move conservation mode scripts to pkexec she-bang, allowing all users…

… to run them

config/files/usr/bin/conservationmodeoff

@@ -1,2 +1,2 @@
-#!/usr/bin/env bash
+#!/usr/bin/pkexec /usr/bin/env bash
 echo -n "0" | tee /sys/bus/platform/drivers/ideapad_acpi/VPC2004:00/conservation_mode

config/files/usr/bin/conservationmodeon

@@ -1,2 +1,2 @@
-#!/usr/bin/env bash
+#!/usr/bin/pkexec /usr/bin/env bash
 echo -n "1" | tee /sys/bus/platform/drivers/ideapad_acpi/VPC2004:00/conservation_mode

config/files/usr/bin/conservationmodestatus

@@ -1,2 +1,2 @@
-#!/usr/bin/env bash
+#!/usr/bin/pkexec /usr/bin/env bash
 cat /sys/bus/platform/drivers/ideapad_acpi/VPC2004:00/conservation_mode

config/files/usr/etc/polkit-1/rules.d/allowed_all_users.rules

@@ -10,3 +10,4 @@ polkit.addRule(function(action, subject) {
         return polkit.Result.YES;
     }
 });
+

config/files/usr/etc/polkit-1/rules.d/conservationmode.rules

@@ -0,0 +1,17 @@
+/* Allow members of the wheel group to execute the defined actions 
+ * without password authentication, similar to "sudo NOPASSWD:"
+ */
+polkit.addRule(function(action, subject) {
+    if (
+      (action.id == "org.projectatomic.rpmostree1.upgrade") &&
+      (
+        action.lookup("program") == "/usr/bin/conservationmodeon" ||
+        action.lookup("program") == "/usr/bin/conservationmodeoff" ||
+        action.lookup("program") == "/usr/bin/conservationmodestatus"
+      )
+    )
+    {
+        return polkit.Result.YES;
+    }
+});
+