systemd-logind is not honoring polickykit rules for suspend/reboot/shutdown
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
systemd (Ubuntu) |
Invalid
|
Undecided
|
Unassigned |
Bug Description
systemd-logind is not honoring policy-kit rules put in place to prevent users from suspending, hibernatoring, or shuting down machines. These rules worked in Precise.
moss:~# cat /etc/polkit-
[deny-them-
Identity=
Action=
ResultActive=no
moss:~# cat /etc/polkit-
[deny-them-suspend]
Identity=
Action=
ResultActive=no
moss:~# cat //etc/polkit-
[deny-them-
Identity=
Action=
ResultActive=no
These actions were for ConsoleKit. logind has its own rules, so you need to rewrite them to enumerate org.freedesktop .login1. suspend and org.freedesktop .login1. hibernate (see /usr/share/ polkit- 1/actions/ org.freedesktop .login1. policy) .
Don't deny *all* methods of logind to users, though; that'll break some stuff and forbid way more than you intend.