From: Kay Sievers Date: Thu, 27 Jul 2006 20:44:44 +0000 (+0200) Subject: .cvsignore -> .gitignore X-Git-Tag: POLICY_KIT_0_3~57 X-Git-Url: http://review.tizen.org/git/?a=commitdiff_plain;h=520608eedd5652ad51acc27073f8a6c75abc0c8b;p=platform%2Fupstream%2Fpolkit.git .cvsignore -> .gitignore --- diff --git a/.cvsignore b/.gitignore similarity index 98% rename from .cvsignore rename to .gitignore index 28d9568..d96c418 100644 --- a/.cvsignore +++ b/.gitignore @@ -27,3 +27,4 @@ policy-kit polkit.pc py-compile stamp-h1 +*.o diff --git a/privileges/.cvsignore b/doc/.gitignore similarity index 84% rename from privileges/.cvsignore rename to doc/.gitignore index 282522d..8f1b0d9 100644 --- a/privileges/.cvsignore +++ b/doc/.gitignore @@ -1,2 +1,3 @@ Makefile Makefile.in +*.o diff --git a/doc/spec/polkit-spec.html b/doc/spec/polkit-spec.html index df946de..0f6e819 100644 --- a/doc/spec/polkit-spec.html +++ b/doc/spec/polkit-spec.html @@ -1,10 +1,10 @@ -PolicyKit 0.2 Specification

PolicyKit 0.2 Specification

David Zeuthen


+PolicyKit 0.2 Specification

PolicyKit 0.2 Specification

David Zeuthen


    
-   

Version 0.2

Table of Contents

1. Introduction
About
2. Theory of operation
Privileges
Architecture
Example
3. Resources
Resource Identifiers
4. Privileges
Privilege Descriptors
File Format
RequiredPrivileges: Required Privileges
SufficientPrivileges: Sufficient Privileges
Allow, Deny: Criteria for Possesing a Privilege
CanObtain: Obtaining Privileges
CanGrant: Granting Privileges
ObtainRequireRoot: Authentication Requirements
Privileges defined by PolicyKit
desktop-console : Users at a local console

Chapter 1. Introduction

Table of Contents

About

About

+   

Version 0.2

Table of Contents

1. Introduction
About
2. Theory of operation
Privileges
Architecture
Example
3. Resources
Resource Identifiers
4. Privileges
Privilege Descriptors
File Format
RequiredPrivileges: Required Privileges
SufficientPrivileges: Sufficient Privileges
Allow, Deny: Criteria for Possesing a Privilege
CanObtain: Obtaining Privileges
CanGrant: Granting Privileges
ObtainRequireRoot: Authentication Requirements
Privileges defined by PolicyKit
desktop-console : Users at a local console

Chapter 1. Introduction

Table of Contents

About

About

PolicyKit is a system for enabling unprivileged desktop applications to invoke privileged methods on system-wide components in a controlled manner. -

Chapter 2. Theory of operation

Table of Contents

Privileges
Architecture
Example

Privileges

+

Chapter 2. Theory of operation

Table of Contents

Privileges
Architecture
Example

Privileges

One major concept of the PolicyKit system is the notion of privileges; a PolicyKit privilege (referred to simply as @@ -17,7 +17,7 @@ allowed to invoke a method, the system level component defines a set of privileges. -

Architecture

+

Architecture

The PolicyKit system is basically client/server and is implemented as the system-wide org.freedesktop.PolicyKit D-BUS @@ -34,7 +34,7 @@ In addition, the PolicyKit system includes client side libraries and command-line utilities wrapping the D-BUS API of the org.freedesktop.PolicyKit service. -

Example

+

Example

As an example, HAL exports the method Mount on the org.freedesktop.Hal.Device.Volume interface @@ -96,20 +96,20 @@

The whole example is outlined in the diagram above. -

Chapter 3. Resources

Table of Contents

Resource Identifiers

+

Chapter 3. Resources

Table of Contents

Resource Identifiers

PolicyKit allows granting privileges only on certain resources. For example, for HAL, it is possible to grant the privilege hal-storage-fixed-mount to the user with uid 500 but only for the HAL device object representing e.g. the /dev/hda3 partition. -

Resource Identifiers

Resource identifers are prefixed with a name identifying +

Resource Identifiers

Resource identifers are prefixed with a name identifying what service they belong to. The following resource identifiers are defined

  • hal:// HAL Unique Device Identifiers also known as HAL UID's. Example: hal:///org/freedesktop/Hal/devices/volume_uuid_1a28b356_9955_44f9_b268_6ed6639978f5 -

Chapter 4. Privileges

Table of Contents

Privilege Descriptors
File Format
RequiredPrivileges: Required Privileges
SufficientPrivileges: Sufficient Privileges
Allow, Deny: Criteria for Possesing a Privilege
CanObtain: Obtaining Privileges
CanGrant: Granting Privileges
ObtainRequireRoot: Authentication Requirements
Privileges defined by PolicyKit
desktop-console : Users at a local console

Privilege Descriptors

+

Chapter 4. Privileges

Table of Contents

Privilege Descriptors
File Format
RequiredPrivileges: Required Privileges
SufficientPrivileges: Sufficient Privileges
Allow, Deny: Criteria for Possesing a Privilege
CanObtain: Obtaining Privileges
CanGrant: Granting Privileges
ObtainRequireRoot: Authentication Requirements
Privileges defined by PolicyKit
desktop-console : Users at a local console

Privilege Descriptors

Applications, such as HAL, installs privilege descriptors into the /etc/PolicyKit/privilege.d directory @@ -128,7 +128,7 @@ Information on whether the user can obtain the privilege, and if he can, whether only temporarily or permanently.

  • Whether a user with the privilege may permanently grant it to other users. -

    • File Format

    +

    File Format

    A developer of a system-wide application wanting to define a privilege must create a privilege descriptor. This is a a simple .ini-like config file. Here is what @@ -142,7 +142,7 @@ CanObtain= CanGrant= ObtainRequireRoot= -

    RequiredPrivileges: Required Privileges

    +

    RequiredPrivileges: Required Privileges

    This is a list of privileges the user must possess in order to possess the given privilege. If the user doesn't possess all of these privileges he is not considered to possess the @@ -151,7 +151,7 @@ for one or more resources. E.g., if foo is a required privilege then just having this privilege on one resource is sufficient. -

    SufficientPrivileges: Sufficient Privileges

    +

    SufficientPrivileges: Sufficient Privileges

    This is a list of privileges that, if a user possess any of these, he is consider to possess the given privilege. The list may be empty. A privilege in this list is considered @@ -159,7 +159,7 @@ resources. As with RequiredPrivileges, if foo is a sufficient privilege then just having this privilege on one resource is sufficient. -

    Allow, Deny: Criteria for Possesing a Privilege

    +

    Allow, Deny: Criteria for Possesing a Privilege

    Both Allow and Deny contains lists describing what users are allowed respectively denied the privilege. The elements of in each @@ -258,7 +258,7 @@ has CanObtain set to False, the user will always have to authenticate as the super user. -

    CanGrant: Granting Privileges

    +

    CanGrant: Granting Privileges

    This property (it can assume the values True and False) describes whether an user with the given privilege can @@ -289,7 +289,7 @@ the value True if this property assumes the value True. Otherwise this property effectively assumes the value False. -

    ObtainRequireRoot: Authentication Requirements

    +

    ObtainRequireRoot: Authentication Requirements

    If the property CanObtain assumes the value True or Temporary it means the user can diff --git a/libpolkit/.gitignore b/libpolkit/.gitignore new file mode 100644 index 0000000..764d994 --- /dev/null +++ b/libpolkit/.gitignore @@ -0,0 +1,9 @@ +.deps +.libs +*.la +*.lo +*.o +Makefile +Makefile.in +polkit-interface-manager-glue.h +polkit-interface-session-glue.h diff --git a/libpolkit/.cvsignore b/pam-polkit-console/.gitignore similarity index 91% rename from libpolkit/.cvsignore rename to pam-polkit-console/.gitignore index 9730646..10140b2 100644 --- a/libpolkit/.cvsignore +++ b/pam-polkit-console/.gitignore @@ -4,3 +4,4 @@ Makefile Makefile.in *.la *.lo +*.o diff --git a/polkitd/.cvsignore b/polkitd/.gitignore similarity index 98% rename from polkitd/.cvsignore rename to polkitd/.gitignore index 3b3a675..2198470 100644 --- a/polkitd/.cvsignore +++ b/polkitd/.gitignore @@ -10,3 +10,4 @@ polkit-marshal.h polkit-interface-manager-glue.c polkit-interface-manager-glue.h polkit-interface-session-glue.h +*.o diff --git a/doc/.cvsignore b/privileges/.gitignore similarity index 84% rename from doc/.cvsignore rename to privileges/.gitignore index 282522d..8f1b0d9 100644 --- a/doc/.cvsignore +++ b/privileges/.gitignore @@ -1,2 +1,3 @@ Makefile Makefile.in +*.o diff --git a/tools/.cvsignore b/tools/.gitignore similarity index 51% rename from tools/.cvsignore rename to tools/.gitignore index 5a07223..21fa53c 100644 --- a/tools/.cvsignore +++ b/tools/.gitignore @@ -1,10 +1,9 @@ .deps .libs +*.o Makefile Makefile.in polkit-is-privileged polkit-list-privileges polkit-grant-privilege -polkit-interface-manager-glue.c -polkit-interface-manager-glue.h -polkit-interface-session-glue.h +polkit-revoke-privilege