keremet/rpm-ostree
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
5803fbc807
rpm-ostree/src/daemon/org.projectatomic.rpmostree1.conf

35 lines
1.2 KiB
Plaintext
Raw Normal View History

daemon: Start of work on daemon
2015-04-28 04:22:58 +03:00
<?xml version="1.0" encoding="UTF-8"?> <!-- -*- XML -*- -->
<!DOCTYPE busconfig PUBLIC
"-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN"
"http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
<busconfig>
daemon: Update D-Bus security policy Poke some holes in the policy so normal users can introspect paths, peek at properties, and run "rpm-ostree status".
2016-01-12 19:50:55 +03:00
<!-- Only root can own the service -->
daemon: Start of work on daemon
2015-04-28 04:22:58 +03:00
<policy user="root">
<allow own="org.projectatomic.rpmostree1"/>
daemon: Simplify authorization policy The current policy is to only allow the root user access to the Sysroot and OS interfaces, but this can be expressed in the static bus config. The long-term intention is to integrate with PolicyKit. Leave comments in the code stating so but remove the unnecessary authorization handler for the time being, just so there's less code to review.
2015-08-24 17:57:30 +03:00
<allow send_destination="org.projectatomic.rpmostree1"/>
daemon: Start of work on daemon
2015-04-28 04:22:58 +03:00
</policy>
<policy context="default">
daemon: Simplify authorization policy The current policy is to only allow the root user access to the Sysroot and OS interfaces, but this can be expressed in the static bus config. The long-term intention is to integrate with PolicyKit. Leave comments in the code stating so but remove the unnecessary authorization handler for the time being, just so there's less code to review.
2015-08-24 17:57:30 +03:00
<deny send_destination="org.projectatomic.rpmostree1"/>
daemon: Update D-Bus security policy Poke some holes in the policy so normal users can introspect paths, peek at properties, and run "rpm-ostree status".
2016-01-12 19:50:55 +03:00
<allow send_destination="org.projectatomic.rpmostree1"
send_interface="org.freedesktop.DBus.Introspectable"/>
<allow send_destination="org.projectatomic.rpmostree1"
send_interface="org.freedesktop.DBus.Peer"/>
<allow send_destination="org.projectatomic.rpmostree1"
send_interface="org.freedesktop.DBus.Properties"
send_member="Get"/>
<allow send_destination="org.projectatomic.rpmostree1"
send_interface="org.freedesktop.DBus.Properties"
send_member="GetAll"/>
<allow send_destination="org.projectatomic.rpmostree1"
send_interface="org.projectatomic.rpmostree1.Sysroot"
send_member="GetOS"/>
daemon: Start of work on daemon
2015-04-28 04:22:58 +03:00
</policy>
</busconfig>
Reference in New Issue Copy Permalink