Request permission to change file ownership
[accounts-sso:vitalyrepins-signon.git] / debian / signond.aegis
1 <aegis>
2   <provide>
3     <credential name="keychain-access" />
4   </provide>
5   <account>
6     <user name="signon" group="signon"/>
7   </account>
8   <request>
9     <credential name="UID::signon" />
10     <credential name="GID::signon" />
11     <for path="/usr/bin/signonpluginprocess" />
12   </request>
13   <request>
14     <credential name="UID::root" />
15     <credential name="GID::root" />
16     <credential name="CAP::setuid" />
17     <credential name="CAP::dac_override" />
18     <credential name="CAP::sys_module" />
19     <credential name="CAP::sys_admin" />
20     <credential name="CAP::chown" />
21     <credential name="CAP::fowner" />
22     <credential name="CAP::mknod" />
23     <credential name="CAP::ipc_lock" />
24     <for path="/usr/bin/signond" id="signond-id" />
25   </request>
26 </aegis>