From 8be89945d94c787838db4a5cf2fb83d4e37ab213 Mon Sep 17 00:00:00 2001
From: Sebastian Heinlein <devel@glatzor.de>
Date: Thu, 15 Dec 2011 09:21:20 +0100
Subject: [PATCH] Add a new repair-system policy and use it by the
 corresponding RepairSystem method

---
 policy/org.freedesktop.packagekit.policy.in | 16 ++++++++++++++++
 src/pk-transaction.c                        |  2 +-
 2 files changed, 17 insertions(+), 1 deletion(-)

diff --git a/policy/org.freedesktop.packagekit.policy.in b/policy/org.freedesktop.packagekit.policy.in
index c69009975..c34c81a16 100644
--- a/policy/org.freedesktop.packagekit.policy.in
+++ b/policy/org.freedesktop.packagekit.policy.in
@@ -249,5 +249,21 @@
     </defaults>
   </action>
 
+  <action id="org.freedesktop.packagekit.repiar-system">
+    <!-- SECURITY:
+          - Normal users require admin authentication to repair the system
+            since this can make the system unbootable or stop other
+            applications from working.
+     -->
+    <_description>Repair System</_description>
+    <_message>Authentication is required to repair the installed software</_message>
+    <icon_name>package-x-generic</icon_name>
+    <defaults>
+      <allow_any>no</allow_any>
+      <allow_inactive>no</allow_inactive>
+      <allow_active>auth_admin</allow_active>
+    </defaults>
+  </action>
+
 </policyconfig>
 
diff --git a/src/pk-transaction.c b/src/pk-transaction.c
index 449b76084..61ea24fe2 100644
--- a/src/pk-transaction.c
+++ b/src/pk-transaction.c
@@ -2596,7 +2596,7 @@ pk_transaction_role_to_action_only_trusted (PkRoleEnum role)
 			policy = "org.freedesktop.packagekit.upgrade-system";
 			break;
 		case PK_ROLE_ENUM_REPAIR_SYSTEM:
-			policy = "org.freedesktop.packagekit.package-install";
+			policy = "org.freedesktop.packagekit.repair-system";
 			break;
 		default:
 			break;