8 files changed, 24 insertions, 56 deletions
diff --git a/releng/airootfs/etc/pacman.conf b/releng/airootfs/etc/pacman.conf
index 6d3a00f..6e07afe 100644
--- a/releng/airootfs/etc/pacman.conf
+++ b/releng/airootfs/etc/pacman.conf
@@ -39,7 +39,7 @@ Color
 #CheckSpace
 #VerbosePkgLists
 ILoveCandy
-ParallelDownloads = 5
+ParallelDownloads = 10
 #DownloadUser = alpm
 #DisableSandbox
 
diff --git a/releng/airootfs/etc/polkit-1/rules.d/49-nopasswd_global.rules b/releng/airootfs/etc/polkit-1/rules.d/49-nopasswd_global.rules
index cca8039..0e28a70 100644
--- a/releng/airootfs/etc/polkit-1/rules.d/49-nopasswd_global.rules
+++ b/releng/airootfs/etc/polkit-1/rules.d/49-nopasswd_global.rules
@@ -1,8 +1,24 @@
-/* Allow members of the wheel group to execute any actions
- * without password authentication, similar to "sudo NOPASSWD:"
+/* RaveOS: a live telepito wheel csoportja csak a telepito mukodeshez
+ * szukseges action-oket futtathatja jelszo nelkul. A korabbi globalis
+ * "minden action engedelyezve" (polkit.Result.YES) eltavolitva.
  */
 polkit.addRule(function(action, subject) {
-    if (subject.isInGroup("wheel")) {
-        return polkit.Result.YES;
+    if (!subject.isInGroup("wheel")) {
+        return polkit.Result.NOT_HANDLED;
     }
+
+    var allowedPrefixes = [
+        "org.freedesktop.udisks2.",
+        "org.freedesktop.NetworkManager.",
+        "org.freedesktop.systemd1.",
+        "org.freedesktop.login1."
+    ];
+
+    for (var i = 0; i < allowedPrefixes.length; i++) {
+        if (action.id.indexOf(allowedPrefixes[i]) === 0) {
+            return polkit.Result.YES;
+        }
+    }
+
+    return polkit.Result.NOT_HANDLED;
 });
diff --git a/releng/airootfs/etc/shadow b/releng/airootfs/etc/shadow
index 824230b..4d87c35 100644
--- a/releng/airootfs/etc/shadow
+++ b/releng/airootfs/etc/shadow
@@ -1,2 +1,2 @@
-root::14871::::::
+root:!:14871::::::
 raveos:$6$jcfVB0VnKJYxHo7t$j/U9j8Civmx0O9f/mb1.nzw.BZLISLEKS.QwgOXNKWGpkLVisvP5Zfs4lcuzXglZBUAxj9oknnPBiCZOIgd25.:14871::::::
diff --git a/releng/airootfs/etc/ssh/sshd_config.d/10-archiso.conf b/releng/airootfs/etc/ssh/sshd_config.d/10-archiso.conf
deleted file mode 100644
index 6ea7b41..0000000
--- a/releng/airootfs/etc/ssh/sshd_config.d/10-archiso.conf
+++ /dev/null
@@ -1,3 +0,0 @@
-# Allow root login using password authentication
-PasswordAuthentication yes
-PermitRootLogin yes
diff --git a/releng/airootfs/etc/systemd/system/multi-user.target.wants/sshd.service b/releng/airootfs/etc/systemd/system/multi-user.target.wants/sshd.service
deleted file mode 120000
index d21ebd9..0000000
--- a/releng/airootfs/etc/systemd/system/multi-user.target.wants/sshd.service
+++ /dev/null
@@ -1 +0,0 @@
-/usr/lib/systemd/system/sshd.service
-\ No newline at end of file
diff --git a/releng/airootfs/root/.automated_script.sh b/releng/airootfs/root/.automated_script.sh
deleted file mode 100755
index f7f3ced..0000000
--- a/releng/airootfs/root/.automated_script.sh
+++ /dev/null
@@ -1,44 +0,0 @@
-#!/usr/bin/env bash
-
-script_cmdline() {
-    local param
-    for param in $(</proc/cmdline); do
-        case "${param}" in
-            script=*)
-                echo "${param#*=}"
-                return 0
-                ;;
-        esac
-    done
-}
-
-automated_script() {
-    local script rt
-    script="$(script_cmdline)"
-    if [[ -n "${script}" && ! -x /tmp/startup_script ]]; then
-        if [[ "${script}" =~ ^((http|https|ftp|tftp)://) ]]; then
-            # there's no synchronization for network availability before executing this script
-            printf '%s: waiting for network-online.target\n' "$0"
-            until systemctl --quiet is-active network-online.target; do
-                sleep 1
-            done
-            printf '%s: downloading %s\n' "$0" "${script}"
-            curl "${script}" --location --retry-connrefused --retry 10 --fail -s -o /tmp/startup_script
-            rt=$?
-        else
-            cp "${script}" /tmp/startup_script
-            rt=$?
-        fi
-        if [[ ${rt} -eq 0 ]]; then
-            chmod +x /tmp/startup_script
-            printf '%s: executing automated script\n' "$0"
-            # note that script is executed when other services (like pacman-init) may be still in progress, please
-            # synchronize to "systemctl is-system-running --wait" when your script depends on other services
-            /tmp/startup_script
-        fi
-    fi
-}
-
-if [[ $(tty) == "/dev/tty1" ]]; then
-    automated_script
-fi
diff --git a/releng/packages.x86_64 b/releng/packages.x86_64
index 17371c4..1bac919 100644
--- a/releng/packages.x86_64
+++ b/releng/packages.x86_64
@@ -7,6 +7,7 @@ dkms
 linux-headers
 btrfs-progs
 cryptsetup
+ckbcomp
 dhcpcd
 diffutils
 dosfstools
@@ -40,7 +41,6 @@ mkinitcpio-archiso
 mtools
 nano
 ntfs-3g
-openssh
 parted
 refind
 reflector
diff --git a/releng/pacman.conf b/releng/pacman.conf
index 4fbacea..56babca 100644
--- a/releng/pacman.conf
+++ b/releng/pacman.conf
@@ -22,7 +22,7 @@ HoldPkg     = pacman glibc
 Architecture = auto
 
 # Pacman won't upgrade packages listed in IgnorePkg and members of IgnoreGroup
-#IgnorePkg = gnome-session gnome-console gedit gnome-disk-utility gnome-system-monitor eog gnome-calculator baobab gnome-control-center gnome-tweaks gnome-browser-connector gnome-settings-daemon nautilus gnome-shell-extensions mutter
+IgnorePkg = gnome-session gnome-console gedit gnome-disk-utility gnome-system-monitor eog gnome-calculator baobab gnome-control-center gnome-tweaks gnome-browser-connector gnome-settings-daemon nautilus gnome-shell-extensions mutter
 #IgnoreGroup =
 
 #NoUpgrade   =