From fcac91b5405e01b607271f9cda6f0f6e3d3e678f Mon Sep 17 00:00:00 2001 From: nevaforget Date: Wed, 15 Apr 2026 14:23:49 +0200 Subject: [PATCH] fix: add polkit rule to allow greeter user to reboot and shutdown The greetd greeter session is inactive in logind, so polkit defaults require admin authentication for power actions. This rule grants the greeter user permission for reboot and power-off without authentication. --- .../etc/polkit-1/rules.d/50-moongreet-power.rules | 12 ++++++++++++ 1 file changed, 12 insertions(+) create mode 100644 defaults/etc/polkit-1/rules.d/50-moongreet-power.rules diff --git a/defaults/etc/polkit-1/rules.d/50-moongreet-power.rules b/defaults/etc/polkit-1/rules.d/50-moongreet-power.rules new file mode 100644 index 0000000..edc276b --- /dev/null +++ b/defaults/etc/polkit-1/rules.d/50-moongreet-power.rules @@ -0,0 +1,12 @@ +// ABOUTME: Allow the greeter user to reboot and power off without authentication. +// ABOUTME: Required because greetd's greeter session is inactive in logind. + +polkit.addRule(function(action, subject) { + if (subject.user === "greeter" && + (action.id === "org.freedesktop.login1.reboot" || + action.id === "org.freedesktop.login1.reboot-multiple-sessions" || + action.id === "org.freedesktop.login1.power-off" || + action.id === "org.freedesktop.login1.power-off-multiple-sessions")) { + return polkit.Result.YES; + } +});