<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE policyconfig PUBLIC
 "-//freedesktop//DTD PolicyKit Policy Configuration 1.0//EN"
 "https://www.freedesktop.org/standards/PolicyKit/1/policyconfig.dtd">
<policyconfig>
  <vendor>Threefold</vendor>
  <vendor_url>https://threefold.io</vendor_url>

  <!--
    Bootstrap action: covers the wrapper that cleans up orphan
    mycelium state and then execs the daemon. pkexec matches the
    binary path against `org.freedesktop.policykit.exec.path` to
    pick this action up; auth_admin_keep then caches the auth for
    the user's session so subsequent restarts don't re-prompt.
  -->
  <action id="tech.threefold.mycellium-ui-private.bootstrap">
    <description>Run the Mycelium overlay daemon</description>
    <description xml:lang="fr">Lancer le démon de l'overlay Mycelium</description>
    <message>Authentication is required to start the Mycelium overlay daemon.</message>
    <message xml:lang="fr">Une authentification est requise pour démarrer le démon Mycelium.</message>
    <defaults>
      <allow_any>auth_admin</allow_any>
      <allow_inactive>auth_admin</allow_inactive>
      <allow_active>auth_admin_keep</allow_active>
    </defaults>
    <annotate key="org.freedesktop.policykit.exec.path">/usr/bin/mycellium-bootstrap-private</annotate>
  </action>
</policyconfig>
