rpm-ostree/src/daemon/org.projectatomic.rpmostree1.conf

<?xml version="1.0" encoding="UTF-8"?> <!-- -*- XML -*- -->

<!DOCTYPE busconfig PUBLIC
  "-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN"
  "http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
<busconfig>
  <!-- Only root can own and access the service -->
  <policy user="root">
    <allow own="org.projectatomic.rpmostree1"/>
    <allow send_destination="org.projectatomic.rpmostree1"/>
  </policy>

  <policy context="default">
    <deny send_destination="org.projectatomic.rpmostree1"/>
  </policy>
</busconfig>
daemon: Start of work on daemon 2015-04-28 04:22:58 +03:00			`<?xml version="1.0" encoding="UTF-8"?> <!-- -- XML -- -->`

			`<!DOCTYPE busconfig PUBLIC`
			`"-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN"`
			`"http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">`
			`<busconfig>`
daemon: Simplify authorization policy The current policy is to only allow the root user access to the Sysroot and OS interfaces, but this can be expressed in the static bus config. The long-term intention is to integrate with PolicyKit. Leave comments in the code stating so but remove the unnecessary authorization handler for the time being, just so there's less code to review. 2015-08-24 17:57:30 +03:00			`<!-- Only root can own and access the service -->`
daemon: Start of work on daemon 2015-04-28 04:22:58 +03:00			`<policy user="root">`
			`<allow own="org.projectatomic.rpmostree1"/>`
daemon: Simplify authorization policy The current policy is to only allow the root user access to the Sysroot and OS interfaces, but this can be expressed in the static bus config. The long-term intention is to integrate with PolicyKit. Leave comments in the code stating so but remove the unnecessary authorization handler for the time being, just so there's less code to review. 2015-08-24 17:57:30 +03:00			`<allow send_destination="org.projectatomic.rpmostree1"/>`
daemon: Start of work on daemon 2015-04-28 04:22:58 +03:00			`</policy>`

			`<policy context="default">`
daemon: Simplify authorization policy The current policy is to only allow the root user access to the Sysroot and OS interfaces, but this can be expressed in the static bus config. The long-term intention is to integrate with PolicyKit. Leave comments in the code stating so but remove the unnecessary authorization handler for the time being, just so there's less code to review. 2015-08-24 17:57:30 +03:00			`<deny send_destination="org.projectatomic.rpmostree1"/>`
daemon: Start of work on daemon 2015-04-28 04:22:58 +03:00			`</policy>`
			`</busconfig>`