From 6ae5efe50ff29423e8ff4c522e8502f1b57050bb Mon Sep 17 00:00:00 2001
From: Nippy <nippy@Nippy-Mac-mini.local>
Date: Sun, 20 Sep 2026 18:31:47 +0200
Subject: new iso

---
 .../etc/polkit-1/rules.d/49-nopasswd_global.rules  | 24 ++++++++++++++++++----
 1 file changed, 20 insertions(+), 4 deletions(-)

(limited to 'releng/airootfs/etc/polkit-1/rules.d/49-nopasswd_global.rules')

diff --git a/releng/airootfs/etc/polkit-1/rules.d/49-nopasswd_global.rules b/releng/airootfs/etc/polkit-1/rules.d/49-nopasswd_global.rules
index cca8039..0e28a70 100644
--- a/releng/airootfs/etc/polkit-1/rules.d/49-nopasswd_global.rules
+++ b/releng/airootfs/etc/polkit-1/rules.d/49-nopasswd_global.rules
@@ -1,8 +1,24 @@
-/* Allow members of the wheel group to execute any actions
- * without password authentication, similar to "sudo NOPASSWD:"
+/* RaveOS: a live telepito wheel csoportja csak a telepito mukodeshez
+ * szukseges action-oket futtathatja jelszo nelkul. A korabbi globalis
+ * "minden action engedelyezve" (polkit.Result.YES) eltavolitva.
  */
 polkit.addRule(function(action, subject) {
-    if (subject.isInGroup("wheel")) {
-        return polkit.Result.YES;
+    if (!subject.isInGroup("wheel")) {
+        return polkit.Result.NOT_HANDLED;
     }
+
+    var allowedPrefixes = [
+        "org.freedesktop.udisks2.",
+        "org.freedesktop.NetworkManager.",
+        "org.freedesktop.systemd1.",
+        "org.freedesktop.login1."
+    ];
+
+    for (var i = 0; i < allowedPrefixes.length; i++) {
+        if (action.id.indexOf(allowedPrefixes[i]) === 0) {
+            return polkit.Result.YES;
+        }
+    }
+
+    return polkit.Result.NOT_HANDLED;
 });
-- 
cgit v1.3