Commit ce54d436 authored by Kat's avatar Kat
Browse files

Review lockdown-repartitioning.page

Use listings, code and cmd tags correctly. Touch up a few wording
issues.
parent 47631e38
......@@ -5,21 +5,26 @@
<info>
<link type="guide" xref="user-settings#lockdown"/>
<revision pkgversion="3.14" date="2014-11-25" status="draft"/>
<link type="seealso" xref="dconf-lockdown" />
<revision pkgversion="3.14" date="2014-12-10" status="review"/>
<credit type="author copyright">
<name>Jana Svarova</name>
<email its:translate="no">jana.svarova@gmail.com</email>
<years>2014</years>
</credit>
<credit type="copyright editor">
<name>Ekaterina Gerasimova</name>
<email its:translate="no">kittykat3756@gmail.com</email>
<years>2014</years>
</credit>
<include href="legal.xml" xmlns="http://www.w3.org/2001/XInclude"/>
<desc>Prevent users from changing disk partitions.</desc>
<desc>Prevent the user from changing disk partitions.</desc>
</info>
<title>Lock down repartitioning</title>
<title>Disable repartitioning</title>
<p><sys>polkit</sys> enables you to set permissions for individual
operations. For <sys>udisks2</sys>, the utility for disk management services,
......@@ -29,16 +34,16 @@
system administrator.</p>
<note style="tip">
<p>Remember that <sys>polkit</sys> configuration in <file>/etc</file>
overrides that shipped by packages in <file>/usr/share</file>.</p>
<p>The <sys>polkit</sys> configuration in <file>/etc</file> overrides that
shipped by packages in <file>/usr/share</file>.</p>
</note>
<steps>
<title>To prevent users from changing disks settings:</title>
<title>Disable repartitioning</title>
<item>
<p>Create a file with the same content as in
<file>/usr/share/polkit-1/actions/org.freedesktop.udisks2.policy</file>.</p>
<code>cp /usr/share/polkit-1/actions/org.freedesktop.udisks2.policy /etc/share/polkit-1/actions/org.freedesktop.udisks2.policy</code>
<file>/usr/share/polkit-1/actions/org.freedesktop.udisks2.policy</file>:
<cmd>cp /usr/share/polkit-1/actions/org.freedesktop.udisks2.policy /etc/share/polkit-1/actions/org.freedesktop.udisks2.policy</cmd></p>
<note style="important">
<p>Do not change the
<file>/usr/share/polkit-1/actions/org.freedesktop.udisks2.policy</file>
......@@ -50,7 +55,8 @@
<code>policyconfig</code> element and add the following lines to the
<file>/etc/polkit-1/actions/org.freedesktop.udisks2.policy</file>
file:</p>
<screen><![CDATA[
<listing>
<code><![CDATA[
<action id="org.freedesktop.udisks2.modify-device">
<description>Modify the disks settings</description>
<message>Authentication is required to modify the disks settings</message>
......@@ -60,7 +66,8 @@
<allow_active>yes</allow_active>
</defaults>
</action>
]]></screen>
]]></code>
</listing>
<p>Replace <code>no</code> by <code>auth_admin</code> if you want to
ensure only the root user is able to carry out the action.</p>
</item>
......@@ -69,8 +76,8 @@
</item>
</steps>
<p>When the user tries to change the disks settings, the following message is
presented:</p>
<code>Authentication is required to modify the disks settings</code>
<p>When the user tries to change the disk settings, the following message is
shown: <gui>Authentication is required to modify the disks
settings</gui>.</p>
</page>
Supports Markdown
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment