[gnome-color-manager] Add a PolicyKit rule for the future system-wide profiles install

[Richard Hughes <rhughes src gnome org>]

commit 3b2c6b9c2a272d5e7ec7072f49f60f652e2ee993
Author: Richard Hughes <richard hughsie com>
Date:   Fri Jan 1 11:38:37 2010 +0000

    Add a PolicyKit rule for the future system-wide profiles install

 Makefile.am                      |    5 +++--
 configure.ac                     |   11 ++++++-----
 po/POTFILES.in                   |    3 ++-
 policy/.gitignore                |    8 ++++++++
 policy/Makefile.am               |   14 ++++++++++++++
 policy/org.gnome.color.policy.in |   37 +++++++++++++++++++++++++++++++++++++
 6 files changed, 70 insertions(+), 8 deletions(-)
---
diff --git a/Makefile.am b/Makefile.am
index efe8d4d..11feb0e 100644
--- a/Makefile.am
+++ b/Makefile.am
@@ -1,8 +1,9 @@
 SUBDIRS = 						\
-	po						\
+	data						\
 	help						\
 	man						\
-	data						\
+	po						\
+	policy						\
 	rules						\
 	src
 
diff --git a/configure.ac b/configure.ac
index 27cf894..42330bb 100644
--- a/configure.ac
+++ b/configure.ac
@@ -221,12 +221,7 @@ dnl - Makefiles, etc.
 dnl ---------------------------------------------------------------------------
 AC_OUTPUT([
 Makefile
-src/Makefile
-help/Makefile
-man/Makefile
-rules/Makefile
 data/Makefile
-data/tests/Makefile
 data/icons/Makefile
 data/icons/16x16/Makefile
 data/icons/22x22/Makefile
@@ -235,7 +230,13 @@ data/icons/32x32/Makefile
 data/icons/48x48/Makefile
 data/icons/64x64/Makefile
 data/icons/scalable/Makefile
+data/tests/Makefile
+help/Makefile
+man/Makefile
+policy/Makefile
 po/Makefile.in
+rules/Makefile
+src/Makefile
 ])
 
 dnl ==========================================================================
diff --git a/po/POTFILES.in b/po/POTFILES.in
index a2fc138..797a42e 100644
--- a/po/POTFILES.in
+++ b/po/POTFILES.in
@@ -2,9 +2,10 @@ data/gcm-apply.desktop.in
 data/gcm-import.desktop.in
 data/gcm-prefs.desktop.in
 data/gnome-color-manager.schemas.in
+policy/org.gnome.color.policy.in
 src/egg-debug.c
-src/gcm-calibrate.c
 src/gcm-calibrate-argyll.c
+src/gcm-calibrate.c
 src/gcm-calibrate-manual.c
 src/gcm-client.c
 src/gcm-dump-edid.c
diff --git a/policy/.gitignore b/policy/.gitignore
new file mode 100644
index 0000000..c04f1d1
--- /dev/null
+++ b/policy/.gitignore
@@ -0,0 +1,8 @@
+.deps
+.libs
+Makefile
+Makefile.in
+*.o
+*~
+*.policy
+
diff --git a/policy/Makefile.am b/policy/Makefile.am
new file mode 100644
index 0000000..0ccb5e7
--- /dev/null
+++ b/policy/Makefile.am
@@ -0,0 +1,14 @@
+polkit_policydir = $(datadir)/polkit-1/actions
+dist_polkit_policy_DATA =					\
+	org.gnome.color.policy
+
+# You will need a recent intltool or the patch from this bug
+# http://bugzilla.gnome.org/show_bug.cgi?id=462312
+ INTLTOOL_POLICY_RULE@
+
+EXTRA_DIST = org.gnome.color.policy.in
+DISTCLEANFILES = org.gnome.color.policy
+
+clean-local :
+	rm -f *~
+
diff --git a/policy/org.gnome.color.policy.in b/policy/org.gnome.color.policy.in
new file mode 100644
index 0000000..8392e71
--- /dev/null
+++ b/policy/org.gnome.color.policy.in
@@ -0,0 +1,37 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE policyconfig PUBLIC
+ "-//freedesktop//DTD PolicyKit Policy Configuration 1.0//EN"
+ "http://www.freedesktop.org/standards/PolicyKit/1.0/policyconfig.dtd";>
+<policyconfig>
+
+  <!--
+    Policy definitions for GNOME Color Manager system-wide actions.
+    Copyright (c) 2009 Richard Hughes <richard hughsie com>
+  -->
+
+  <vendor>GNOME Color Manager</vendor>
+  <vendor_url>http://www.gnome.org/projects/gnome-color-manager/</vendor_url>
+  <icon_name>application-vnd.iccprofile</icon_name>
+
+  <action id="org.gnome.color.install-system-wide">
+    <!-- SECURITY:
+          - Normal users require admin authentication to install files system
+            wide to apply color profiles for sessions that have not explicitly
+            chosen profiles to apply.
+          - This should not be set to 'yes' as unprivileged users could then
+            set a profile set to all-white or all-black and thus make the
+            other sessions unusable.
+     -->
+    <_description>Reload a device</_description>
+    <_message>Authentication is required to install the color profile for all users</_message>
+    <icon_name>application-vnd.iccprofile</icon_name>
+    <defaults>
+      <allow_any>no</allow_any>
+      <allow_inactive>no</allow_inactive>
+      <allow_active>auth_admin_keep</allow_active>
+    </defaults>
+    <annotate key="org.freedesktop.policykit.exec.path">/usr/sbin/gcm-install-system-wide</annotate>
+  </action>
+
+</policyconfig>
+