[rpms/fedora-release] f45: rpmostree.rules: Remove "more privileged" operations

[rpms/fedora-release] f45: rpmostree.rules: Remove "more privileged" operations

[@ 2026-08-10 9:36 UTC (permalink / raw)]

            A new commit has been pushed.

            Repo   : rpms/fedora-release
            Branch : f45
            Commit : d0929de02c535227a332768294ee6445874ef97a
            Author : Timothée Ravier <tim@siosm.fr>
            Date   : 2024-07-08T18:23:41+02:00
            Stats  : +0/-5 in 1 file(s)
            URL    : https://src.fedoraproject.org/rpms/fedora-release/c/d0929de02c535227a332768294ee6445874ef97a?branch=f45

            Log:
            rpmostree.rules: Remove "more privileged" operations

Reduce access to the most privileged operations of rpm-ostree for
administrators to avoid mistakes.

This rule is only installed on desktop systems (Fedora Atomic Desktops)
and not servers (CoreOS, IoT).

See: https://fedoraproject.org/wiki/Changes/UnprivilegedUpdatesAtomicDesktops

---
diff --git a/org.projectatomic.rpmostree1.rules b/org.projectatomic.rpmostree1.rules
index 0895bf0..9c15de4 100644
--- a/org.projectatomic.rpmostree1.rules
+++ b/org.projectatomic.rpmostree1.rules
@@ -7,12 +7,7 @@ polkit.addRule(function(action, subject) {
     }
 
     if ((action.id == "org.projectatomic.rpmostree1.install-uninstall-packages" ||
-         action.id == "org.projectatomic.rpmostree1.install-local-packages" ||
-         action.id == "org.projectatomic.rpmostree1.override" ||
-         action.id == "org.projectatomic.rpmostree1.deploy" ||
-         action.id == "org.projectatomic.rpmostree1.rebase" ||
          action.id == "org.projectatomic.rpmostree1.rollback" ||
-         action.id == "org.projectatomic.rpmostree1.bootconfig" ||
          action.id == "org.projectatomic.rpmostree1.reload-daemon" ||
          action.id == "org.projectatomic.rpmostree1.cancel" ||
          action.id == "org.projectatomic.rpmostree1.cleanup" ||