about summary refs log tree commit diff
diff options
context:
space:
mode:
authorMichael Biebl <biebl@debian.org>2012-12-21 01:01:27 +0100
committerMichael Biebl <biebl@debian.org>2012-12-21 01:01:30 +0100
commitf8f19ab4ea988d7609d3523efb40709069142aea (patch)
tree2919b94500c51d01f5969c00eaf40a90b655bb3a
parent976ce3c2d5039cf3f4b2ea9133082f2415c460be (diff)
Allow members of group sudo/netdev to edit system connections
Install a PolicyKit pkla file which allows members of group netdev or
sudo to create system-wide network connections without being prompted
for the admin password. (Closes: #642136)
-rw-r--r--debian/changelog8
-rw-r--r--debian/network-manager.install1
-rw-r--r--debian/org.freedesktop.NetworkManager.pkla6
3 files changed, 15 insertions, 0 deletions
diff --git a/debian/changelog b/debian/changelog
index 8b905b93..38afa604 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,11 @@
+network-manager (0.9.4.0-7) UNRELEASED; urgency=low
+
+  * Install a PolicyKit pkla file which allows members of group netdev or sudo
+    to create system-wide network connections without being prompted for the
+    admin password. (Closes: #642136)
+
+ -- Michael Biebl <biebl@debian.org>  Tue, 18 Dec 2012 19:55:33 +0100
+
 network-manager (0.9.4.0-6) unstable; urgency=low
 
   * debian/rules: Use xz compression for binary packages.
diff --git a/debian/network-manager.install b/debian/network-manager.install
index 35b81bee..6bd49d26 100644
--- a/debian/network-manager.install
+++ b/debian/network-manager.install
@@ -21,3 +21,4 @@ lib/udev/rules.d/*.rules
 lib/systemd/system/NetworkManager.service
 lib/systemd/system/NetworkManager-wait-online.service
 debian/NetworkManager.conf etc/NetworkManager/
+debian/org.freedesktop.NetworkManager.pkla var/lib/polkit-1/localauthority/10-vendor.d/
diff --git a/debian/org.freedesktop.NetworkManager.pkla b/debian/org.freedesktop.NetworkManager.pkla
new file mode 100644
index 00000000..7acba4ea
--- /dev/null
+++ b/debian/org.freedesktop.NetworkManager.pkla
@@ -0,0 +1,6 @@
+[Adding or changing system-wide NetworkManager connections]
+Identity=unix-group:netdev;unix-group:sudo
+Action=org.freedesktop.NetworkManager.settings.modify.system
+ResultAny=no
+ResultInactive=no
+ResultActive=yes