Comment # 4 on bug 1010779 from Thomas Wagner

(In reply to Wolfgang Bauer from comment #1)
> Your output of pkaction is normal AFAIK. Apparently it doesn't evaluate the 
> javascript rules in /etc/polkit-1/rules.d/, but only takes its information 
> from /usr/share/polkit/actions (i.e. the defaults).
Ok, then the documentation section 9.4.3 is IMHO misleading, since it suggests
the presumption that pkaction can be used the check the rules and not to
display the defaults.

(In reply to Wolfgang Bauer from comment #2)
> @Thomas Wagner: can you confirm that adding these lines to
> polkit-default-privs.local as well (and running
> /sbin/set_polkit_default_privs afterwards) works for you too?
> 
> org.freedesktop.login1.reboot-multiple-sessions no
> org.freedesktop.login1.power-off-multiple-sessions no
Can confirm, having all four lines in place will prevent a user from
shutdown/reboot on Leap 42.2.