FM / actions

/usr/share/polkit-1/actions

Name	Size	Mode	Actions
com.redhat.tuned.policy	8935	0644	edit dl rm
org.dpkg.pkexec.update-alternatives.policy	2723	0644	edit dl rm
org.fedoraproject.FirewallD1.desktop.policy.choice	3912	0644	edit dl rm
org.fedoraproject.FirewallD1.policy	4020	0644	edit dl rm
org.fedoraproject.FirewallD1.server.policy.choice	4020	0644	edit dl rm
org.freedesktop.hostname1.policy	2541	0644	edit dl rm
org.freedesktop.import1.policy	2345	0644	edit dl rm
org.freedesktop.locale1.policy	1923	0644	edit dl rm
org.freedesktop.login1.policy	23026	0644	edit dl rm
org.freedesktop.machine1.policy	5534	0644	edit dl rm
org.freedesktop.NetworkManager.policy	166911	0644	edit dl rm
org.freedesktop.policykit.policy	3520	0644	edit dl rm
org.freedesktop.portable1.policy	2246	0644	edit dl rm
org.freedesktop.resolve1.policy	7765	0644	edit dl rm
org.freedesktop.systemd1.policy	3823	0644	edit dl rm
org.freedesktop.timedate1.policy	3125	0644	edit dl rm

Edit: /usr/share/polkit-1/actions/org.freedesktop.machine1.policy (5534B)

<?xml version="1.0" encoding="UTF-8"?> 
<!DOCTYPE policyconfig PUBLIC "-//freedesktop//DTD PolicyKit Policy Configuration 1.0//EN"
        "http://www.freedesktop.org/standards/PolicyKit/1/policyconfig.dtd">

<!--
  SPDX-License-Identifier: LGPL-2.1+

This file is part of systemd.

systemd is free software; you can redistribute it and/or modify it
  under the terms of the GNU Lesser General Public License as published by
  the Free Software Foundation; either version 2.1 of the License, or
  (at your option) any later version.
-->

<vendor>The systemd Project</vendor>
        <vendor_url>http://www.freedesktop.org/wiki/Software/systemd</vendor_url>

<action id="org.freedesktop.machine1.login">
                <description gettext-domain="systemd">Log into a local container</description>
                <message gettext-domain="systemd">Authentication is required to log into a local container.</message>
                <defaults>
                        <allow_any>auth_admin</allow_any>
                        <allow_inactive>auth_admin</allow_inactive>
                        <allow_active>auth_admin_keep</allow_active>
                </defaults>
        </action>

<action id="org.freedesktop.machine1.host-login">
                <description gettext-domain="systemd">Log into the local host</description>
                <message gettext-domain="systemd">Authentication is required to log into the local host.</message>
                <defaults>
                        <allow_any>auth_admin</allow_any>
                        <allow_inactive>auth_admin</allow_inactive>
                        <allow_active>yes</allow_active>
                </defaults>
        </action>

<action id="org.freedesktop.machine1.shell">
                <description gettext-domain="systemd">Acquire a shell in a local container</description>
                <message gettext-domain="systemd">Authentication is required to acquire a shell in a local container.</message>
                <defaults>
                        <allow_any>auth_admin</allow_any>
                        <allow_inactive>auth_admin</allow_inactive>
                        <allow_active>auth_admin_keep</allow_active>
                </defaults>
                <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.login</annotate>
        </action>

<action id="org.freedesktop.machine1.host-shell">
                <description gettext-domain="systemd">Acquire a shell on the local host</description>
                <message gettext-domain="systemd">Authentication is required to acquire a shell on the local host.</message>
                <defaults>
                        <allow_any>auth_admin</allow_any>
                        <allow_inactive>auth_admin</allow_inactive>
                        <allow_active>auth_admin_keep</allow_active>
                </defaults>
                <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.host-login</annotate>
        </action>

<action id="org.freedesktop.machine1.open-pty">
                <description gettext-domain="systemd">Acquire a pseudo TTY in a local container</description>
                <message gettext-domain="systemd">Authentication is required to acquire a pseudo TTY in a local container.</message>
                <defaults>
                        <allow_any>auth_admin</allow_any>
                        <allow_inactive>auth_admin</allow_inactive>
                        <allow_active>auth_admin_keep</allow_active>
                </defaults>
        </action>

<action id="org.freedesktop.machine1.host-open-pty">
                <description gettext-domain="systemd">Acquire a pseudo TTY on the local host</description>
                <message gettext-domain="systemd">Authentication is required to acquire a pseudo TTY on the local host.</message>
                <defaults>
                        <allow_any>auth_admin</allow_any>
                        <allow_inactive>auth_admin</allow_inactive>
                        <allow_active>auth_admin_keep</allow_active>
                </defaults>
        </action>

<action id="org.freedesktop.machine1.manage-machines">
                <description gettext-domain="systemd">Manage local virtual machines and containers</description>
                <message gettext-domain="systemd">Authentication is required to manage local virtual machines and containers.</message>
                <defaults>
                        <allow_any>auth_admin</allow_any>
                        <allow_inactive>auth_admin</allow_inactive>
                        <allow_active>auth_admin_keep</allow_active>
                </defaults>
                <annotate key="org.freedesktop.policykit.imply">org.freedesktop.login1.shell org.freedesktop.login1.login</annotate>
        </action>

<action id="org.freedesktop.machine1.manage-images">
                <description gettext-domain="systemd">Manage local virtual machine and container images</description>
                <message gettext-domain="systemd">Authentication is required to manage local virtual machine and container images.</message>
                <defaults>
                        <allow_any>auth_admin</allow_any>
                        <allow_inactive>auth_admin</allow_inactive>
                        <allow_active>auth_admin_keep</allow_active>
                </defaults>
        </action>

</policyconfig>

cmd: