Making to/from gvariant/string methods in PolkitIdentity virtual

David Zeuthen zeuthen at gmail.com
Thu Nov 17 14:24:10 PST 2011


Hey,

Sorry I missed your message, for some reason it was in my spam folder.

On Fri, Nov 11, 2011 at 8:08 PM, Nikki VonHollen <vonhollen at google.com> wrote:
> Hi David and friends,
>
> I'm working on adding netgroup support to Policy Kit.

Before we start talking about specifics or the code, do you mean
netgroup as in the NIS sense of the word, e.g

 http://www.informit.com/library/content.aspx?b=red_hat_linux7&seqNum=143

or something else?

I'm also assuming the intent is to be able to use this together with a
PKLA file, cf.

 http://hal.freedesktop.org/docs/polkit/pklocalauthority.8.html

so you can, for example, drop a file

 /etc/polkit-1/localauthority/20-org.d/my-company-policy.pkla

with contents

 [Developers]
 Identity=netgroup:xyz_developers
 Action=com.example.xyz.*
 ResultAny=no
 ResultInactive=no
 ResultActive=yes

such that any user that is in the xyz_developers Netgroup is permitted
for com.example.xyz.*

Is that the intent?

Thanks,
David


More information about the polkit-devel mailing list