2026-10-13 22:50:04 +09:00
|
|
|
# polkit (0.105, local authority): lets the svc-gw user power the host off or reboot it
|
|
|
|
|
# through logind, with no sudo. svc-gw runs `systemctl poweroff` / `systemctl reboot`
|
|
|
|
|
# for the display's `poweroff` and `reboot` commands (contracts BOUNDARY.md). Nothing
|
|
|
|
|
# else is granted.
|
2026-10-13 18:35:06 +09:00
|
|
|
# Installed to /etc/polkit-1/localauthority/50-local.d/ by scripts/deploy.sh.
|
|
|
|
|
# multiple-sessions: an ssh login is another session; ignore-inhibit: no inhibitor lock
|
|
|
|
|
# (none are taken on this host today) should leave the button silently doing nothing.
|
2026-10-13 22:50:04 +09:00
|
|
|
[yukart-gw: power off and reboot]
|
2026-10-13 18:35:06 +09:00
|
|
|
Identity=unix-user:mikkeli
|
2026-10-13 22:50:04 +09:00
|
|
|
Action=org.freedesktop.login1.power-off;org.freedesktop.login1.power-off-multiple-sessions;org.freedesktop.login1.power-off-ignore-inhibit;org.freedesktop.login1.reboot;org.freedesktop.login1.reboot-multiple-sessions;org.freedesktop.login1.reboot-ignore-inhibit
|
2026-10-13 18:35:06 +09:00
|
|
|
ResultAny=yes
|
|
|
|
|
ResultInactive=yes
|
|
|
|
|
ResultActive=yes
|