compiler_vm: add polkit rule to require admin password for all actions

applets/compiler_vm/guest/bin/setup-guest

@@ -1,8 +1,12 @@
 cp guest/bin/* /usr/local/bin
+
 mkdir /usr/local/share/pbot-vm/
 cp -r guest/lib/Languages/ /usr/local/share/pbot-vm/
+
 cp guest/include/prelude.h /usr/include
 
+cp guest/polkit/* /etc/polkit-1/rules.d/
+
 echo unset DEBUGINFOD_URLS >> /root/.bashrc
 echo export ASAN_OPTIONS=detect_leaks=0 >> /root/.bashrc
 

applets/compiler_vm/guest/polkit/00-auth-only.rules

@@ -0,0 +1,5 @@
+// require admin login for all polkit actions
+// e.g. NetworkManager, shutdown, reboot, etc now require root password
+polkit.addRule(function(action, subject) {
+        return polkit.Result.AUTH_ADMIN;
+});