This PR offers a fix for #183.

For a complete solution, we need to implement #184.

Context: The following system polkit rules is interfering with our custom design polkit rule:

ubo@ubo-ie:~ $ sudo ls -l /usr/share/polkit-1/rules.d/
total 16
-rw-r--r-- 1 root root 976 Jan 31  2023 49-polkit-pkla-compat.rules
-rw-r--r-- 1 root root 325 Jan 31  2023 50-default.rules
-rw-r--r-- 1 root root 282 Mar  9  2023 org.freedesktop.NetworkManager.rules
-rw-r--r-- 1 root root 527 Aug 19 21:25 systemd-networkd.rules


ubo@ubo-ie:~ $ sudo cat /usr/share/polkit-1/rules.d/org.freedesktop.NetworkManager.ru
les
polkit.addRule(function(action, subject) {
    if (action.id == "org.freedesktop.NetworkManager.settings.modify.system" &&
        subject.local && subject.active &&
        (subject.isInGroup ("sudo") || subject.isInGroup ("netdev"))) {
        return polkit.Result.YES;
    }
});

This rule specifically requires users in the sudo group to only modify system settings when they are both local and active, and it only covers the settings.modify.system action.

Based on the polkit documentation, local and active are attributes of the Subject type that indicate the session status:

• local (boolean):
  Set to true only if the seat is local
  A "local" seat means the user is physically present at the machine (like sitting at a desktop/laptop)
  As opposed to a remote connection (like SSH or VNC)

• active (boolean):
  Set to true only if the session is active
  An "active" session means it's currently being used
  For example, in a multi-user system with multiple logged-in users, only the currently focused/active user session would be marked as active
  If you're logged in but switched to another user's session, your session would be inactive

We need a special rule handling as below:

if (subject.user == "ubo") {
    // This section ensures ubo always gets permission for settings.modify.system
    // regardless of sudo membership or session status
    if (action.id == "org.freedesktop.NetworkManager.settings.modify.system" &&
        subject.isInGroup("sudo")) {
        return polkit.Result.YES;
    }
    // ... rest of rules
}