removes polkit rule for security reasons

Podman can be used to aquire full access to the root user so unrestricted access is dangerous.
Vanilla-OS · Aug 2, 2024 · 14ab1a8 · 14ab1a8
1 parent 0c9dc76
commit 14ab1a8
Showing 1 changed file with 1 addition and 3 deletions.
diff --git a/includes.container/usr/share/polkit-1/rules.d/org.vanillaos.vso.rules b/includes.container/usr/share/polkit-1/rules.d/org.vanillaos.vso.rules
@@ -2,9 +2,7 @@ polkit.addRule(function (action, subject) {
   if (
     (
       action.id == "org.vanillaos.vso.sys" ||
-      action.id == "org.vanillaos.vso.sys-upgrade" ||
-      action.id == "org.vanillaos.vso.distrobox" ||
-      action.id == "org.vanillaos.vso.podman"
+      action.id == "org.vanillaos.vso.sys-upgrade"
     ) &&
     subject.isInGroup("sudo")
   ) {