From c7bb21a63a6ca11bf4045d916165a36852b2e09b Mon Sep 17 00:00:00 2001
From: Bernd Schoolmann <mail@quexten.com>
Date: Tue, 19 Sep 2023 22:29:21 +0200
Subject: [PATCH] Update polkit policy

---
 agent/systemauth/biometrics/polkit.go   | 59 +++++++++---------
 resources/com.quexten.goldwarden.policy | 79 ++++++++++---------------
 2 files changed, 61 insertions(+), 77 deletions(-)

diff --git a/agent/systemauth/biometrics/polkit.go b/agent/systemauth/biometrics/polkit.go
index d8b5c5b..dcb7565 100644
--- a/agent/systemauth/biometrics/polkit.go
+++ b/agent/systemauth/biometrics/polkit.go
@@ -9,36 +9,37 @@ import (
 const POLICY = `<?xml version="1.0" encoding="UTF-8"?>
 <!DOCTYPE policyconfig PUBLIC
  "-//freedesktop//DTD PolicyKit Policy Configuration 1.0//EN"
- "http://www.freedesktop.org/standards/PolicyKit/1.0/policyconfig.dtd">
-
+ "http://www.freedesktop.org/software/polkit/policyconfig-1.dtd">
 <policyconfig>
-    <action id="com.quexten.goldwarden.accessvault">
-      <description>Allow access to the vault</description>
-      <message>Allows access to the vault entries</message>
-      <defaults>
-        <allow_any>auth_self</allow_any>
-        <allow_inactive>auth_self</allow_inactive>
-        <allow_active>auth_self</allow_active>
-      </defaults>
-    </action>
-    <action id="com.quexten.goldwarden.usesshkey">
-      <description>Use SSH Key</description>
-      <message>Authenticate to use an SSH Key from your vault</message>
-      <defaults>
-        <allow_any>auth_self</allow_any>
-        <allow_inactive>auth_self</allow_inactive>
-        <allow_active>auth_self</allow_active>
-      </defaults>
-    </action>
-    <action id="com.quexten.goldwarden.browserbiometrics">
-      <description>Browser Biometrics</description>
-      <message>Authenticate to allow Goldwarden to unlock your browser.</message>
-      <defaults>
-        <allow_any>auth_self</allow_any>
-        <allow_inactive>auth_self</allow_inactive>
-        <allow_active>auth_self</allow_active>
-      </defaults>
-    </action>
+
+  <action id="com.quexten.goldwarden.accessvault">
+    <description>Allow access to the vault</description>
+    <message>Allows access to the vault</message>
+    <defaults>
+      <allow_any>auth_self</allow_any>
+      <allow_inactive>auth_self</allow_inactive>
+      <allow_active>auth_self</allow_active>
+    </defaults>
+  </action>
+  <action id="com.quexten.goldwarden.usesshkey">
+    <description>Use SSH Key</description>
+    <message>Authenticate to use an SSH Key from your vault</message>
+    <defaults>
+      <allow_any>auth_self</allow_any>
+      <allow_inactive>auth_self</allow_inactive>
+      <allow_active>auth_self</allow_active>
+    </defaults>
+  </action>
+  <action id="com.quexten.goldwarden.browserbiometrics">
+    <description>Browser Biometrics</description>
+    <message>Authenticate to allow Goldwarden to unlock your browser</message>
+    <defaults>
+      <allow_any>auth_self</allow_any>
+      <allow_inactive>auth_self</allow_inactive>
+      <allow_active>auth_self</allow_active>
+    </defaults>
+  </action>
+
 </policyconfig>`
 
 func CheckBiometrics(approvalType Approval) bool {
diff --git a/resources/com.quexten.goldwarden.policy b/resources/com.quexten.goldwarden.policy
index b7fe542..ec0ba4e 100644
--- a/resources/com.quexten.goldwarden.policy
+++ b/resources/com.quexten.goldwarden.policy
@@ -1,52 +1,35 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <!DOCTYPE policyconfig PUBLIC
  "-//freedesktop//DTD PolicyKit Policy Configuration 1.0//EN"
- "http://www.freedesktop.org/standards/PolicyKit/1.0/policyconfig.dtd">
-
+ "http://www.freedesktop.org/software/polkit/policyconfig-1.dtd">
 <policyconfig>
-    <action id="com.quexten.goldwarden.accesscredential">
-      <description>Allow Credential Access</description>
-      <message>Authenticate to allow access to a single credential</message>
-      <defaults>
-        <allow_any>auth_self</allow_any>
-        <allow_inactive>auth_self</allow_inactive>
-        <allow_active>auth_self</allow_active>
-      </defaults>
-    </action>
-    <action id="com.quexten.goldwarden.changepin">
-      <description>Approve Pin Change</description>
-      <message>Authenticate to change your Goldwarden PIN.</message>
-      <defaults>
-        <allow_any>auth_self</allow_any>
-        <allow_inactive>auth_self</allow_inactive>
-        <allow_active>auth_self</allow_active>
-      </defaults>
-    </action>
-    <action id="com.quexten.goldwarden.usesshkey">
-      <description>Use Bitwarden SSH Key</description>
-      <message>Authenticate to use an SSH Key from your vault</message>
-      <defaults>
-        <allow_any>auth_self</allow_any>
-        <allow_inactive>auth_self</allow_inactive>
-        <allow_active>auth_self</allow_active>
-      </defaults>
-    </action>
-    <action id="com.quexten.goldwarden.modifyvault">
-      <description>Modify Bitwarden Vault</description>
-      <message>Authenticate to allow modification of your Bitvarden vault in Goldwarden</message>
-      <defaults>
-        <allow_any>auth_self</allow_any>
-        <allow_inactive>auth_self</allow_inactive>
-        <allow_active>auth_self</allow_active>
-      </defaults>
-    </action>
-    <action id="com.quexten.goldwarden.browserbiometrics">
-      <description>Browser Biometrics</description>
-      <message>Authenticate to allow Goldwarden to unlock your browser.</message>
-      <defaults>
-        <allow_any>auth_self</allow_any>
-        <allow_inactive>auth_self</allow_inactive>
-        <allow_active>auth_self</allow_active>
-      </defaults>
-    </action>
-</policyconfig>
+
+  <action id="com.quexten.goldwarden.accessvault">
+    <description>Allow access to the vault</description>
+    <message>Allows access to the vault</message>
+    <defaults>
+      <allow_any>auth_self</allow_any>
+      <allow_inactive>auth_self</allow_inactive>
+      <allow_active>auth_self</allow_active>
+    </defaults>
+  </action>
+  <action id="com.quexten.goldwarden.usesshkey">
+    <description>Use SSH Key</description>
+    <message>Authenticate to use an SSH Key from your vault</message>
+    <defaults>
+      <allow_any>auth_self</allow_any>
+      <allow_inactive>auth_self</allow_inactive>
+      <allow_active>auth_self</allow_active>
+    </defaults>
+  </action>
+  <action id="com.quexten.goldwarden.browserbiometrics">
+    <description>Browser Biometrics</description>
+    <message>Authenticate to allow Goldwarden to unlock your browser</message>
+    <defaults>
+      <allow_any>auth_self</allow_any>
+      <allow_inactive>auth_self</allow_inactive>
+      <allow_active>auth_self</allow_active>
+    </defaults>
+  </action>
+
+</policyconfig>
\ No newline at end of file