mirror of
https://git.proxmox.com/git/fwupd
synced 2025-08-20 07:38:23 +00:00
b7b0ce533d
These are currently used interchangeably since there was indecisiveness which to use as the feature was being developed. As outward facing it will be named with "settings", change all uses in the code to match this.
211 lines
8.6 KiB
XML
211 lines
8.6 KiB
XML
<?xml version="1.0" encoding="UTF-8"?>
|
|
<!DOCTYPE policyconfig PUBLIC
|
|
"-//freedesktop//DTD PolicyKit Policy Configuration 1.0//EN"
|
|
"http://www.freedesktop.org/standards/PolicyKit/1.0/policyconfig.dtd">
|
|
<policyconfig>
|
|
|
|
<!--
|
|
Policy definitions for fwupd actions.
|
|
Copyright (c) 2015 Richard Hughes <richard@hughsie.com>
|
|
-->
|
|
|
|
<vendor>System firmware update</vendor>
|
|
<vendor_url>https://github.com/fwupd/fwupd</vendor_url>
|
|
<icon_name>application-x-firmware</icon_name>
|
|
|
|
<action id="org.freedesktop.fwupd.update-internal-trusted">
|
|
<description>Install signed system firmware</description>
|
|
<!-- TRANSLATORS: this is the PolicyKit modal dialog -->
|
|
<message>Authentication is required to update the firmware on this machine</message>
|
|
<defaults>
|
|
<allow_any>auth_admin</allow_any>
|
|
<allow_inactive>no</allow_inactive>
|
|
<allow_active>yes</allow_active>
|
|
</defaults>
|
|
</action>
|
|
|
|
<action id="org.freedesktop.fwupd.update-internal">
|
|
<description>Install unsigned system firmware</description>
|
|
<!-- TRANSLATORS: this is the PolicyKit modal dialog -->
|
|
<message>Authentication is required to update the firmware on this machine</message>
|
|
<defaults>
|
|
<allow_any>auth_admin</allow_any>
|
|
<allow_inactive>no</allow_inactive>
|
|
<allow_active>auth_admin_keep</allow_active>
|
|
</defaults>
|
|
<annotate key="org.freedesktop.policykit.imply">org.freedesktop.fwupd.update-internal-trusted</annotate>
|
|
</action>
|
|
|
|
<action id="org.freedesktop.fwupd.downgrade-internal-trusted">
|
|
<description>Install old version of signed system firmware</description>
|
|
<!-- TRANSLATORS: this is the PolicyKit modal dialog -->
|
|
<message>Authentication is required to downgrade the firmware on this machine</message>
|
|
<defaults>
|
|
<allow_any>auth_admin</allow_any>
|
|
<allow_inactive>no</allow_inactive>
|
|
<allow_active>auth_admin_keep</allow_active>
|
|
</defaults>
|
|
<annotate key="org.freedesktop.policykit.imply">org.freedesktop.fwupd.update-internal</annotate>
|
|
</action>
|
|
|
|
<action id="org.freedesktop.fwupd.downgrade-internal">
|
|
<description>Install old version of unsigned system firmware</description>
|
|
<!-- TRANSLATORS: this is the PolicyKit modal dialog -->
|
|
<message>Authentication is required to downgrade the firmware on this machine</message>
|
|
<defaults>
|
|
<allow_any>auth_admin</allow_any>
|
|
<allow_inactive>no</allow_inactive>
|
|
<allow_active>auth_admin_keep</allow_active>
|
|
</defaults>
|
|
<annotate key="org.freedesktop.policykit.imply">org.freedesktop.fwupd.downgrade-internal-trusted</annotate>
|
|
</action>
|
|
|
|
<action id="org.freedesktop.fwupd.update-hotplug-trusted">
|
|
<description>Install signed device firmware</description>
|
|
<!-- TRANSLATORS: this is the PolicyKit modal dialog -->
|
|
<message>Authentication is required to update the firmware on a removable device</message>
|
|
<defaults>
|
|
<allow_any>auth_admin</allow_any>
|
|
<allow_inactive>no</allow_inactive>
|
|
<allow_active>yes</allow_active>
|
|
</defaults>
|
|
</action>
|
|
|
|
<action id="org.freedesktop.fwupd.update-hotplug">
|
|
<description>Install unsigned device firmware</description>
|
|
<!-- TRANSLATORS: this is the PolicyKit modal dialog -->
|
|
<message>Authentication is required to update the firmware on a removable device</message>
|
|
<defaults>
|
|
<allow_any>auth_admin</allow_any>
|
|
<allow_inactive>no</allow_inactive>
|
|
<allow_active>auth_admin_keep</allow_active>
|
|
</defaults>
|
|
<annotate key="org.freedesktop.policykit.imply">org.freedesktop.fwupd.update-hotplug-trusted</annotate>
|
|
</action>
|
|
|
|
<action id="org.freedesktop.fwupd.downgrade-hotplug-trusted">
|
|
<description>Install signed device firmware</description>
|
|
<!-- TRANSLATORS: this is the PolicyKit modal dialog -->
|
|
<message>Authentication is required to downgrade the firmware on a removable device</message>
|
|
<defaults>
|
|
<allow_any>auth_admin</allow_any>
|
|
<allow_inactive>no</allow_inactive>
|
|
<allow_active>auth_admin_keep</allow_active>
|
|
</defaults>
|
|
</action>
|
|
|
|
<action id="org.freedesktop.fwupd.downgrade-hotplug">
|
|
<description>Install unsigned device firmware</description>
|
|
