add polkit rules and sysusers

Ultramarine-Linux · Nov 9, 2024 · 3cc736f · 3cc736f
1 parent 21678f9
commit 3cc736f
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 0 deletions.
diff --git a/data/polkit-1/rules.d/100-taidan.rules b/data/polkit-1/rules.d/100-taidan.rules
@@ -0,0 +1,6 @@
+polkit.addRule(function(action, subject) {
+    if (action.id == "org.freedesktop.policykit.exec" &&
+        subject.isInGroup("taidan")) {
+        return polkit.Result.YES;
+    }
+});
diff --git a/data/sysusers.d/taidan.conf b/data/sysusers.d/taidan.conf
@@ -0,0 +1,4 @@
+# Service account for Taidan OOBE/Firstboot setup
+# Should have access to root and be able to run commands as root
+# This account should be locked after setup is complete
+u taidan - "Taidan OOBE" /usr/lib/taidan /usr/sbin/nologin