File sysactions.conf-oS12.2 of Package enlightenment

# ENLIGHTENMENT SYSTEM ACTIONS CONFIGURATION
#
# This is a system configuration for allowing or denying certain users or
# groups to be able to do certain actions that involve system restricted
# actions such as halt, reboot, suspend, hibernate etc.
# 
# This file is read in order from top to bottom - the first rule to MATCH
# will be used for a user or a group, and nothing after that is read.
#
# You must put all the ACTION definitons BEFORE user and group rule matches.
# Any action definitons after a rule match has been found will be ignored.
# This allows actions to be re-defined for different user groups, so matches
# so the command for an action can change for matches to the rules later on.
# 
# Any user or group NOT matched by an allow or a deny will be ALLOWED to
# perform the action by default (system administrators should be aware of
# this and implement whatever policies they see fit). Generally speaking
# a user of a workstation, desktop or laptop is intended to have such abilities
# to perform these actions, thus the default of allow. For multi-user systems
# the system administrator is considered capable enough to restrict what they
# see they need to.
# 
# A WARNING to admins: do NOT allow access for users to this system remotely
# UNLESS you fully trust them or you have locked down permissions to halt/reboot
# suspend etc. here first. You have been warned.
#
# FORMAT:
#
# action:   halt           /sbin/shutdown -h now
# action:   reboot         /sbin/shutdown -r now
# action:   suspend        /etc/acpi/sleep.sh force
# action:   hibernate      /etc/acpi/hibernate.sh force
# action:   /bin/mount     /bin/mount
# action:   /bin/umount    /bin/umount
# action:   /usr/bin/eject /usr/bin/eject
# 
# user:  username  allow: halt reboot suspend hibernate
# group: groupname deny:  *
# group: *         deny:  *
# user:  *         allow: suspend
# user:  billy     allow: halt reboot
# group: staff     deny:  halt suspend hibernate
#
# etc.
#
# user and group name can use glob matches (* == all for example) like the
# shell. as can action names allowed or denied. 

action:   halt         dbus-send --print-reply=literal --system --dest=org.freedesktop.ConsoleKit /org/freedesktop/ConsoleKit/Manager org.freedesktop.ConsoleKit.Manager.Stop
action:   reboot       dbus-send --print-reply=literal --system --dest=org.freedesktop.ConsoleKit /org/freedesktop/ConsoleKit/Manager org.freedesktop.ConsoleKit.Manager.Restart
action:   suspend      dbus-send --print-reply=literal --system --dest=org.freedesktop.UPower /org/freedesktop/UPower org.freedesktop.UPower.Suspend
action:   hibernate    dbus-send --print-reply=literal --system --dest=org.freedesktop.UPower /org/freedesktop/UPower org.freedesktop.UPower.Hibernate

# We have E17 built with eeze support implementing full HAL/UDisks support so
# there is no need for this actions:
#
# action:   /bin/mount     /bin/mount
# action:   /bin/umount    /bin/umount
# action:   /usr/bin/eject /usr/bin/eject

# for openSUSE 12.2+ allow everyone everything as authorization doesn't rely on
# binary with SUID bit set
user:     *         allow:  *
openSUSE Build Service is sponsored by