<!-- TRANSLATORS: this is the PolicyKit modal dialog -->
|
|
<message>Authentication is required to downgrade the firmware on a removable device</message>
|
|
<defaults>
|
|
<allow_any>auth_admin</allow_any>
|
|
<allow_inactive>no</allow_inactive>
|
|
<allow_active>auth_admin_keep</allow_active>
|
|
</defaults>
|
|
<annotate key="org.freedesktop.policykit.imply">org.freedesktop.fwupd.downgrade-hotplug-trusted</annotate>
|
|
</action>
|
|
|
|
<action id="org.freedesktop.fwupd.device-unlock">
|
|
<description>Unlock the device to allow access</description>
|
|
<!-- TRANSLATORS: this is the PolicyKit modal dialog -->
|
|
<message>Authentication is required to unlock a device</message>
|
|
<defaults>
|
|
<allow_any>auth_admin</allow_any>
|
|
<allow_inactive>no</allow_inactive>
|
|
<allow_active>auth_admin_keep</allow_active>
|
|
</defaults>
|
|
</action>
|
|
|
|
<action id="org.freedesktop.fwupd.modify-config">
|
|
<description>Modify daemon configuration</description>
|
|
<!-- TRANSLATORS: this is the PolicyKit modal dialog -->
|
|
<message>Authentication is required to modify daemon configuration</message>
|
|
<defaults>
|
|
<allow_any>auth_admin</allow_any>
|
|
<allow_inactive>no</allow_inactive>
|
|
<allow_active>auth_admin_keep</allow_active>
|
|
</defaults>
|
|
<annotate key="org.freedesktop.policykit.imply">org.freedesktop.fwupd.modify-remote</annotate>
|
|
</action>
|
|
|
|
<action id="org.freedesktop.fwupd.device-activate">
|
|
<description>Activate the new firmware on the device</description>
|
|
<!-- TRANSLATORS: this is the PolicyKit modal dialog -->
|
|
<message>Authentication is required to switch to the new firmware version</message>
|
|
<defaults>
|
|
<allow_any>auth_admin</allow_any>
|
|
<allow_inactive>no</allow_inactive>
|
|
<allow_active>auth_admin_keep</allow_active>
|
|
</defaults>
|
|
</action>
|
|
|
|
<action id="org.freedesktop.fwupd.verify-update">
|
|
<description>Update the stored device verification information</description>
|
|
<!-- TRANSLATORS: this is the PolicyKit modal dialog -->
|
|
<message>Authentication is required to update the stored checksums for the device</message>
|
|
<defaults>
|
|
<allow_any>auth_admin</allow_any>
|
|
<allow_inactive>no</allow_inactive>
|
|
<allow_active>auth_admin_keep</allow_active>
|
|
</defaults>
|
|
</action>
|
|
|
|
<action id="org.freedesktop.fwupd.modify-remote">
|
|
<description>Modify a configured remote</description>
|
|
<!-- TRANSLATORS: this is the PolicyKit modal dialog -->
|
|
<message>Authentication is required to modify a configured remote used for firmware updates</message>
|
|
<defaults>
|
|
<allow_any>auth_admin</allow_any>
|
|
<allow_inactive>no</allow_inactive>
|
|
<allow_active>auth_admin_keep</allow_active>
|
|
</defaults>
|
|
</action>
|
|
|
|
<action id="org.freedesktop.fwupd.set-approved-firmware">
|
|
<description>Sets the list of approved firmware</description>
|
|
<!-- TRANSLATORS: this is the PolicyKit modal dialog -->
|
|
<message>Authentication is required to set the list of approved firmware</message>
|
|
<defaults>
|
|
<allow_any>auth_admin</allow_any>
|
|
<allow_inactive>no</allow_inactive>
|
|
<allow_active>auth_admin_keep</allow_active>
|
|
</defaults>
|
|
</action>
|
|
|
|
<action id="org.freedesktop.fwupd.self-sign">
|
|
<description>Sign data using the client certificate</description>
|
|
<!-- TRANSLATORS: this is the PolicyKit modal dialog -->
|
|
<message>Authentication is required to sign data using the client certificate</message>
|
|
<defaults>
|
|
<allow_any>auth_admin</allow_any>
|
|
<allow_inactive>no</allow_inactive>
|
|
<allow_active>auth_admin_keep</allow_active>
|
|
</defaults>
|
|
</action>
|
|
|
|
<action id="org.freedesktop.fwupd.get-bios-settings">
|
|
<description>Get BIOS settings</description>
|
|
<!-- TRANSLATORS: this is the PolicyKit modal dialog -->
|
|
<message>Authentication is required to read BIOS settings</message>
|
|
<defaults>
|
|
<allow_any>auth_admin</allow_any>
|
|
<allow_inactive>no</allow_inactive>
|
|
<allow_active>auth_admin_keep</allow_active>
|
|
</defaults>
|
|
</action>
|
|
|
|
<action id="org.freedesktop.fwupd.set-bios-settings">
|
|
<description>Set one or more BIOS settings</description>
|
|
<!-- TRANSLATORS: this is the PolicyKit modal dialog -->
|
|
<message>Authentication is required to modify BIOS settings</message>
|
|
<defaults>
|
|
<allow_any>auth_admin</allow_any>
|
|
<allow_inactive>no</allow_inactive>
|
|
<allow_active>auth_admin</allow_active>
|
|
</defaults>
|
|
<annotate key="org.freedesktop.policykit.imply">org.freedesktop.fwupd.get-bios-settings</annotate>
|
|
</action>
|
|
|
|
</policyconfig>
|