1 files changed, 20 insertions, 4 deletions
diff --git a/releng/airootfs/etc/polkit-1/rules.d/49-nopasswd_global.rules b/releng/airootfs/etc/polkit-1/rules.d/49-nopasswd_global.rules
index cca8039..0e28a70 100644
--- a/releng/airootfs/etc/polkit-1/rules.d/49-nopasswd_global.rules
+++ b/releng/airootfs/etc/polkit-1/rules.d/49-nopasswd_global.rules
@@ -1,8 +1,24 @@
-/* Allow members of the wheel group to execute any actions
- * without password authentication, similar to "sudo NOPASSWD:"
+/* RaveOS: a live telepito wheel csoportja csak a telepito mukodeshez
+ * szukseges action-oket futtathatja jelszo nelkul. A korabbi globalis
+ * "minden action engedelyezve" (polkit.Result.YES) eltavolitva.
  */
 polkit.addRule(function(action, subject) {
-    if (subject.isInGroup("wheel")) {
-        return polkit.Result.YES;
+    if (!subject.isInGroup("wheel")) {
+        return polkit.Result.NOT_HANDLED;
     }
+
+    var allowedPrefixes = [
+        "org.freedesktop.udisks2.",
+        "org.freedesktop.NetworkManager.",
+        "org.freedesktop.systemd1.",
+        "org.freedesktop.login1."
+    ];
+
+    for (var i = 0; i < allowedPrefixes.length; i++) {
+        if (action.id.indexOf(allowedPrefixes[i]) === 0) {
+            return polkit.Result.YES;
+        }
+    }
+
+    return polkit.Result.NOT_HANDLED;
 });