Set PolicyKit permissions about guest-oslogin HOT 1 OPEN

To be a little more explicit on the "fix", I have the following in my VM startup script:

# Allow all actions for members of the sudo group
cat << EOF > /etc/polkit-1/localauthority/50-local.d/46-allow-group-sudo.pkla
[Allow members of sudo group to administer]
Identity=unix-group:sudo
Action=*
ResultAny=yes
EOF

A couple notes:

• This requires that the admin users are part of a local group sudo on Debians and wheel on RedHats I believe. oslogin doesn't currently add admin users to the local admin group so see here: #93
• This is pretty strongly a PolicyKit anti-pattern to disable the password prompt, but when using oslogin you don't have a local password, so I'm not really sure there's any other way.

Additionally, if you use remote desktop, all users will be prompted for a password on login because of Colord, which is a minor annoyance. You disable this prompt (by allowing all users passwordless modification to colord) by adding the following (I don't personally consider this a security risk):

# Allow colord for all users
cat << EOF > /etc/polkit-1/localauthority/50-local.d/45-allow-colord.pkla
[Allow Colord all Users]
Identity=unix-user:*
Action=org.freedesktop.color-manager.create-device;org.freedesktop.color-manager.create-profile;org.freedesktop.color-manager.delete-device;org.freedesktop.color-manager.delete-profile;org.freedesktop.color-manager.modify-device;org.freedesktop.color-manager.modify-profile
ResultAny=no
ResultInactive=no
ResultActive=yes
EOF

from guest-oslogin.