From 61b3adc5b393b4070c19818f558dd76ac4b4d880 Mon Sep 17 00:00:00 2001
From: David Zeuthen <davidz@redhat.com>
Date: Tue, 28 Aug 2007 13:33:18 -0400
Subject: [PATCH] add an example of how define_admin_auth is used

Based on input from Ken VanDine

http://lists.freedesktop.org/archives/hal/2007-August/009402.html
---
 doc/man/PolicyKit.conf.xml | 21 ++++++++++++++++++++-
 1 file changed, 20 insertions(+), 1 deletion(-)

diff --git a/doc/man/PolicyKit.conf.xml b/doc/man/PolicyKit.conf.xml
index e931c14..4d03bdf 100644
--- a/doc/man/PolicyKit.conf.xml
+++ b/doc/man/PolicyKit.conf.xml
@@ -326,7 +326,26 @@
         results specified in the <emphasis>.policy</emphasis> file
         describing the action.
       </para>
-      
+    </refsect2>
+
+    <refsect2>
+      <title>AVOIDING THE ROOT PASSWORD</title>
+      <para>
+        Suppose the group <emphasis>wheel</emphasis> contains the
+        users on a system who are allowed to carry out administrative
+        tasks (ie. tasks that would usually require the root password)
+        on a system where the root account is disabled. Then
+      </para>
+      <programlisting>
+        <![CDATA[
+<define_admin_auth group="wheel"/>
+]]>
+      </programlisting>
+      <para>
+        can be used to specify that users in said group can
+        authenticate using their own password in instances where the
+        system would normally prompt for the root password.
+      </para>
     </refsect2>
     
   </refsect1>
-- 
2.7.4