<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE policyconfig PUBLIC
 "-//freedesktop//DTD PolicyKit Policy Configuration 1.0//EN"
 "http://www.freedesktop.org/standards/PolicyKit/1/policyconfig.dtd">
<policyconfig>

  <vendor>apt-ostree</vendor>
  <vendor_url>https://github.com/apt-ostree/apt-ostree</vendor_url>

  <action id="org.aptostree.dev.install-packages">
    <description>Install packages via apt-ostree</description>
    <message>Authentication is required to install packages</message>
    <icon_name>system-software-install</icon_name>
    <defaults>
      <allow_any>auth_admin</allow_any>
      <allow_inactive>auth_admin</allow_inactive>
      <allow_active>auth_admin</allow_active>
    </defaults>
    <annotate key="org.freedesktop.policykit.exec.path">/usr/bin/apt-ostree</annotate>
  </action>

  <action id="org.aptostree.dev.remove-packages">
    <description>Remove packages via apt-ostree</description>
    <message>Authentication is required to remove packages</message>
    <icon_name>system-software-install</icon_name>
    <defaults>
      <allow_any>auth_admin</allow_any>
      <allow_inactive>auth_admin</allow_inactive>
      <allow_active>auth_admin</allow_active>
    </defaults>
    <annotate key="org.freedesktop.policykit.exec.path">/usr/bin/apt-ostree</annotate>
  </action>

  <action id="org.aptostree.dev.upgrade-system">
    <description>Upgrade system via apt-ostree</description>
    <message>Authentication is required to upgrade the system</message>
    <icon_name>system-software-update</icon_name>
    <defaults>
      <allow_any>auth_admin</allow_any>
      <allow_inactive>auth_admin</allow_inactive>
      <allow_active>auth_admin</allow_active>
    </defaults>
    <annotate key="org.freedesktop.policykit.exec.path">/usr/bin/apt-ostree</annotate>
  </action>

  <action id="org.aptostree.dev.rollback">
    <description>Rollback system via apt-ostree</description>
    <message>Authentication is required to rollback the system</message>
    <icon_name>system-software-update</icon_name>
    <defaults>
      <allow_any>auth_admin</allow_any>
      <allow_inactive>auth_admin</allow_inactive>
      <allow_active>auth_admin</allow_active>
    </defaults>
    <annotate key="org.freedesktop.policykit.exec.path">/usr/bin/apt-ostree</annotate>
  </action>

  <action id="org.aptostree.dev.modify-kernel-args">
    <description>Modify kernel arguments via apt-ostree</description>
    <message>Authentication is required to modify kernel arguments</message>
    <icon_name>system-settings</icon_name>
    <defaults>
      <allow_any>auth_admin</allow_any>
      <allow_inactive>auth_admin</allow_inactive>
      <allow_active>auth_admin</allow_active>
    </defaults>
    <annotate key="org.freedesktop.policykit.exec.path">/usr/bin/apt-ostree</annotate>
  </action>

  <action id="org.aptostree.dev.initramfs">
    <description>Manage initramfs via apt-ostree</description>
    <message>Authentication is required to manage initramfs</message>
    <icon_name>system-settings</icon_name>
    <defaults>
      <allow_any>auth_admin</allow_any>
      <allow_inactive>auth_admin</allow_inactive>
      <allow_active>auth_admin</allow_active>
    </defaults>
    <annotate key="org.freedesktop.policykit.exec.path">/usr/bin/apt-ostree</annotate>
  </action>

  <action id="org.aptostree.dev.rebase">
    <description>Rebase system via apt-ostree</description>
    <message>Authentication is required to rebase the system</message>
    <icon_name>system-software-update</icon_name>
    <defaults>
      <allow_any>auth_admin</allow_any>
      <allow_inactive>auth_admin</allow_inactive>
      <allow_active>auth_admin</allow_active>
    </defaults>
    <annotate key="org.freedesktop.policykit.exec.path">/usr/bin/apt-ostree</annotate>
  </action>

  <action id="org.aptostree.dev.reset">
    <description>Reset system via apt-ostree</description>
    <message>Authentication is required to reset the system</message>
    <icon_name>system-software-update</icon_name>
    <defaults>
      <allow_any>auth_admin</allow_any>
      <allow_inactive>auth_admin</allow_inactive>
      <allow_active>auth_admin</allow_active>
    </defaults>
    <annotate key="org.freedesktop.policykit.exec.path">/usr/bin/apt-ostree</annotate>
  </action>

</policyconfig> 