Add a new repair-system policy and use it by the corresponding

RepairSystem method

policy/org.freedesktop.packagekit.policy.in

@@ -249,5 +249,21 @@
     </defaults>
   </action>
 
+  <action id="org.freedesktop.packagekit.repiar-system">
+    <!-- SECURITY:
+          - Normal users require admin authentication to repair the system
+            since this can make the system unbootable or stop other
+            applications from working.
+     -->
+    <_description>Repair System</_description>
+    <_message>Authentication is required to repair the installed software</_message>
+    <icon_name>package-x-generic</icon_name>
+    <defaults>
+      <allow_any>no</allow_any>
+      <allow_inactive>no</allow_inactive>
+      <allow_active>auth_admin</allow_active>
+    </defaults>
+  </action>
+
 </policyconfig>
 

src/pk-transaction.c

@@ -2596,7 +2596,7 @@ pk_transaction_role_to_action_only_trusted (PkRoleEnum role)
 			policy = "org.freedesktop.packagekit.upgrade-system";
 			break;
 		case PK_ROLE_ENUM_REPAIR_SYSTEM:
-			policy = "org.freedesktop.packagekit.package-install";
+			policy = "org.freedesktop.packagekit.repair-system";
 			break;
 		default:
 			break;