Authorization Types - Novell LINUX ENTERPRISE SERVER 11 - SECURITY Manual

GNOME
Modify system and mandatory values with GConf
Change the system time
PolicyKit
Read and change privileges for other users
Modify defaults
System
Wake on LAN
Mount or unmount fixed, hotplugable and encrypted devices
Enable or disable WLAN
Enable or disable Bluetooth
Device access
Stop and restart the system

9.2 Authorization Types

Every time a PolicyKit-enabled process carries out a privileged operation, PolicyKit is
asked whether this process is entitled to do so. The answer PolicyKit gives depends on
the policy defined for this process. It can be "yes", "no", or "authentication needed".
By default, a policy contains "implicit" privileges, which automatically apply to all
users. It is also possible to specify "explicit" privileges which apply to a specific user.
9.2.1 Implicit Privileges
Implicit privileges can be defined for any, active, and inactive sessions. An active session
is the one in which you are currently working. It becomes inactive when you switch to
another console for example. When setting implicit privileges to "no", no user is autho-
rized, whereas "yes" authorizes all users. However, in most cases it is useful to demand
authentication.
122 Security Guide