org.redcontrol.helper.policy

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE policyconfig PUBLIC
 "-//freedesktop//DTD PolicyKit Policy Configuration 1.0//EN"
 "http://www.freedesktop.org/standards/PolicyKit/1/policyconfig.dtd">
<policyconfig>

  <vendor>RedControl</vendor>
  <vendor_url>https://github.com/ScreenSensitive/RedControl</vendor_url>

  <action id="org.redcontrol.helper">
    <description>Read and modify AMD GPU display registers</description>
    <message>Authentication is required to change GPU dithering and display-signal settings</message>
    <defaults>
      <allow_any>auth_admin</allow_any>
      <allow_inactive>auth_admin</allow_inactive>
      <!-- auth_admin_keep caches the authorisation for the rest of the login
           session, so the GUI prompts once instead of on every register write.
           This replaces the old sudoers.d NOPASSWD grant: nothing persists
           after logout, and an administrator can override this policy. -->
      <allow_active>auth_admin_keep</allow_active>
    </defaults>
    <annotate key="org.freedesktop.policykit.exec.path">/usr/libexec/redcontrol-helper</annotate>
    <annotate key="org.freedesktop.policykit.exec.allow_gui">true</annotate>
  </action>

</policyconfig>