NEWS

@@ -934,7 +934,9 @@ CHANGES WITH 258 in spe:
         * A new "org.freedesktop.machine1.register-machine" polkit action is
           used when checking for privileges to register a machine. Previously,
           "org.freedesktop.machine1.create-machine" was used for creation and
-          registration operations.
+          registration operations. The policy for the new action is more
+          permissive: active users are allowed to perform the action without
+          authentication.
 
         * systemd-machined now also tracks the "supervisor" process of a
           machine, i.e. the host process that manages the payload. This

src/machine/org.freedesktop.machine1.policy

@@ -108,7 +108,7 @@
                 <defaults>
                         <allow_any>auth_admin</allow_any>
                         <allow_inactive>auth_admin</allow_inactive>
-                        <allow_active>auth_admin_keep</allow_active>
+                        <allow_active>yes</allow_active>
                 </defaults>
         </action>