Added users role to manage the playbook as root and remove admin privileges from deck

2026-10-13 12:49:13 +02:00
parent 80a79fcc99
commit d00d99ce45
18 changed files with 153 additions and 42 deletions
@@ -0,0 +1,17 @@
+// {{ ansible_managed }}
+
+// org.valve.holo.rules only grants these to wheel. Steam needs them to eject
+// and power off drives from Game Mode, where no polkit agent can prompt.
+polkit.addRule(function(action, subject) {
+    var permission = {
+        "org.freedesktop.udisks2.eject-media": polkit.Result.YES,
+        "org.freedesktop.udisks2.power-off-drive": polkit.Result.YES,
+        "org.freedesktop.udisks2.filesystem-unmount-others": polkit.Result.YES,
+        "org.freedesktop.udisks2.eject-media-other-seat": polkit.Result.YES,
+        "org.freedesktop.udisks2.power-off-drive-other-seat": polkit.Result.YES,
+    };
+
+    if (subject.user == "{{ users__desktop_user }}") {
+        return permission[action.id];
+    }
+});