Add contest WiFi connection

os/layers/contestant/hooks/live/2010-contestant.hook.chroot

@@ -25,3 +25,6 @@ $DISABLE_DESKTOP /usr/share/applications/gnome-sharing-panel.desktop
 # We want to load kexec manually, and execution of kexec is already done by systemd.
 systemctl disable kexec-load.service
 systemctl disable kexec.service
+
+# Restrict access to the config which contains the WiFi password.
+chmod og= /etc/NetworkManager/system-connections/contest.nmconnection

os/layers/contestant/includes.chroot/etc/NetworkManager/system-connections/contest.nmconnection

@@ -0,0 +1,20 @@
+[connection]
+id=contest
+uuid=b4b09615-f7b9-4777-baa0-7812d58a01dd
+type=wifi
+
+[wifi]
+mode=infrastructure
+ssid=contest
+
+[wifi-security]
+auth-alg=open
+key-mgmt=wpa-psk
+psk=@wifi_password@
+
+[ipv4]
+method=auto
+
+[ipv6]
+addr-gen-mode=default
+method=auto

os/layers/contestant/includes.chroot/etc/polkit-1/rules.d/50-lockdown.rules

@@ -7,7 +7,8 @@
 polkit.addRule(function (action, subject) {
   if (
     action.id.indexOf("org.freedesktop.ModemManager1.") === 0 ||
-    action.id.indexOf("org.freedesktop.NetworkManager.") === 0 ||
+    (action.id.indexOf("org.freedesktop.NetworkManager.") === 0 &&
+      action.id !== "org.freedesktop.NetworkManager.wifi.scan") ||
     action.id === "org.freedesktop.login1.hibernate" ||
     action.id === "org.freedesktop.packagekit.system-network-proxy-configure" ||
     action.id.indexOf("org.freedesktop.udisks2.") === 0