> 	privilege the calling user needs to possess,
>+<<<<<<< polkit-spec.html
>+	e.g. either <SPAN
>+CLASS="emphasis"
>+><I
>+CLASS="emphasis"
>+>hal-storage-fixed-mount</I
>+></SPAN
>+>
>+	or <SPAN
>+CLASS="emphasis"
>+><I
>+CLASS="emphasis"
>+>hal-storage-removable-mount</I
>+></SPAN
>+>.
>+      </P
>+><P
>+>&#13;	Should the <TT
>+CLASS="literal"
>+>Mount</TT
>+> method fail with the
>+	exception <TT
>+CLASS="literal"
>+>PermissionDeniedByPolicy</TT
>+> the
>+=======
> 	e.g. either <span class="emphasis"><em>hal-storage-fixed-mount</em></span>
> 	or <span class="emphasis"><em>hal-storage-removable-mount</em></span>.
>       </p><p>
> 	Should the <code class="literal">Mount</code> method fail with the
> 	exception <code class="literal">PermissionDeniedByPolicy</code> the
>+>>>>>>> 1.7
> 	caller now knows what privilege is required. The caller can
> 	now initiate a dialogue with the <code class="literal">PolicyKit</code>
> 	service to obtain this privilege. This conversation is
>@@ -77,12 +452,48 @@
> 	process crash while holding a privilege,
> 	the <code class="literal">PolicyKit</code> service will be notifed and
> 	the privilege will automatically be revoked.
>+<<<<<<< polkit-spec.html
>+      </P
>+><P
>+>&#13;	Hence, <TT
>+CLASS="literal"
>+>PolicyKit</TT
>+> has the notion of
>+	both <SPAN
>+CLASS="emphasis"
>+><I
>+CLASS="emphasis"
>+>permament</I
>+></SPAN
>+>
>+	and <SPAN
>+CLASS="emphasis"
>+><I
>+CLASS="emphasis"
>+>temporary</I
>+></SPAN
>+> privileges. The latter may
>+=======
>       </p><p>
> 	Hence, <code class="literal">PolicyKit</code> has the notion of
> 	both <span class="emphasis"><em>permament</em></span>
> 	and <span class="emphasis"><em>temporary</em></span> privileges. The latter may
>+>>>>>>> 1.7
> 	even be restricted such that only callers from the D-BUS
> 	connection (remember, D-BUS connections has unique names)
>+<<<<<<< polkit-spec.html
>+	obtaining the privilege may use the obtained privilege.
>+      </P
>+><P
>+>&#13;	In addition, privileges may be restricted to
>+	certain <SPAN
>+CLASS="emphasis"
>+><I
>+CLASS="emphasis"
>+>resources</I
>+></SPAN
>+>; this is discussed in
>+=======
> 	obtaining the privilege may use the obtained
> 	privilege. Consequently, if a temporary privilege is
> 	restricted to a certain D-BUS connection, it is revoked when
>@@ -91,7 +502,36 @@
>       </p><p>
> 	In addition, privileges may be restricted to
> 	certain <span class="emphasis"><em>resources</em></span>; this is discussed in
>+>>>>>>> 1.7
> 	more detail in XXX.
>+<<<<<<< polkit-spec.html
>+      </P
>+><P
>+>&#13;	<IMG
>+SRC="polkit-arch.png">
>+      </P
>+><P
>+>&#13;	The whole example is outlined in the diagram above.
