diff options
Diffstat (limited to 'etc/polkit-1')
| -rw-r--r-- | etc/polkit-1/rules.d/50-libvirt-wheel.rules | 13 |
1 files changed, 0 insertions, 13 deletions
diff --git a/etc/polkit-1/rules.d/50-libvirt-wheel.rules b/etc/polkit-1/rules.d/50-libvirt-wheel.rules deleted file mode 100644 index fac69bd..0000000 --- a/etc/polkit-1/rules.d/50-libvirt-wheel.rules +++ /dev/null @@ -1,13 +0,0 @@ -// Allow members of the `wheel` group to manage libvirt (start/stop VMs, -// edit domains, attach devices) without a polkit password prompt. -// This single-user system already trusts wheel for administrative work -// via sudo-rs; libvirt's polkit gate is a separate path that does not -// honour sudoers, so a polkit rule is the idiomatic fix. -polkit.addRule(function (action, subject) { - if ( - action.id == "org.libvirt.unix.manage" && - subject.isInGroup("wheel") - ) { - return polkit.Result.YES; - } -}); |
