Novell LINUX ENTERPRISE DESKTOP 11 - SECURITY GUIDE 17-03-2009 Manual page 101

match
Specify an action or a user. match knows two attributes, user and action, but
only a single attribute is allowed. Use nested match statements to combine at-
tributes. POSIX Extended Regular Expressions are allowed as attribute values.
user=USER
Specify one or more login names. Separate multiple names by the "|" symbol.
action=policy
Specify a policy by it's unique identifier. To get a list of all available policy
identifiers use the command polkit-action.
return
Specify the answer PolicyKit will return. Takes a single attribute, result=value
with one of the values listed under
Implicit Privileges"
define_admin_auth
Specify users or groups allowed to authorize with their own password where nor-
mally the root password would be required. Takes the attributes user=USER
or group=GROUP, but only one may be used at a time. Multiple attribute values
must be separated by "|", Extended POSIX Regular Expressions are not supported.
Applies to all policies when used at the top level, or to specific policies when used
within <match> statements.
Section "Modifying Configuration Files for
(page 87).
PolicyKit 89