Update polkit for NetworkManager service permission

- Part of issue #305.
- See also moodlebox/moodle-tool_moodlebox#117.

roles/wifi/files/etc/polkit-1/rules.d/10-wifimanagement.rules

@@ -0,0 +1,13 @@
+// Ref: https://wiki.archlinux.org/title/Polkit
+// /etc/polkit-1/rules.d/10-wifimanagement.rules
+polkit.addRule(function(action, subject) {
+    if (action.id == "org.freedesktop.systemd1.manage-units") {
+        if (action.lookup("unit") == "NetworkManager.service" ||
+            action.lookup("unit") == "networking.service") {
+            var verb = action.lookup("verb");
+            if (verb == "start" || verb == "stop" || verb == "restart") {
+                return polkit.Result.YES;
+            }
+        }
+    }
+});

roles/wifi/tasks/main.yml

@@ -64,6 +64,12 @@
   notify:
     - Restart networking
 
+- name: Update polkit
+  ansible.builtin.copy:
+    src: 'etc/polkit-1/rules.d/10-wifimanagement.rules'
+    dest: '/etc/polkit-1/rules.d/10-wifimanagement.rules'
+    mode: '0644'
+
 - name: Get rfkill files
   ansible.builtin.find:
     paths: '/var/lib/systemd/rfkill'