3be9e26dcd169d44ae105f1b8a0674464c700b77Sumit Bose// Please put this file in /usr/share/polkit-1/rules.d/ if SSSD is running as

3be9e26dcd169d44ae105f1b8a0674464c700b77Sumit Bose// unprivileged user '@SSSD_USER@' to allow access to the Smartcard via pcscd.

3be9e26dcd169d44ae105f1b8a0674464c700b77Sumit Bosepolkit.addRule(function(action, subject) {

3be9e26dcd169d44ae105f1b8a0674464c700b77Sumit Bose if (action.id == "org.debian.pcsc-lite.access_card" &&

3be9e26dcd169d44ae105f1b8a0674464c700b77Sumit Bose subject.user == "@SSSD_USER@") {

3be9e26dcd169d44ae105f1b8a0674464c700b77Sumit Bose return polkit.Result.YES;

3be9e26dcd169d44ae105f1b8a0674464c700b77Sumit Bose }

3be9e26dcd169d44ae105f1b8a0674464c700b77Sumit Bose});

3be9e26dcd169d44ae105f1b8a0674464c700b77Sumit Bose

3be9e26dcd169d44ae105f1b8a0674464c700b77Sumit Bosepolkit.addRule(function(action, subject) {

3be9e26dcd169d44ae105f1b8a0674464c700b77Sumit Bose if (action.id == "org.debian.pcsc-lite.access_pcsc" &&

3be9e26dcd169d44ae105f1b8a0674464c700b77Sumit Bose subject.user == "@SSSD_USER@") {

3be9e26dcd169d44ae105f1b8a0674464c700b77Sumit Bose return polkit.Result.YES;

3be9e26dcd169d44ae105f1b8a0674464c700b77Sumit Bose }

3be9e26dcd169d44ae105f1b8a0674464c700b77Sumit Bose});