aboutsummaryrefslogtreecommitdiffstats
path: root/roles/polkit
diff options
context:
space:
mode:
authorStonewall Jackson <stonewall@sacredheartsc.com>2023-02-04 01:23:43 -0500
committerStonewall Jackson <stonewall@sacredheartsc.com>2023-02-04 01:52:13 -0500
commit0261e875679f1bf63c8d689da7fc7e014597885d (patch)
tree3f19cd74a0c1070944f75437f30b098d6ef2ffcb /roles/polkit
downloadselfhosted-0261e875679f1bf63c8d689da7fc7e014597885d.tar.gz
selfhosted-0261e875679f1bf63c8d689da7fc7e014597885d.zip
initial commit
Diffstat (limited to 'roles/polkit')
-rw-r--r--roles/polkit/defaults/main.yml1
-rw-r--r--roles/polkit/tasks/main.yml4
-rw-r--r--roles/polkit/templates/etc/polkit-1/rules.d/40-default.rules.j23
3 files changed, 8 insertions, 0 deletions
diff --git a/roles/polkit/defaults/main.yml b/roles/polkit/defaults/main.yml
new file mode 100644
index 0000000..ad5d8e0
--- /dev/null
+++ b/roles/polkit/defaults/main.yml
@@ -0,0 +1 @@
+polkit_admin_group: wheel
diff --git a/roles/polkit/tasks/main.yml b/roles/polkit/tasks/main.yml
new file mode 100644
index 0000000..d9e74a0
--- /dev/null
+++ b/roles/polkit/tasks/main.yml
@@ -0,0 +1,4 @@
+- name: generate default polkit rules
+ template:
+ src: etc/polkit-1/rules.d/40-default.rules.j2
+ dest: /etc/polkit-1/rules.d/40-default.rules
diff --git a/roles/polkit/templates/etc/polkit-1/rules.d/40-default.rules.j2 b/roles/polkit/templates/etc/polkit-1/rules.d/40-default.rules.j2
new file mode 100644
index 0000000..489b7af
--- /dev/null
+++ b/roles/polkit/templates/etc/polkit-1/rules.d/40-default.rules.j2
@@ -0,0 +1,3 @@
+polkit.addAdminRule(function(action, subject) {
+ return ["unix-group:{{ polkit_admin_group }}"];
+});