summaryrefslogtreecommitdiffstats
path: root/tv/3modules/org.freedesktop.machine1.host-shell.nix
diff options
context:
space:
mode:
authorlassulus <lassulus@lassul.us>2022-01-27 10:55:55 +0100
committerlassulus <lassulus@lassul.us>2022-01-27 10:55:55 +0100
commit83ec0fdb970c4aa0e29d221cb25aac2115e5abcd (patch)
tree7a4a8dce4c7ce6a291d3a8378676fd25752d783a /tv/3modules/org.freedesktop.machine1.host-shell.nix
parentba8a196faf2a28cd2a8defcdf3c2e7711281b9db (diff)
parentad6f0cd9014e13478a622786b9643970bae1c90a (diff)
Merge remote-tracking branch 'ni/master'
Diffstat (limited to 'tv/3modules/org.freedesktop.machine1.host-shell.nix')
-rw-r--r--tv/3modules/org.freedesktop.machine1.host-shell.nix28
1 files changed, 28 insertions, 0 deletions
diff --git a/tv/3modules/org.freedesktop.machine1.host-shell.nix b/tv/3modules/org.freedesktop.machine1.host-shell.nix
new file mode 100644
index 000000000..e1a5323d6
--- /dev/null
+++ b/tv/3modules/org.freedesktop.machine1.host-shell.nix
@@ -0,0 +1,28 @@
+{ config, ... }: let lib = import ../../lib; in {
+ options.org.freedesktop.machine1.host-shell.access = lib.mkOption {
+ default = {};
+ type =
+ lib.types.addCheck
+ (lib.types.attrsOf (lib.types.attrsOf lib.types.bool))
+ (x:
+ lib.all
+ lib.types.username.check
+ (lib.concatLists
+ (lib.mapAttrsToList
+ (name: value: [name] ++ lib.attrNames value)
+ x)));
+ };
+ config.security.polkit.extraConfig = let
+ cfg = config.org.freedesktop.machine1.host-shell;
+ enable = cfg.access != {};
+ in lib.optionalString enable /* js */ ''
+ polkit.addRule(function () {
+ var access = ${lib.toJSON cfg.access};
+ return function(action, subject) {
+ if (action.id === "org.freedesktop.machine1.host-shell"
+ && (access[subject.user]||{})[action.lookup("user")])
+ return polkit.Result.YES;
+ }
+ }());
+ '';
+}