oxmc
a86ad3298e
This checkout is PawletOS's fork (git.oxmc.me/PawletOS/profiled), so its own identity should read PawletOS, not VesperOS: binary/package name, AIDL package+interface (me.oxmc.vesperos.profile -> os.pawlet.profiled), D-Bus service/object/error names, C++ namespace (vesperos::profile -> pawletos::profile), sepolicy types, data paths (/data/system/vesperos -> /data/system/pawletos, /etc/vesperprofiled -> /etc/pawletprofiled), the vendored OpenSSL static-lib module names, and the ZTE protocol string. Also drops generated build output (obj-x86_64-linux-gnu/, debian/.debhelper, debian staging dir, debhelper log/substvars files) that had been committed by mistake, and adds a .gitignore so they don't come back. The stock/upstream vesperprofiled at git.oxmc.me/VesperOS/vesperprofiled is untouched -- this commit only goes to the pawletos remote.
59 lines
2.2 KiB
Plaintext
59 lines
2.2 KiB
Plaintext
<!DOCTYPE busconfig PUBLIC
|
|
"-//freedesktop//DTD D-Bus Bus Configuration 1.0//EN"
|
|
"http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
|
|
<!--
|
|
/etc/dbus-1/system.d/os.pawlet.ProfiledService.conf
|
|
D-Bus system bus policy for pawletprofiled.
|
|
|
|
Installed by the debian package postinst.
|
|
Grants root the ability to own the service name and allows
|
|
local system accounts to call its methods.
|
|
-->
|
|
<busconfig>
|
|
|
|
<!-- The daemon itself owns this name -->
|
|
<policy user="root">
|
|
<allow own="os.pawlet.ProfiledService"/>
|
|
<allow send_destination="os.pawlet.ProfiledService"/>
|
|
<allow receive_sender="os.pawlet.ProfiledService"/>
|
|
</policy>
|
|
|
|
<!-- Admin group members can call all methods -->
|
|
<policy group="sudo">
|
|
<allow send_destination="os.pawlet.ProfiledService"
|
|
send_interface="os.pawlet.IProfiledService"/>
|
|
</policy>
|
|
|
|
<!-- The pawletos installer UI (runs as current user) can install profiles.
|
|
InstallProfile requires PolicyKit authorization (see the .policy file). -->
|
|
<policy at_console="true">
|
|
<allow send_destination="os.pawlet.ProfiledService"
|
|
send_interface="os.pawlet.IProfiledService"
|
|
send_member="InstallProfile"/>
|
|
<allow send_destination="os.pawlet.ProfiledService"
|
|
send_interface="os.pawlet.IProfiledService"
|
|
send_member="ListProfiles"/>
|
|
<allow send_destination="os.pawlet.ProfiledService"
|
|
send_interface="os.pawlet.IProfiledService"
|
|
send_member="GetProfileInfo"/>
|
|
<allow send_destination="os.pawlet.ProfiledService"
|
|
send_interface="os.pawlet.IProfiledService"
|
|
send_member="IsDeviceManaged"/>
|
|
<allow send_destination="os.pawlet.ProfiledService"
|
|
send_interface="os.pawlet.IProfiledService"
|
|
send_member="IsSupervised"/>
|
|
<allow send_destination="os.pawlet.ProfiledService"
|
|
send_interface="os.pawlet.IProfiledService"
|
|
send_member="GetPayloadsOfType"/>
|
|
<allow send_destination="os.pawlet.ProfiledService"
|
|
send_interface="os.pawlet.IProfiledService"
|
|
send_member="RemoveProfile"/>
|
|
</policy>
|
|
|
|
<!-- Block everyone else by default -->
|
|
<policy context="default">
|
|
<deny send_destination="os.pawlet.ProfiledService"/>
|
|
</policy>
|
|
|
|
</busconfig>
|