>+      </P
>+></DIV
>+></DIV
>+><DIV
>+CLASS="chapter"
>+><HR><H1
>+><A
>+NAME="resources"
>+></A
>+>Chapter 3. Resources</H1
>+><P
>+>&#13;      PolicyKit allows granting privileges only on
>+      certain <SPAN
>+CLASS="emphasis"
>+><I
>+CLASS="emphasis"
>+>resources</I
>+></SPAN
>+>. For example, for HAL, it
>+=======
>       </p><p>
> 	<img src="polkit-arch.png">
>       </p><p>
>@@ -99,13 +539,126 @@
>       </p></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="resources"></a>Chapter 3. Resources</h2></div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><span class="sect1"><a href="#id2988781">Resource Identifiers</a></span></dt></dl></div><p>
>       PolicyKit allows granting privileges only on
>       certain <span class="emphasis"><em>resources</em></span>. For example, for HAL, it
>+>>>>>>> 1.7
>       is possible to grant the
>+<<<<<<< polkit-spec.html
>+      privilege <SPAN
>+CLASS="emphasis"
>+><I
>+CLASS="emphasis"
>+>hal-storage-fixed-mount</I
>+></SPAN
>+> to the
>+=======
>       privilege <span class="emphasis"><em>hal-storage-fixed-mount</em></span> to the
>+>>>>>>> 1.7
>       user with uid 500 but only for the HAL device object
>+<<<<<<< polkit-spec.html
>+      representing e.g. the <TT
>+CLASS="literal"
>+>/dev/hda3</TT
>+> partition.
>+    </P
>+><DIV
>+CLASS="sect1"
>+><HR><H2
>+CLASS="sect1"
>+><A
>+NAME="AEN78"
>+>3.1. Resource Identifiers</A
>+></H2
>+><P
>+> Resource identifers are prefixed with a name identifying
>+=======
>       representing e.g. the <code class="literal">/dev/hda3</code> partition.
>     </p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2988781"></a>Resource Identifiers</h2></div></div></div><p> Resource identifers are prefixed with a name identifying
>+>>>>>>> 1.7
> 	what service they belong to. The following resource
> 	identifiers are defined
>+<<<<<<< polkit-spec.html
>+      </P
>+><P
>+></P
>+><UL
>+><LI
>+><P
>+>&#13;	    <TT
>+CLASS="literal"
>+>hal://</TT
>+>
>+	    HAL Unique Device Identifiers also known as HAL UID's. Example: <TT
>+CLASS="literal"
>+>hal:///org/freedesktop/Hal/devices/volume_uuid_1a28b356_9955_44f9_b268_6ed6639978f5</TT
>+>
>+          </P
>+></LI
>+></UL
>+></DIV
>+></DIV
>+><DIV
>+CLASS="chapter"
>+><HR><H1
>+><A
>+NAME="privileges"
>+></A
>+>Chapter 4. Privileges</H1
>+><DIV
>+CLASS="sect1"
>+><H2
>+CLASS="sect1"
>+><A
>+NAME="AEN88"
>+>4.1. Privilege Descriptors</A
>+></H2
>+><P
>+>	
>+	Applications, such as HAL, installs <SPAN
>+CLASS="emphasis"
>+><I
>+CLASS="emphasis"
>+>privilege descriptors</I
>+></SPAN
>+> using the <TT
>+CLASS="literal"
>+>polkit-policy-descriptor-install</TT
>+> commandline utility. The descriptor contains the following information
>+      </P
>+><P
>+></P
>+><UL
>+><LI
>+><P
>+>&#13;	    Criteria for determining if a given user possess the privilege on a given resource.
>+          </P
>+></LI
>+><LI
>+><P
>+>&#13;	    What other privileges a given user must also possess.
>+          </P
>+></LI
>+><LI
>+><P
>+>&#13;	    Information on whether the user can obtain the privilege, and if he can, whether only temporarily or permanently.
>+          </P
>+></LI
>+><LI
>+><P
>+>&#13;	    Whether a user with the privilege may permanently grant it to other users.
>+          </P
>+></LI
>+></UL
>+></DIV
>+><DIV
>+CLASS="sect1"
>+><HR><H2
>+CLASS="sect1"
>+><A
>+NAME="AEN102"
>+>4.2. File Format</A
>+></H2
>+><P
>+>&#13;	A developer of a system-wide application wanting to define a
>+=======
>       </p><div class="itemizedlist"><ul type="disc"><li><p>
> 	    <code class="literal">hal://</code>
> 	    HAL Unique Device Identifiers also known as HAL UID's. Example: <code class="literal">hal:///org/freedesktop/Hal/devices/volume_uuid_1a28b356_9955_44f9_b268_6ed6639978f5</code>
>@@ -130,11 +683,19 @@
> 	    Whether a user with the privilege may permanently grant it to other users.
