Fimeg/RedFlag
Watch
1
0
Fork
You've already forked RedFlag
 0
Code Releases 1 Activity

projection: begin the exact-path public epoch

Browse source 
The public tree and its history contain only the listed paths. Earlier projection history remains preserved internally.

Source-Sha: 913fde029b935671833254797f0f20f1eb9fabba

Policy-Sha: 913fde029b935671833254797f0f20f1eb9fabba

Tree-Digest: 180ae530c1058a2a5c89837bdce2d323ae83e669e38590ca72e75b8d92b7262f
This commit is contained in:
Fimeg 2026-09-08 21:59:33 -04:00
commit 67e26be2d9
838 changed files with 157302 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

11
installer/linux/polkit/50-redflag-agent.rules Normal file
View file

@ -0,0 +1,11 @@
// RedFlag Agent — allow the service user to manage transient systemd units only.
// The agent's single sudo grant is a fixed `systemd-run ... redflag-helper`
// command shape; systemd-run needs the matching D-Bus permission, which polkit
// evaluates against the original caller. Scope is manage-transient-units, not
// manage-units: the agent cannot touch system services it did not create.
polkit.addRule(function(action, subject) {
if (action.id == "org.freedesktop.systemd1.manage-transient-units" &&
subject.user == "redflag-agent") {
return polkit.Result.YES;
}
});