5 files changed, 55 insertions, 0 deletions
diff --git a/.b/etc/polkit-1/rules.d/50-default.rules b/.b/etc/polkit-1/rules.d/50-default.rules
new file mode 100644
index 0000000..1c476ea
--- /dev/null
+++ b/.b/etc/polkit-1/rules.d/50-default.rules
@@ -0,0 +1,12 @@
+/* -*- mode: js; js-indent-level: 4; indent-tabs-mode: nil -*- */
+
+// DO NOT EDIT THIS FILE, it will be overwritten on update
+//
+// Default rules for polkit
+//
+// See the polkit(8) man page for more information
+// about configuring polkit.
+
+polkit.addAdminRule(function(action, subject) {
+    return ["unix-user:0"];
+});
diff --git a/.b/etc/polkit-1/rules.d/50-udisks.rules b/.b/etc/polkit-1/rules.d/50-udisks.rules
new file mode 100644
index 0000000..35b5f11
--- /dev/null
+++ b/.b/etc/polkit-1/rules.d/50-udisks.rules
@@ -0,0 +1,25 @@
+polkit.addRule(function(action, subject) {
+  var YES = polkit.Result.YES;
+  // NOTE: there must be a comma at the end of each line except for the last:
+  var permission = {
+    // required for udisks1:
+    "org.freedesktop.udisks.filesystem-mount": YES,
+    "org.freedesktop.udisks.luks-unlock": YES,
+    "org.freedesktop.udisks.drive-eject": YES,
+    "org.freedesktop.udisks.drive-detach": YES,
+    // required for udisks2:
+    "org.freedesktop.udisks2.filesystem-mount": YES,
+    "org.freedesktop.udisks2.encrypted-unlock": YES,
+    "org.freedesktop.udisks2.eject-media": YES,
+    "org.freedesktop.udisks2.power-off-drive": YES,
+    // required for udisks2 (e.g. systemd):
+    "org.freedesktop.udisks2.filesystem-mount-other-seat": YES,
+    "org.freedesktop.udisks2.filesystem-unmount-others": YES,
+    "org.freedesktop.udisks2.encrypted-unlock-other-seat": YES,
+    "org.freedesktop.udisks2.eject-media-other-seat": YES,
+    "org.freedesktop.udisks2.power-off-drive-other-seat": YES
+  };
+  if (subject.isInGroup("plugdev")) {
+    return permission[action.id];
+  }
+});
diff --git a/.b/etc/polkit-1/rules.d/88-poweroff.rules b/.b/etc/polkit-1/rules.d/88-poweroff.rules
new file mode 100644
index 0000000..c95a623
--- /dev/null
+++ b/.b/etc/polkit-1/rules.d/88-poweroff.rules
@@ -0,0 +1,6 @@
+polkit.addRule(function(action, subject) {
+    if (action.id == "org.freedesktop.login1.poweroff" &&
+        subject.isInGroup("power")) {
+        return polkit.Result.YES;
+    }
+});
diff --git a/.b/etc/polkit-1/rules.d/88-reboot.rules b/.b/etc/polkit-1/rules.d/88-reboot.rules
new file mode 100644
index 0000000..1ad1b3f
--- /dev/null
+++ b/.b/etc/polkit-1/rules.d/88-reboot.rules
@@ -0,0 +1,6 @@
+polkit.addRule(function(action, subject) {
+    if (action.id == "org.freedesktop.login1.reboot" &&
+        subject.isInGroup("power")) {
+        return polkit.Result.YES;
+    }
+});
diff --git a/.b/etc/polkit-1/rules.d/88-suspend.rules b/.b/etc/polkit-1/rules.d/88-suspend.rules
new file mode 100644
index 0000000..d1095b9
--- /dev/null
+++ b/.b/etc/polkit-1/rules.d/88-suspend.rules
@@ -0,0 +1,6 @@
+polkit.addRule(function(action, subject) {
+    if (action.id == "org.freedesktop.login1.suspend" &&
+        subject.isInGroup("power")) {
+        return polkit.Result.YES;
+    }
+});