--- docs/man/polkit.xml.orig 2018-01-20 14:00:19 UTC +++ docs/man/polkit.xml @@ -104,12 +104,12 @@ System Context | | +------------------+ | ^ | | +--------------------------------------+ - | | /usr/share/polkit-1/actions/*.policy | + | | %%LOCALBASE%%/share/polkit-1/actions/*.policy | | +--------------------------------------+ | +--------------------------------------+ - | /etc/polkit-1/rules.d/*.rules | - | /usr/share/polkit-1/rules.d/*.rules | + | %%LOCALBASE%%/etc/polkit-1/rules.d/*.rules | + | %%LOCALBASE%%/share/polkit-1/rules.d/*.rules | +--------------------------------------+ ]]> @@ -217,7 +217,7 @@ System Context | | order to use polkit. Actions correspond to operations that clients can request the mechanism to carry out and are defined in XML files that the mechanism installs into the /usr/share/polkit-1/actions + class='directory'>%%LOCALBASE%%/share/polkit-1/actions directory. @@ -473,21 +473,21 @@ System Context | | polkitd reads .rules files from the - /etc/polkit-1/rules.d and - /usr/share/polkit-1/rules.d + %%LOCALBASE%%/etc/polkit-1/rules.d and + %%LOCALBASE%%/share/polkit-1/rules.d directories by sorting the files in lexical order based on the basename on each file (if there's a tie, files in - /etc + %%LOCALBASE%%/etc are processed before files in - /usr). + %%LOCALBASE%%/share). For example, for the following four files, the order is - /etc/polkit-1/rules.d/10-auth.rules - /usr/share/polkit-1/rules.d/10-auth.rules - /etc/polkit-1/rules.d/15-auth.rules - /usr/share/polkit-1/rules.d/20-auth.rules + %%LOCALBASE%%/etc/polkit-1/rules.d/10-auth.rules + %%LOCALBASE%%/share/polkit-1/rules.d/10-auth.rules + %%LOCALBASE%%/etc/polkit-1/rules.d/15-auth.rules + %%LOCALBASE%%/share/polkit-1/rules.d/20-auth.rules Both directories are monitored so if a rules file is changed, @@ -567,7 +567,7 @@ System Context | | called in the order they have been added until one of the functions returns a value. Hence, to add an authorization rule that is processed before other rules, put it in a file in - /etc/polkit-1/rules.d + %%LOCALBASE%%/etc/polkit-1/rules.d with a name that sorts before other rules files, for example 00-early-checks.rules. Each function should return a value from polkit.Result @@ -683,8 +683,8 @@ polkit.addRule(function(action, subject) { will produce the following when the user runs 'pkexec -u bateman bash -i' from a shell: @@ -916,7 +916,7 @@ polkit.addRule(function(action, subject) {