summaryrefslogtreecommitdiffstatshomepage
path: root/etc/polkit-1/rules.d
diff options
context:
space:
mode:
Diffstat (limited to 'etc/polkit-1/rules.d')
-rw-r--r--etc/polkit-1/rules.d/50-libvirt-wheel.rules13
1 files changed, 0 insertions, 13 deletions
diff --git a/etc/polkit-1/rules.d/50-libvirt-wheel.rules b/etc/polkit-1/rules.d/50-libvirt-wheel.rules
deleted file mode 100644
index fac69bd..0000000
--- a/etc/polkit-1/rules.d/50-libvirt-wheel.rules
+++ /dev/null
@@ -1,13 +0,0 @@
-// Allow members of the `wheel` group to manage libvirt (start/stop VMs,
-// edit domains, attach devices) without a polkit password prompt.
-// This single-user system already trusts wheel for administrative work
-// via sudo-rs; libvirt's polkit gate is a separate path that does not
-// honour sudoers, so a polkit rule is the idiomatic fix.
-polkit.addRule(function (action, subject) {
- if (
- action.id == "org.libvirt.unix.manage" &&
- subject.isInGroup("wheel")
- ) {
- return polkit.Result.YES;
- }
-});