aboutsummaryrefslogtreecommitdiffstats
path: root/conf/polkit-policy/org.freedesktop.timedate1.policy
blob: 3bd95b42c3a7f67588bb827a95ae3aaf05a0bd00 (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE policyconfig PUBLIC "-//freedesktop//DTD polkit Policy Configuration 1.0//EN" "http://www.freedesktop.org/software/polkit/policyconfig-1.dtd">

<policyconfig>
    <vendor>OpenBSD</vendor>
    <vendor_url>https://uglyman.kremlin.cc/gitweb/gitweb.cgi?p=systemd-utl.git</vendor_url> <!-- TODO change or redirect this URL when we rebase -->

    <action id="org.freedesktop.timedate1.SetTime">
        <description>Set system time.</description>
        <message>Setting the system time requires authentication.</message>
        <defaults>
            <allow_any>auth_admin_keep</allow_any>
            <allow_inactive>auth_admin_keep</allow_inactive>
            <allow_active>auth_admin_keep</allow_active>
        </defaults>
    </action>

    <action id="org.freedesktop.timedate1.SetTimezone">
        <description>Set local timezone.</description>
        <message>Setting the timezone requires authentication.</message>
        <defaults>
            <allow_any>auth_admin_keep</allow_any>
            <allow_inactive>auth_admin_keep</allow_inactive>
            <allow_active>auth_admin_keep</allow_active>
        </defaults>
    </action>

    <action id="org.freedesktop.timedate1.SetLocalRTC">
        <description>Switch RTC between UTC and local time.</description>
        <message>Switching to the system's real time clock source requires authentication.</message>
        <defaults>
            <allow_any>auth_admin_keep</allow_any>
            <allow_inactive>auth_admin_keep</allow_inactive>
            <allow_active>auth_admin_keep</allow_active>
        </defaults>
    </action>

    <action id="org.freedesktop.timedate1.SetNTP">
        <description>Toggle clock synchronization through NTP.</description>
        <message>Toggling NTP requires authentication.</message>
        <defaults>
            <allow_any>auth_admin_keep</allow_any>
            <allow_inactive>auth_admin_keep</allow_inactive>
            <allow_active>auth_admin_keep</allow_active>
        </defaults>
    </action>
</policyconfig>