src/resolve/org.freedesktop.resolve1.policy

   1 <?xml version="1.0" encoding="UTF-8"?> <!--*-nxml-*-->
   2 <!DOCTYPE policyconfig PUBLIC "-//freedesktop//DTD PolicyKit Policy Configuration 1.0//EN"
   3         "https://www.freedesktop.org/standards/PolicyKit/1/policyconfig.dtd">
   4
   5 <!--
   6   SPDX-License-Identifier: LGPL-2.1-or-later
   7
   8   This file is part of systemd.
   9
  10   systemd is free software; you can redistribute it and/or modify it
  11   under the terms of the GNU Lesser General Public License as published by
  12   the Free Software Foundation; either version 2.1 of the License, or
  13   (at your option) any later version.
  14 -->
  15
  16 <policyconfig>
  17
  18         <vendor>The systemd Project</vendor>
  19         <vendor_url>https://systemd.io</vendor_url>
  20
  21         <action id="org.freedesktop.resolve1.register-service">
  22                 <description gettext-domain="systemd">Register a DNS-SD service</description>
  23                 <message gettext-domain="systemd">Authentication is required to register a DNS-SD service</message>
  24                 <defaults>
  25                         <allow_any>auth_admin</allow_any>
  26                         <allow_inactive>auth_admin</allow_inactive>
  27                         <allow_active>auth_admin_keep</allow_active>
  28                 </defaults>
  29                 <annotate key="org.freedesktop.policykit.owner">unix-user:systemd-resolve</annotate>
  30         </action>
  31
  32         <action id="org.freedesktop.resolve1.unregister-service">
  33                 <description gettext-domain="systemd">Unregister a DNS-SD service</description>
  34                 <message gettext-domain="systemd">Authentication is required to unregister a DNS-SD service</message>
  35                 <defaults>
  36                         <allow_any>auth_admin</allow_any>
  37                         <allow_inactive>auth_admin</allow_inactive>
  38                         <allow_active>auth_admin_keep</allow_active>
  39                 </defaults>
  40                 <annotate key="org.freedesktop.policykit.owner">unix-user:systemd-resolve</annotate>
  41         </action>
  42
  43         <action id="org.freedesktop.resolve1.set-dns-servers">
  44                 <description gettext-domain="systemd">Set DNS servers</description>
  45                 <message gettext-domain="systemd">Authentication is required to set DNS servers.</message>
  46                 <defaults>
  47                         <allow_any>auth_admin</allow_any>
  48                         <allow_inactive>auth_admin</allow_inactive>
  49                         <allow_active>auth_admin_keep</allow_active>
  50                 </defaults>
  51                 <annotate key="org.freedesktop.policykit.owner">unix-user:systemd-resolve</annotate>
  52         </action>
  53
  54         <action id="org.freedesktop.resolve1.set-domains">
  55                 <description gettext-domain="systemd">Set domains</description>
  56                 <message gettext-domain="systemd">Authentication is required to set domains.</message>
  57                 <defaults>
  58                         <allow_any>auth_admin</allow_any>
  59                         <allow_inactive>auth_admin</allow_inactive>
  60                         <allow_active>auth_admin_keep</allow_active>
  61                 </defaults>
  62                 <annotate key="org.freedesktop.policykit.owner">unix-user:systemd-resolve</annotate>
  63         </action>
  64
  65         <action id="org.freedesktop.resolve1.set-default-route">
  66                 <description gettext-domain="systemd">Set default route</description>
  67                 <message gettext-domain="systemd">Authentication is required to set default route.</message>
  68                 <defaults>
  69                         <allow_any>auth_admin</allow_any>
  70                         <allow_inactive>auth_admin</allow_inactive>
  71                         <allow_active>auth_admin_keep</allow_active>
  72                 </defaults>
  73                 <annotate key="org.freedesktop.policykit.owner">unix-user:systemd-resolve</annotate>
  74         </action>
  75
  76         <action id="org.freedesktop.resolve1.set-llmnr">
  77                 <description gettext-domain="systemd">Enable/disable LLMNR</description>
  78                 <message gettext-domain="systemd">Authentication is required to enable or disable LLMNR.</message>
  79                 <defaults>
  80                         <allow_any>auth_admin</allow_any>
  81                         <allow_inactive>auth_admin</allow_inactive>
  82                         <allow_active>auth_admin_keep</allow_active>
  83                 </defaults>
  84                 <annotate key="org.freedesktop.policykit.owner">unix-user:systemd-resolve</annotate>
  85         </action>
  86
  87         <action id="org.freedesktop.resolve1.set-mdns">
  88                 <description gettext-domain="systemd">Enable/disable multicast DNS</description>
  89                 <message gettext-domain="systemd">Authentication is required to enable or disable multicast DNS.</message>
  90                 <defaults>
  91                         <allow_any>auth_admin</allow_any>
  92                         <allow_inactive>auth_admin</allow_inactive>
  93                         <allow_active>auth_admin_keep</allow_active>
  94                 </defaults>
  95                 <annotate key="org.freedesktop.policykit.owner">unix-user:systemd-resolve</annotate>
  96         </action>
  97
  98         <action id="org.freedesktop.resolve1.set-dns-over-tls">
  99                 <description gettext-domain="systemd">Enable/disable DNS over TLS</description>
 100                 <message gettext-domain="systemd">Authentication is required to enable or disable DNS over TLS.</message>
 101                 <defaults>
 102                         <allow_any>auth_admin</allow_any>
 103                         <allow_inactive>auth_admin</allow_inactive>
 104                         <allow_active>auth_admin_keep</allow_active>
 105                 </defaults>
 106                 <annotate key="org.freedesktop.policykit.owner">unix-user:systemd-resolve</annotate>
 107         </action>
 108
 109         <action id="org.freedesktop.resolve1.set-dnssec">
 110                 <description gettext-domain="systemd">Enable/disable DNSSEC</description>
 111                 <message gettext-domain="systemd">Authentication is required to enable or disable DNSSEC.</message>
 112                 <defaults>
 113                         <allow_any>auth_admin</allow_any>
 114                         <allow_inactive>auth_admin</allow_inactive>
 115                         <allow_active>auth_admin_keep</allow_active>
 116                 </defaults>
 117                 <annotate key="org.freedesktop.policykit.owner">unix-user:systemd-resolve</annotate>
 118         </action>
 119
 120         <action id="org.freedesktop.resolve1.set-dnssec-negative-trust-anchors">
 121                 <description gettext-domain="systemd">Set DNSSEC Negative Trust Anchors</description>
 122                 <message gettext-domain="systemd">Authentication is required to set DNSSEC Negative Trust Anchors.</message>
 123                 <defaults>
 124                         <allow_any>auth_admin</allow_any>
 125                         <allow_inactive>auth_admin</allow_inactive>
 126                         <allow_active>auth_admin_keep</allow_active>
 127                 </defaults>
 128                 <annotate key="org.freedesktop.policykit.owner">unix-user:systemd-resolve</annotate>
 129         </action>
 130
 131         <action id="org.freedesktop.resolve1.revert">
 132                 <description gettext-domain="systemd">Revert name resolution settings</description>
 133                 <message gettext-domain="systemd">Authentication is required to reset name resolution settings.</message>
 134                 <defaults>
 135                         <allow_any>auth_admin</allow_any>
 136                         <allow_inactive>auth_admin</allow_inactive>
 137                         <allow_active>auth_admin_keep</allow_active>
 138                 </defaults>
 139                 <annotate key="org.freedesktop.policykit.owner">unix-user:systemd-resolve</annotate>
 140         </action>
 141
 142 </policyconfig>