aboutsummaryrefslogtreecommitdiff
path: root/data/org.ayatana.AccountsService.Sound.policy
blob: 714049839c70b9b8fc27d41f24c3892af168911e (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
<?xml version="1.0" encoding="UTF-8"?>

<policyconfig>
    <!-- Same as org.freedesktop.accounts.user-administration, but we override
         settings for the lightdm user in a pkla file. -->
    <action id="org.ayatana.AccountsService.GreeterChangeAny">
        <defaults>
            <allow_any>no</allow_any>
            <allow_inactive>no</allow_inactive>
            <allow_active>auth_admin_keep</allow_active>
        </defaults>
    </action>

    <!-- Normally anyone can read these, but for a little bit extra lock down,
         disallow all access, but we'll let the lightdm user read them via the
         pkla override. -->
    <action id="org.ayatana.AccountsService.GreeterReadAny">
        <defaults>
            <allow_any>no</allow_any>
            <allow_inactive>no</allow_inactive>
            <allow_active>no</allow_active>
        </defaults>
    </action>
</policyconfig>