Blame SOURCES/0001-data-Disable-network-configuration-on-login-screen.patch

9cc5e2
From cebcf2a4d29f01061dedf8714db2842b9582900c Mon Sep 17 00:00:00 2001
9cc5e2
From: =?UTF-8?q?Florian=20M=C3=BCllner?= <fmuellner@gnome.org>
9cc5e2
Date: Tue, 8 Jun 2021 20:45:00 +0200
9cc5e2
Subject: [PATCH 1/3] data: Disable network configuration on login screen
9cc5e2
9cc5e2
---
9cc5e2
 data/meson.build            | 10 ++++++++++
9cc5e2
 data/org.gnome.gdm.rules.in |  8 ++++++++
9cc5e2
 2 files changed, 18 insertions(+)
9cc5e2
 create mode 100644 data/org.gnome.gdm.rules.in
9cc5e2
9cc5e2
diff --git a/data/meson.build b/data/meson.build
9cc5e2
index 23e2d7f9f..cbd6a6a21 100644
9cc5e2
--- a/data/meson.build
9cc5e2
+++ b/data/meson.build
9cc5e2
@@ -131,60 +131,70 @@ pam_data_files_map = {
9cc5e2
   'arch': [
9cc5e2
     'gdm-autologin',
9cc5e2
     'gdm-launch-environment',
9cc5e2
     'gdm-fingerprint',
9cc5e2
     'gdm-smartcard',
9cc5e2
     'gdm-password',
9cc5e2
     'gdm-pin',
9cc5e2
   ],
9cc5e2
   'none': [],
9cc5e2
   # We should no longer have 'autodetect' at this point
9cc5e2
 }
9cc5e2
 
9cc5e2
 pam_data_files = pam_data_files_map[default_pam_config]
9cc5e2
 pam_prefix = (get_option('pam-prefix') != '')? get_option('pam-prefix') : get_option('sysconfdir')
9cc5e2
 foreach _pam_filename : pam_data_files
9cc5e2
   install_data('pam-@0@/@1@.pam'.format(default_pam_config, _pam_filename),
9cc5e2
     rename: _pam_filename,
9cc5e2
     install_dir: pam_prefix / 'pam.d',
9cc5e2
   )
9cc5e2
 endforeach
9cc5e2
 
9cc5e2
 gdm_rules = configure_file(
9cc5e2
   input: '61-gdm.rules.in',
9cc5e2
   output: '@BASENAME@',
9cc5e2
   configuration: {
9cc5e2
     'libexecdir': gdm_prefix / get_option('libexecdir'),
9cc5e2
   },
9cc5e2
   install_dir: udev_dir,
9cc5e2
 )
9cc5e2
 
9cc5e2
+# Polkit rules
9cc5e2
+polkit_rules = configure_file(
9cc5e2
+  input: 'org.gnome.gdm.rules.in',
9cc5e2
+  output: '@BASENAME@',
9cc5e2
+  configuration: {
9cc5e2
+    'GDM_USERNAME': get_option('user'),
9cc5e2
+  },
9cc5e2
+  install_dir: get_option('datadir') / 'polkit-1' / 'rules.d',
9cc5e2
+)
9cc5e2
+
9cc5e2
 # DBus service files
9cc5e2
 service_config = configuration_data()
9cc5e2
 service_config.set('sbindir', gdm_prefix / get_option('sbindir'))
9cc5e2
 service_config.set('GDM_INITIAL_VT', get_option('initial-vt'))
9cc5e2
 service_config.set('LANG_CONFIG_FILE', lang_config_file)
9cc5e2
 if plymouth_dep.found()
9cc5e2
   service_config.set('PLYMOUTH_QUIT_SERVICE', 'plymouth-quit.service')
9cc5e2
 else
9cc5e2
   service_config.set('PLYMOUTH_QUIT_SERVICE', '')
9cc5e2
 endif
9cc5e2
 
9cc5e2
 if get_option('systemdsystemunitdir') != ''
9cc5e2
   systemd_systemunitdir = get_option('systemdsystemunitdir')
9cc5e2
 else
9cc5e2
   systemd_systemunitdir = systemd_dep.get_pkgconfig_variable('systemdsystemunitdir')
9cc5e2
 endif
9cc5e2
 
9cc5e2
 if get_option('systemduserunitdir') != ''
9cc5e2
   systemd_userunitdir = get_option('systemduserunitdir')
9cc5e2
 else
9cc5e2
   systemd_userunitdir = systemd_dep.get_pkgconfig_variable('systemduserunitdir',
9cc5e2
                                                            define_variable: ['prefix', get_option('prefix')])
9cc5e2
 endif
9cc5e2
 
9cc5e2
 configure_file(
9cc5e2
   input: 'gdm.service.in',
9cc5e2
   output: '@BASENAME@',
9cc5e2
   configuration: service_config,
9cc5e2
   install_dir: systemd_systemunitdir,
9cc5e2
   format: 'cmake'
9cc5e2
diff --git a/data/org.gnome.gdm.rules.in b/data/org.gnome.gdm.rules.in
9cc5e2
new file mode 100644
9cc5e2
index 000000000..09544f11e
9cc5e2
--- /dev/null
9cc5e2
+++ b/data/org.gnome.gdm.rules.in
9cc5e2
@@ -0,0 +1,8 @@
9cc5e2
+polkit.addRule(function(action, subject) {
9cc5e2
+    if (action.id == "org.freedesktop.NetworkManager.network-control" &&
9cc5e2
+        subject.user == "@GDM_USERNAME@") {
9cc5e2
+            return polkit.Result.NO;
9cc5e2
+    }
9cc5e2
+
9cc5e2
+    return polkit.Result.NOT_HANDLED;
9cc5e2
+});
9cc5e2
-- 
9cc5e2
2.30.1
9cc5e2