MikeFaith/authforge
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat(packaging): polkit policy with 7 AuthForge actions

Browse Source
This commit is contained in:
michael
2026-04-26 20:42:00 -07:00
parent 8f35c88b54
commit 49def6e75c
1 changed files with 80 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

80
debian/io.dangerousthings.AuthForge.policy vendored Normal file
View File

@@ -0,0 +1,80 @@
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE policyconfig PUBLIC
"-//freedesktop//DTD PolicyKit Policy Configuration 1.0//EN"
"http://www.freedesktop.org/standards/PolicyKit/1/policyconfig.dtd">
<policyconfig>
<vendor>Dangerous Things</vendor>
<vendor_url>https://dangerousthings.com</vendor_url>
<action id="io.dangerousthings.AuthForge.enroll-own">
<description>Enroll a security key for your own account</description>
<message>Authentication is required to enroll a security key.</message>
<defaults>
<allow_any>auth_self_keep</allow_any>
<allow_inactive>auth_self_keep</allow_inactive>
<allow_active>auth_self_keep</allow_active>
</defaults>
</action>
<action id="io.dangerousthings.AuthForge.remove-own">
<description>Remove a security key from your own account</description>
<message>Authentication is required to remove a security key.</message>
<defaults>
<allow_any>auth_self_keep</allow_any>
<allow_inactive>auth_self_keep</allow_inactive>
<allow_active>auth_self_keep</allow_active>
</defaults>
</action>
<action id="io.dangerousthings.AuthForge.enroll-other">
<description>Enroll a security key for another user</description>
<message>Administrator authentication is required to enroll on behalf of another user.</message>
<defaults>
<allow_any>auth_admin_keep</allow_any>
<allow_inactive>auth_admin_keep</allow_inactive>
<allow_active>auth_admin_keep</allow_active>
</defaults>
</action>
<action id="io.dangerousthings.AuthForge.set-policy">
<description>Change AuthForge MFA policy</description>
<message>Administrator authentication is required to change MFA policy.</message>
<defaults>
<allow_any>auth_admin_keep</allow_any>
<allow_inactive>auth_admin_keep</allow_inactive>
<allow_active>auth_admin_keep</allow_active>
</defaults>
</action>
<action id="io.dangerousthings.AuthForge.set-pending">
<description>Set a first-login enrollment flag for a user</description>
<message>Administrator authentication is required to require enrollment for a user.</message>
<defaults>
<allow_any>auth_admin_keep</allow_any>
<allow_inactive>auth_admin_keep</allow_inactive>
<allow_active>auth_admin_keep</allow_active>
</defaults>
</action>
<action id="io.dangerousthings.AuthForge.clear-pending">
<description>Clear a user's first-login enrollment flag</description>
<message>Administrator authentication is required to clear a pending-enrollment flag.</message>
<defaults>
<allow_any>auth_admin_keep</allow_any>
<allow_inactive>auth_admin_keep</allow_inactive>
<allow_active>auth_admin_keep</allow_active>
</defaults>
</action>
<action id="io.dangerousthings.AuthForge.generate-recovery">
<description>Generate a one-time recovery code for a user</description>
<message>Administrator authentication is required to generate a recovery code.</message>
<defaults>
<allow_any>auth_admin_keep</allow_any>
<allow_inactive>auth_admin_keep</allow_inactive>
<allow_active>auth_admin_keep</allow_active>
</defaults>
</action>
</policyconfig>