Merge lp:~achiang/ubuntu/quantal/casper/bug-855556 into lp:ubuntu/quantal/casper

[Alex Chiang]

Grant admin polkit privileges to lightdm user (LP: #855556)

  During a live session, the 'ubuntu' user is logged in on every VT. However,
  we have:

  /usr/share/polkit-1/actions/org.freedesktop.consolekit.policy

        org.freedesktop.consolekit.system.restart-multiple-users
                <allow_active>auth_admin_keep</allow_active>
        org.freedesktop.consolekit.system.stop-multiple-users
                <allow_active>auth_admin_keep</allow_active>

  Thus, the shutdown and restart items from the Unity greeter's session
  indicator are inhibited.

  Those items should work, and we can do so by granting admin privileges to
  lightdm / unity-greeter, which allows restart and shutdown from the greeter
  screen.

  We already grant admin privileges to the default user in the live session,
  so allowing the user to shutdown from the live session's greeter screen
  should be considered conceptually similar.

=== modified file 'debian/changelog'
--- debian/changelog	2012-04-30 13:39:46 +0000
+++ debian/changelog	2012-05-18 22:34:18 +0000
@@ -1,3 +1,11 @@
+casper (1.317) UNRELEASED; urgency=low
+
+  * scripts/casper-bottom/44pk_allow_ubuntu: grant admin polkit privileges
+    to lightdm user, which enables restart and shutdown from the greeter
+    (LP: #855556)
+
+ -- Alex Chiang <[e-mail]>  Fri, 18 May 2012 15:51:20 -0600
+
 casper (1.316) quantal; urgency=low
 
   * Add dependency on cifs-utils for cifs NETBOOT support of desktop images.

=== modified file 'scripts/casper-bottom/44pk_allow_ubuntu'
--- scripts/casper-bottom/44pk_allow_ubuntu	2011-09-07 10:25:59 +0000
+++ scripts/casper-bottom/44pk_allow_ubuntu	2012-05-18 22:34:18 +0000
@@ -25,7 +25,7 @@
 cat << EOF > /root/var/lib/polkit-1/localauthority/10-vendor.d/10-live-cd.pkla
 # Policy to allow the livecd user to bypass policykit
 [Live CD user permissions]
-Identity=unix-user:$USERNAME
+Identity=unix-user:$USERNAME;unix-user:lightdm
 Action=*
 ResultAny=no
 ResultInactive=yes