core-agent-linux/passwordless-root/polkit-1-qubes-allow-all.rules

//allow any action, detailed reasoning in sudoers.d/qubes
polkit.addRule(function(action,subject) { if (subject.isInGroup("qubes")) return polkit.Result.YES; });
vm: move polkit configs from qubes-gui-vm package 2013-02-06 03:44:26 +01:00			`//allow any action, detailed reasoning in sudoers.d/qubes`
Only give the “qubes” group full Polkit access This is consistent with the rest of qubes-core-agent-passwordless-root, and helps prevent sandbox escapes by daemons with dbus access. 2020-12-24 21:46:08 +01:00			`polkit.addRule(function(action,subject) { if (subject.isInGroup("qubes")) return polkit.Result.YES; });`