wok-next view enlightenment/stuff/sysactions.conf @ rev 21727
created recipe for vbindiff
| author | Hans-G?nter Theisgen |
|---|---|
| date | Sat Nov 21 14:32:44 2020 +0100 (2020-11-21) |
| parents | 45718bdd7508 |
| children |
line source
1 # ENLIGHTENMENT SYSTEM ACTIONS CONFIGURATION
2 #
3 # This is a system configuration for allowing or denying certain users or
4 # groups to be able to do certain actions that involve system restricted
5 # actions such as halt, reboot, suspend, hibernate etc.
6 #
7 # This file is read in order from top to bottom - the first rule to MATCH
8 # will be used for a user or a group, and nothing after that is read.
9 #
10 # You must put all the ACTION definitons BEFORE user and group rule matches.
11 # Any action definitons after a rule match has been found will be ignored.
12 # This allows actions to be re-defined for different user groups, so matches
13 # so the command for an action can change for matches to the rules later on.
14 #
15 # Any user or group NOT matched by an allow or a deny will be ALLOWED to
16 # perform the action by default (system administrators should be aware of
17 # this and implement whatever policies they see fit). Generally speaking
18 # a user of a workstation, desktop or laptop is intended to have such abilities
19 # to perform these actions, thus the default of allow. For multi-user systems
20 # the system administrator is considerd capable enough to restrict what they
21 # see they need to.
22 #
23 # A WARNING to admins: do NOT allow access for users to this system remotely
24 # UNLESS you fully trust them or you have locked down permissions to halt/reboot
25 # suspend etc. here first. You have been warned.
26 #
27 # FORMAT:
28 #
29 # action: halt /sbin/shutdown -h now
30 # action: reboot /sbin/shutdown -r now
31 # action: suspend /etc/acpi/sleep.sh force
32 # action: hibernate /etc/acpi/hibernate.sh force
33 #
34 # user: username allow: halt reboot suspend hibernate
35 # group: groupname deny: *
36 # group: * deny: *
37 # user: * allow: suspend
38 # user: billy allow: halt reboot
39 # group: staff deny: halt suspend hibernate
40 #
41 # etc.
42 #
43 # user and group name can use glob matches (* == all for example) like the
44 # shell. as can action names allowed or denied.
46 action: halt poweroff
47 action: reboot reboot
48 action: suspend /usr/sbin/pm-suspend
49 action: hibernate /usr/sbin/pm-hibernate
51 # root is allowed to do anything - but it needs to be here explicitly anyway
52 user: root allow: *
53 # members of operator, staff and admin groups should be able to do all
54 group: operator allow: *
55 group: staff allow: *
56 group: admin allow: *
57 group: sys allow: *
58 # common "user" groups for "console users" on desktops/laptops
59 group: dialout allow: *
60 group: disk allow: *
61 group: adm allow: *
62 group: cdrom allow: *
63 group: floppy allow: *
64 group: audio allow: *
65 group: dip allow: *
66 group: plugdev allow: *
67 # put in a list of other users and groups here that are allowed or denied etc.
68 # e.g.
69 # user: myuser allow: *
70 # user: another allow: suspend hibernate
71 # deny everyone else by default
72 user: * deny: *
73 user: tux allow: *