From 62288d6c848af06e44b006313603370f0290b2a8 Mon Sep 17 00:00:00 2001
From: Matthias Clasen <mclasen@redhat.com>
Date: Mar 19 2018 18:11:20 +0000
Subject: Add polkit rules for Atomic Workstation


We want gnome-software to be able to check for updates
and update the OS without polkit dialogs.

Signed-off-by: Matthias Clasen <mclasen@redhat.com>

---

diff --git a/fedora-release.spec b/fedora-release.spec
index 4462127..9010a5c 100644
--- a/fedora-release.spec
+++ b/fedora-release.spec
@@ -9,7 +9,7 @@
 Summary:        Fedora release files
 Name:           fedora-release
 Version:        28
-Release:        0.3
+Release:        0.4
 License:        MIT
 Group:          System Environment/Base
 URL:            https://pagure.io/fedora-release
@@ -214,6 +214,8 @@ install -m 0644 80-workstation.preset $RPM_BUILD_ROOT%{_prefix}/lib/os.release.d
 # Override the list of enabled gnome-shell extensions for Workstation
 mkdir -p $RPM_BUILD_ROOT%{_datadir}/glib-2.0/schemas/
 install -m 0644 org.gnome.shell.gschema.override $RPM_BUILD_ROOT%{_datadir}/glib-2.0/schemas/
+mkdir -p $RPM_BUILD_ROOT%{_datadir}/polkit-1/rules.d/
+install -m 0644 org.projectatomic.rpmostree1.rules $RPM_BUILD_ROOT%{_datadir}/polkit-1/rules.d/
 
 # Copy the make_edition script to /usr/sbin
 mkdir -p $RPM_BUILD_ROOT/%{_prefix}/sbin/
@@ -340,11 +342,15 @@ glib-compile-schemas %{_datadir}/glib-2.0/schemas &> /dev/null || :
 %{_datadir}/glib-2.0/schemas/org.gnome.shell.gschema.override
 %ghost %{_prefix}/lib/systemd/system-preset/80-workstation.preset
 %attr(0644,root,root) /usr/lib/os.release.d/presets/80-workstation.preset
+%attr(0644,root,root) /usr/share/polkit-1/rules.d/org.projectatomic.rpmostree1.rules
 
 %files -n convert-to-edition
 /usr/sbin/convert-to-edition
 
 %changelog
+* Thu Feb 22 2018 Matthias Clasen <mclasen@redhat.com> - 28-0.4
+- Add polkit rules to let gnome-software update Atomic Workstation
+
 * Sat Feb 17 2018 Mohan Boddu <mboddu@redhat.com> - 28-0.3
 - Update for branching
 - Enable akmods.service in presets
diff --git a/org.projectatomic.rpmostree1.rules b/org.projectatomic.rpmostree1.rules
new file mode 100644
index 0000000..a775281
--- /dev/null
+++ b/org.projectatomic.rpmostree1.rules
@@ -0,0 +1,19 @@
+polkit.addRule(function(action, subject) {
+    if (action.id == "org.projectatomic.rpmostree1.install-uninstall-packages" ||
+        action.id == "org.projectatomic.rpmostree1.install-local-packages" ||
+        action.id == "org.projectatomic.rpmostree1.override" ||
+        action.id == "org.projectatomic.rpmostree1.deploy" ||
+        action.id == "org.projectatomic.rpmostree1.upgrade" ||
+        action.id == "org.projectatomic.rpmostree1.rebase" ||
+        action.id == "org.projectatomic.rpmostree1.rollback" ||
+        action.id == "org.projectatomic.rpmostree1.bootconfig" ||
+        action.id == "org.projectatomic.rpmostree1.reload-daemon" ||
+        action.id == "org.projectatomic.rpmostree1.cancel" ||
+        action.id == "org.projectatomic.rpmostree1.cleanup" ||
+        action.id == "org.projectatomic.rpmostree1.repo-refresh" ||
+        action.id == "org.projectatomic.rpmostree1.client-management") &&
+        subject.active == true && subject.local == true &&
+        subject.isInGroup("wheel")) {
+            return polkit.Result.YES;
+    }
+});