From 381d4625a39273179ee54f691a06416798a2e1fb Mon Sep 17 00:00:00 2001
From: nevaforget <>
Date: Wed, 15 Apr 2026 14:23:49 +0200
Subject: [PATCH] fix: add polkit rule to allow greeter user to reboot and
 shutdown

The greetd greeter session is inactive in logind, so polkit defaults
require admin authentication for power actions. This rule grants the
greeter user permission for reboot and power-off without authentication.
---
 .../etc/polkit-1/rules.d/50-moongreet-power.rules    | 12 ++++++++++++
 1 file changed, 12 insertions(+)
 create mode 100644 defaults/etc/polkit-1/rules.d/50-moongreet-power.rules

diff --git a/defaults/etc/polkit-1/rules.d/50-moongreet-power.rules b/defaults/etc/polkit-1/rules.d/50-moongreet-power.rules
new file mode 100644
index 0000000..edc276b
--- /dev/null
+++ b/defaults/etc/polkit-1/rules.d/50-moongreet-power.rules
@@ -0,0 +1,12 @@
+// ABOUTME: Allow the greeter user to reboot and power off without authentication.
+// ABOUTME: Required because greetd's greeter session is inactive in logind.
+
+polkit.addRule(function(action, subject) {
+    if (subject.user === "greeter" &&
+        (action.id === "org.freedesktop.login1.reboot" ||
+         action.id === "org.freedesktop.login1.reboot-multiple-sessions" ||
+         action.id === "org.freedesktop.login1.power-off" ||
+         action.id === "org.freedesktop.login1.power-off-multiple-sessions")) {
+        return polkit.Result.YES;
+    }
+});