feat(dbus): add initial polkit abstraction.
This commit is contained in:
parent
7f38dd255e
commit
d6888a65c4
16 changed files with 35 additions and 14 deletions
|
|
@ -9,16 +9,13 @@ include <tunables/global>
|
|||
@{exec_path} = @{bin}/zsysd @{bin}/zsysctl
|
||||
profile zsysd @{exec_path} flags=(complain) {
|
||||
include <abstractions/base>
|
||||
include <abstractions/bus/polkit>
|
||||
include <abstractions/dbus-strict>
|
||||
include <abstractions/nameservice-strict>
|
||||
|
||||
capability sys_ptrace,
|
||||
capability sys_admin,
|
||||
|
||||
dbus send bus=system path=/org/freedesktop/PolicyKit1/Authority
|
||||
interface=org.freedesktop.PolicyKit1.Authority
|
||||
member=CheckAuthorization,
|
||||
|
||||
@{exec_path} rmix,
|
||||
/{usr/,}{local/,}{s,}bin/zfs rPx,
|
||||
/{usr/,}{local/,}{s,}bin/zpool rPx,
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue