From b840bedd919eb321f2cefd8b9620af5bc28a28b6 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Florian=20M=C3=BCllner?= <fmuellner@gnome.org>
Date: Tue, 8 Jun 2021 20:45:00 +0200
Subject: [PATCH] data: Disable network configuration on login screen

---
 data/meson.build            | 10 ++++++++++
 data/org.gnome.gdm.rules.in |  8 ++++++++
 2 files changed, 18 insertions(+)
 create mode 100644 data/org.gnome.gdm.rules.in

diff --git a/data/meson.build b/data/meson.build
index 7c5222ea..20d39a36 100644
--- a/data/meson.build
+++ b/data/meson.build
@@ -157,6 +157,16 @@ gdm_rules = configure_file(
   install_dir: udev_dir,
 )
 
+# Polkit rules
+polkit_rules = configure_file(
+  input: 'org.gnome.gdm.rules.in',
+  output: '@BASENAME@',
+  configuration: {
+    'GDM_USERNAME': get_option('user'),
+  },
+  install_dir: get_option('datadir') / 'polkit-1' / 'rules.d',
+)
+
 # DBus service files
 service_config = configuration_data()
 service_config.set('sbindir', gdm_prefix / get_option('sbindir'))
diff --git a/data/org.gnome.gdm.rules.in b/data/org.gnome.gdm.rules.in
new file mode 100644
index 00000000..09544f11
--- /dev/null
+++ b/data/org.gnome.gdm.rules.in
@@ -0,0 +1,8 @@
+polkit.addRule(function(action, subject) {
+    if (action.id == "org.freedesktop.NetworkManager.network-control" &&
+        subject.user == "@GDM_USERNAME@") {
+            return polkit.Result.NO;
+    }
+
+    return polkit.Result.NOT_HANDLED;
+});
-- 
2.31.1