59 lines
2.4 KiB
Plaintext
59 lines
2.4 KiB
Plaintext
<!DOCTYPE busconfig PUBLIC
|
|
"-//freedesktop//DTD D-Bus Bus Configuration 1.0//EN"
|
|
"http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
|
|
<!--
|
|
/etc/dbus-1/system.d/me.oxmc.vesperos.ProfileService.conf
|
|
D-Bus system bus policy for vesperprofiled.
|
|
|
|
Installed by the debian package postinst.
|
|
Grants root the ability to own the service name and allows
|
|
local system accounts to call its methods.
|
|
-->
|
|
<busconfig>
|
|
|
|
<!-- The daemon itself owns this name -->
|
|
<policy user="root">
|
|
<allow own="me.oxmc.vesperos.ProfileService"/>
|
|
<allow send_destination="me.oxmc.vesperos.ProfileService"/>
|
|
<allow receive_sender="me.oxmc.vesperos.ProfileService"/>
|
|
</policy>
|
|
|
|
<!-- Admin group members can call all methods -->
|
|
<policy group="sudo">
|
|
<allow send_destination="me.oxmc.vesperos.ProfileService"
|
|
send_interface="me.oxmc.vesperos.IProfileService"/>
|
|
</policy>
|
|
|
|
<!-- The vesperos installer UI (runs as current user) can install profiles.
|
|
InstallProfile requires PolicyKit authorization (see the .policy file). -->
|
|
<policy at_console="true">
|
|
<allow send_destination="me.oxmc.vesperos.ProfileService"
|
|
send_interface="me.oxmc.vesperos.IProfileService"
|
|
send_member="InstallProfile"/>
|
|
<allow send_destination="me.oxmc.vesperos.ProfileService"
|
|
send_interface="me.oxmc.vesperos.IProfileService"
|
|
send_member="ListProfiles"/>
|
|
<allow send_destination="me.oxmc.vesperos.ProfileService"
|
|
send_interface="me.oxmc.vesperos.IProfileService"
|
|
send_member="GetProfileInfo"/>
|
|
<allow send_destination="me.oxmc.vesperos.ProfileService"
|
|
send_interface="me.oxmc.vesperos.IProfileService"
|
|
send_member="IsDeviceManaged"/>
|
|
<allow send_destination="me.oxmc.vesperos.ProfileService"
|
|
send_interface="me.oxmc.vesperos.IProfileService"
|
|
send_member="IsSupervised"/>
|
|
<allow send_destination="me.oxmc.vesperos.ProfileService"
|
|
send_interface="me.oxmc.vesperos.IProfileService"
|
|
send_member="GetPayloadsOfType"/>
|
|
<allow send_destination="me.oxmc.vesperos.ProfileService"
|
|
send_interface="me.oxmc.vesperos.IProfileService"
|
|
send_member="RemoveProfile"/>
|
|
</policy>
|
|
|
|
<!-- Block everyone else by default -->
|
|
<policy context="default">
|
|
<deny send_destination="me.oxmc.vesperos.ProfileService"/>
|
|
</policy>
|
|
|
|
</busconfig>
|