>           </p></li></ul></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2992668"></a>File Format</h2></div></div></div><p>
> 	A developer of a system-wide application wanting to define a
>+>>>>>>> 1.7
> 	privilege must create a privilege descriptor. This is a a
> 	simple <code class="literal">.ini</code>-like config file. Here is what
> 	the skeleton looks like:
>+<<<<<<< polkit-spec.html
>+      </P
>+><PRE
>+CLASS="programlisting"
>+>&#13;	[Policy]
>+=======
>       </p><pre class="programlisting">
> 	[Policy]
>+>>>>>>> 1.7
> 	RequiredPrivileges=
> 	SufficientPrivileges=
> 	Allow=
>@@ -142,10 +703,52 @@
> 	CanObtain=
> 	CanGrant=
> 	ObtainRequireRoot=
>+<<<<<<< polkit-spec.html
>+	ObtainPAMService=
>+      </PRE
>+><DIV
>+CLASS="sect2"
>+><HR><H3
>+CLASS="sect2"
>+><A
>+NAME="AEN107"
>+>4.2.1. <TT
>+CLASS="literal"
>+>RequiredPrivileges</TT
>+>: Required Privileges</A
>+></H3
>+><P
>+>&#13;	  This is a list of privileges the user must possess in order
>+=======
>       </pre><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2992694"></a><code class="literal">RequiredPrivileges</code>: Required Privileges</h3></div></div></div><p>
> 	  This is a list of privileges the user must possess in order
>+>>>>>>> 1.7
> 	  to possess the given privilege. If the user doesn't possess
> 	  all of these privileges he is not considered to possess the
>+<<<<<<< polkit-spec.html
>+	  given privilege. The list may be empty.
>+	</P
>+></DIV
>+><DIV
>+CLASS="sect2"
>+><HR><H3
>+CLASS="sect2"
>+><A
>+NAME="AEN111"
>+>4.2.2. <TT
>+CLASS="literal"
>+>Allow, Deny</TT
>+>: Criteria for Possesing a Privilege</A
>+></H3
>+><P
>+>&#13;	  Both <TT
>+CLASS="literal"
>+>Allow</TT
>+> and <TT
>+CLASS="literal"
>+>Deny</TT
>+>
>+=======
> 	  given privilege. The list may be empty. A privilege in this
> 	  list is considered being possessed if the user is privileged
> 	  for one or more resources. E.g., if <code class="literal">foo</code>
>@@ -161,6 +764,7 @@
> 	  just having this privilege on one resource is sufficient.
> 	</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2992755"></a><code class="literal">Allow, Deny</code>: Criteria for Possesing a Privilege</h3></div></div></div><p>
> 	  Both <code class="literal">Allow</code> and <code class="literal">Deny</code>
>+>>>>>>> 1.7
> 	  contains lists describing what users are allowed
> 	  respectively denied the privilege. The elements of in each
> 	  list are of the form
>@@ -230,6 +834,34 @@
> 	        All users expect those in
> 	        the <code class="literal">normalstaff</code> group posseses this
> 	        privilege.
>+<<<<<<< polkit-spec.html
>+	    </P
>+></LI
>+></UL
>+></DIV
>+><DIV
>+CLASS="sect2"
>+><HR><H3
>+CLASS="sect2"
>+><A
>+NAME="AEN155"
>+>4.2.3. <TT
>+CLASS="literal"
>+>CanObtain</TT
>+>: Obtaining Privileges</A
>+></H3
>+><P
>+>&#13;	  This property denotes whether an user can obtain the
>+	  privilege by authentication. It can assume the values
>+	  <TT
>+CLASS="literal"
>+>True</TT
>+> (the user can obtain the privilege
>+	  permanently), <TT
>+CLASS="literal"
>+>Temporary</TT
>+> (the user can
>+=======
> 	    </p></li></ul></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="can-obtain"></a><code class="literal">CanObtain</code>: Obtaining Privileges</h3></div></div></div><p>
> 	  This property denotes whether an user can obtain the
> 	  privilege by authentication. This is useful when either
>@@ -240,7 +872,141 @@
> 	  The property can assume the values
> 	  <code class="literal">True</code> (the user can obtain the privilege
> 	  permanently), <code class="literal">Temporary</code> (the user can
>+>>>>>>> 1.7
> 	  only obtain the privilege temporarily) and
>+<<<<<<< polkit-spec.html
>+	  <TT
>+CLASS="literal"
>+>False</TT
>+> (the user can never obtain the
>+	  privilege through authentication).
