SliTaz Repositories

     1.1 --- /dev/null	Thu Jan 01 00:00:00 1970 +0000
     1.2 +++ b/enlightenment-pam/stuff/etc/enlightenment/sysactions.conf	Wed Oct 16 21:56:55 2019 -0400
     1.3 @@ -0,0 +1,73 @@
     1.4 +# ENLIGHTENMENT SYSTEM ACTIONS CONFIGURATION
     1.5 +#
     1.6 +# This is a system configuration for allowing or denying certain users or
     1.7 +# groups to be able to do certain actions that involve system restricted
     1.8 +# actions such as halt, reboot, suspend, hibernate etc.
     1.9 +#
    1.10 +# This file is read in order from top to bottom - the first rule to MATCH
    1.11 +# will be used for a user or a group, and nothing after that is read.
    1.12 +#
    1.13 +# You must put all the ACTION definitons BEFORE user and group rule matches.
    1.14 +# Any action definitons after a rule match has been found will be ignored.
    1.15 +# This allows actions to be re-defined for different user groups, so matches
    1.16 +# so the command for an action can change for matches to the rules later on.
    1.17 +#
    1.18 +# Any user or group NOT matched by an allow or a deny will be ALLOWED to
    1.19 +# perform the action by default (system administrators should be aware of
    1.20 +# this and implement whatever policies they see fit). Generally speaking
    1.21 +# a user of a workstation, desktop or laptop is intended to have such abilities
    1.22 +# to perform these actions, thus the default of allow. For multi-user systems
    1.23 +# the system administrator is considerd capable enough to restrict what they
    1.24 +# see they need to.
    1.25 +#
    1.26 +# A WARNING to admins: do NOT allow access for users to this system remotely
    1.27 +# UNLESS you fully trust them or you have locked down permissions to halt/reboot
    1.28 +# suspend etc. here first. You have been warned.
    1.29 +#
    1.30 +# FORMAT:
    1.31 +#
    1.32 +# action:   halt      /sbin/shutdown -h now
    1.33 +# action:   reboot    /sbin/shutdown -r now
    1.34 +# action:   suspend   /etc/acpi/sleep.sh force
    1.35 +# action:   hibernate /etc/acpi/hibernate.sh force
    1.36 +#
    1.37 +# user:  username  allow: halt reboot suspend hibernate
    1.38 +# group: groupname deny:  *
    1.39 +# group: *         deny:  *
    1.40 +# user:  *         allow: suspend
    1.41 +# user:  billy     allow: halt reboot
    1.42 +# group: staff     deny:  halt suspend hibernate
    1.43 +#
    1.44 +# etc.
    1.45 +#
    1.46 +# user and group name can use glob matches (* == all for example) like the
    1.47 +# shell. as can action names allowed or denied.
    1.48 +
    1.49 +action:   halt      poweroff
    1.50 +action:   reboot    reboot
    1.51 +action:   suspend   /usr/sbin/pm-suspend
    1.52 +action:   hibernate /usr/sbin/pm-hibernate
    1.53 +
    1.54 +# root is allowed to do anything - but it needs to be here explicitly anyway
    1.55 +user:     root      allow: *
    1.56 +# members of operator, staff and admin groups should be able to do all
    1.57 +group:    operator  allow: *
    1.58 +group:    staff     allow: *
    1.59 +group:    admin     allow: *
    1.60 +group:    sys       allow: *
    1.61 +# common "user" groups for "console users" on desktops/laptops
    1.62 +group:    dialout   allow: *
    1.63 +group:    disk      allow: *
    1.64 +group:    adm       allow: *
    1.65 +group:    cdrom     allow: *
    1.66 +group:    floppy    allow: *
    1.67 +group:    audio     allow: *
    1.68 +group:    dip       allow: *
    1.69 +group:    plugdev   allow: *
    1.70 +# put in a list of other users and groups here that are allowed or denied etc.
    1.71 +# e.g.
    1.72 +# user:     myuser     allow:  *
    1.73 +# user:     another    allow:  suspend hibernate
    1.74 +# deny everyone else by default
    1.75 +user:     *         deny:  *
    1.76 +user:     tux       allow: *