From: Mirko Vogt <mirko@openwrt.org>
Date: Sun, 7 Jun 2009 13:52:24 +0000 (+0000)
Subject: adjust shutdown- and reboot-calls of e17 (/sbin/shutdown is not available in busybox)
X-Git-Url: http://git.openwrt.org/source?a=commitdiff_plain;h=3e8306b70943819558f57c40fccb4749b3266b59;p=openwrt%2Fsvn-archive%2Ffeeds.git

adjust shutdown- and reboot-calls of e17 (/sbin/shutdown is not available in busybox)

SVN-Revision: 16370
---

diff --git a/efl/enlightenment/Makefile b/efl/enlightenment/Makefile
index ff6994c..ccc93bc 100644
--- a/efl/enlightenment/Makefile
+++ b/efl/enlightenment/Makefile
@@ -110,6 +110,7 @@ define Package/enlightenment/install
 	$(CP) $(PKG_INSTALL_DIR)/usr/bin/* $(1)/usr/bin/
 	$(CP) $(PKG_INSTALL_DIR)/usr/share/* $(1)/usr/share/
 	$(CP) $(PKG_INSTALL_DIR)/etc/* $(1)/etc/
+	$(CP) ./files/sysactions.conf $(1)/etc/enlightenment/
 	$(foreach c, $(PROFILES), \
 		$(if $(CONFIG_E17_$(c)), \
 			$(INSTALL_DATA) ./files/uci-defaults/x11_$(c) $(1)/etc/uci-defaults/
diff --git a/efl/enlightenment/files/sysactions.conf b/efl/enlightenment/files/sysactions.conf
new file mode 100644
index 0000000..67f2bac
--- /dev/null
+++ b/efl/enlightenment/files/sysactions.conf
@@ -0,0 +1,75 @@
+# ENLIGHTENMENT SYSTEM ACTIONS CONFIGURATION
+#
+# This is a system configuration for allowing or denying certain users or
+# groups to be able to do certain actions that involve system restricted
+# actions such as halt, reboot, suspend, hibernate etc.
+# 
+# This file is read in order from top to bottom - the first rule to MATCH
+# will be used for a user or a group, and nothing after that is read.
+#
+# You must put all the ACTION definitons BEFORE user and group rule matches.
+# Any action definitons after a rule match has been found will be ignored.
+# This allows actions to be re-defined for different user groups, so matches
+# so the command for an action can change for matches to the rules later on.
+# 
+# Any user or group NOT matched by an allow or a deny will be ALLOWED to
+# perform the action by default (system administrators should be aware of
+# this and implement whatever policies they see fit). Generally speaking
+# a user of a workstation, desktop or laptop is intended to have such abilities
+# to perform these actions, thus the default of allow. For multi-user systems
+# the system administrator is considerd capable enough to restrict what they
+# see they need to.
+# 
+# A WARNING to admins: do NOT allow access for users to this system remotely
+# UNLESS you fully trust them or you have locked down permissions to halt/reboot
+# suspend etc. here first. You have been warned.
+#
+# FORMAT:
+#
+# action:   halt      /sbin/shutdown -h now
+# action:   reboot    /sbin/shutdown -r now
+# action:   suspend   /etc/acpi/sleep.sh force
+# action:   hibernate /etc/acpi/hibernate.sh force
+#
+# user:  username  allow: halt reboot suspend hibernate
+# group: groupname deny:  *
+# group: *         deny:  *
+# user:  *         allow: suspend
+# user:  billy     allow: halt reboot
+# group: staff     deny:  halt suspend hibernate
+#
+# etc.
+#
+# user and group name can use glob matches (* == all for example) like the
+# shell. as can action names allowed or denied. 
+
+action:   halt      poweroff
+action:   reboot    reboot
+action:   suspend   /etc/acpi/sleep.sh force
+action:   hibernate /etc/acpi/hibernate.sh force
+
+# on FreeBSD use this instead of the above.
+#action suspend  /usr/sbin/zzz 
+
+# root is allowed to do anything - but it needs to be here explicitly anyway
+user:     root      allow: *
+# members of operator, staff and admin groups should be able to do all
+group:    operator  allow: *
+group:    staff     allow: *
+group:    admin     allow: *
+group:    sys       allow: *
+# common "user" groups for "console users" on desktops/laptops
+group:    dialout   allow: *
+group:    disk      allow: *
+group:    adm       allow: *
+group:    cdrom     allow: *
+group:    floppy    allow: *
+group:    audio     allow: *
+group:    dip       allow: *
+group:    plugdev   allow: *
+# put in a list of other users and groups here that are allowed or denied etc.
+# e.g.
+# user:     myuser     allow:  *
+# user:     another    allow:  suspend hibernate
+# deny everyone else by default
+user:     *         deny:  *