>+	</P
>+><P
>+>&#13;	  The authentication required are specified in
>+	  the <TT
>+CLASS="literal"
>+>ObtainRequireRoot</TT
>+>
>+	  and <TT
>+CLASS="literal"
>+>ObtainPAMService</TT
>+> properties.
>+	</P
>+></DIV
>+><DIV
>+CLASS="sect2"
>+><HR><H3
>+CLASS="sect2"
>+><A
>+NAME="AEN165"
>+>4.2.4. <TT
>+CLASS="literal"
>+>CanGrant</TT
>+>: Granting Privileges</A
>+></H3
>+><P
>+>&#13;	  This property (it can assume the
>+	  values <TT
>+CLASS="literal"
>+>True</TT
>+> and <TT
>+CLASS="literal"
>+>False</TT
>+>)
>+	  describes whether an user with the given privilege can grant
>+	  it to other users, e.g. modify the <TT
>+CLASS="literal"
>+>Allow</TT
>+>
>+	  and <TT
>+CLASS="literal"
>+>Deny</TT
>+> properties.
>+	</P
>+><P
>+>&#13;	  The property <TT
>+CLASS="literal"
>+>CanObtain</TT
>+> needs to have the
>+	  value <TT
>+CLASS="literal"
>+>True</TT
>+> if this property assumes the
>+	  value <TT
>+CLASS="literal"
>+>True</TT
>+>.
>+	</P
>+></DIV
>+><DIV
>+CLASS="sect2"
>+><HR><H3
>+CLASS="sect2"
>+><A
>+NAME="AEN177"
>+>4.2.5. <TT
>+CLASS="literal"
>+>ObtainRequireRoot, ObtainPAMService</TT
>+>: Authentication Requirements</A
>+></H3
>+><P
>+>&#13;	  If the property <TT
>+CLASS="literal"
>+>CanObtain</TT
>+> assumes the
>+	  value <TT
>+CLASS="literal"
>+>True</TT
>+>
>+	  or <TT
>+CLASS="literal"
>+>Temporary</TT
>+> it means the user can
>+	  authenticate to gain a privilege.
>+	</P
>+><P
>+>&#13;	  The <TT
>+CLASS="literal"
>+>ObtainRequireRoot</TT
>+> property specifies
>+	  whether authentication requires the super user password
>+	  (<TT
>+CLASS="literal"
>+>True</TT
>+>) or the users own password
>+	  (<TT
>+CLASS="literal"
>+>False</TT
>+>). In addition, it can be specified
>+	  what PAM service (for example <TT
>+CLASS="literal"
>+>pam_rps</TT
>+>) is
>+	  to be used for authentication through the
>+	  property <TT
>+CLASS="literal"
>+>ObtainPAMService</TT
>+>.
>+	</P
>+></DIV
>+></DIV
>+><DIV
>+CLASS="sect1"
>+><HR><H2
>+CLASS="sect1"
>+><A
>+NAME="AEN190"
>+>4.3. Privileges defined by PolicyKit</A
>+></H2
>+><P
>+>&#13;	baz
>+      </P
>+></DIV
>+></DIV
>+></DIV
>+></BODY
>+></HTML
>+>=======
> 	  <code class="literal">False</code> (the user can never obtain the
> 	  privilege through authentication). 
> 	</p><p>
>@@ -382,3 +1148,4 @@ ObtainRequireRoot=False
> 	  display ":0") and one cannot assign meaning to it. In the
> 	  future, it may be possible to assign meaning to it.
> 	</p></div></div></div></div></body></html>
>+>>>>>>> 1.7

Actions: View | Splinter Review

Attachments on bug 7258: 5957

Use of freedesktop.org services, including Bugzilla, is subject to our Code of Conduct. How we collect and use information is described in our Privacy Policy.