shaba/systemd
1
0
Fork 0
mirror of https://github.com/systemd/systemd.git synced 2024-11-07 09:56:51 +03:00
Code
19854865a8
systemd/src/core/org.freedesktop.systemd1.conf

213 lines
9.5 KiB
Plaintext
Raw Normal View History

dbus: install D-Bus policy file by default
2010-04-10 20:51:07 +04:00
<?xml version="1.0"?> <!--*-nxml-*-->
<!DOCTYPE busconfig PUBLIC "-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN"
"http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
<!--
This file is part of systemd.
systemd is free software; you can redistribute it and/or modify it
relicense to LGPLv2.1 (with exceptions) We finally got the OK from all contributors with non-trivial commits to relicense systemd from GPL2+ to LGPL2.1+. Some udev bits continue to be GPL2+ for now, but we are looking into relicensing them too, to allow free copy/paste of all code within systemd. The bits that used to be MIT continue to be MIT. The big benefit of the relicensing is that closed source code may now link against libsystemd-login.so and friends.
2012-04-12 02:20:58 +04:00
under the terms of the GNU Lesser General Public License as published by
the Free Software Foundation; either version 2.1 of the License, or
dbus: install D-Bus policy file by default
2010-04-10 20:51:07 +04:00
(at your option) any later version.
-->
<busconfig>
<policy user="root">
<allow own="org.freedesktop.systemd1"/>
dbus: allow systemd to receive activation requests
2010-06-07 06:15:37 +04:00
<!-- Root clients can do everything -->
dbus: install D-Bus policy file by default
2010-04-10 20:51:07 +04:00
<allow send_destination="org.freedesktop.systemd1"/>
<allow receive_sender="org.freedesktop.systemd1"/>
dbus: allow systemd to receive activation requests
2010-06-07 06:15:37 +04:00
<!-- systemd may receive activator requests -->
<allow receive_interface="org.freedesktop.systemd1.Activator"
receive_member="ActivationRequest"/>
dbus: install D-Bus policy file by default
2010-04-10 20:51:07 +04:00
</policy>
<policy context="default">
<deny send_destination="org.freedesktop.systemd1"/>
core: Verify systemd1 DBus method callers via polkit DBus methods that retrieve information can be called by anyone. DBus methods that modify state of units are verified via polkit action: org.freedesktop.systemd1.manage-units DBus methods that modify state of unit files are verified via polkit action: org.freedesktop.systemd1.manage-unit-files DBus methods that reload the entire daemon state are verified via polkit action: org.freedesktop.systemd1.reload-daemon DBus methods that modify job state are callable from the clients that started the job. root (ie: CAP_SYS_ADMIN) can continue to perform all calls, property access etc. There are several DBus methods that can only be called by root. Open up the dbus1 policy for the above methods. (Heavily modified by Lennart, making use of the new bus_verify_polkit_async() version that doesn't force us to always pass the original callback around. Also, interactive auhentication must be opt-in, not unconditional, hence I turned this off.)
2014-08-06 13:45:36 +04:00
<!-- Completely open to anyone -->
dbus: install D-Bus policy file by default
2010-04-10 20:51:07 +04:00
<allow send_destination="org.freedesktop.systemd1"
send_interface="org.freedesktop.DBus.Introspectable"/>
dbus: allow all clients access to org.freedesktop.DBus.Peer
2011-02-09 17:21:20 +03:00
<allow send_destination="org.freedesktop.systemd1"
send_interface="org.freedesktop.DBus.Peer"/>
dbus: install D-Bus policy file by default
2010-04-10 20:51:07 +04:00
<allow send_destination="org.freedesktop.systemd1"
send_interface="org.freedesktop.DBus.Properties"
send_member="Get"/>
<allow send_destination="org.freedesktop.systemd1"
send_interface="org.freedesktop.DBus.Properties"
send_member="GetAll"/>
<allow send_destination="org.freedesktop.systemd1"
manager: automatically GC unreferenced units
2010-04-21 08:01:13 +04:00
send_interface="org.freedesktop.systemd1.Manager"
dbus: install D-Bus policy file by default
2010-04-10 20:51:07 +04:00
send_member="GetUnit"/>
systemctl: when calling 'status' accept a PID
2010-08-13 04:07:22 +04:00
<allow send_destination="org.freedesktop.systemd1"
send_interface="org.freedesktop.systemd1.Manager"
send_member="GetUnitByPID"/>
dbus: allow LoadUnit to unprivileged users
2011-03-17 05:41:29 +03:00
<allow send_destination="org.freedesktop.systemd1"
send_interface="org.freedesktop.systemd1.Manager"
send_member="LoadUnit"/>
dbus: install D-Bus policy file by default
2010-04-10 20:51:07 +04:00
<allow send_destination="org.freedesktop.systemd1"
manager: automatically GC unreferenced units
2010-04-21 08:01:13 +04:00
send_interface="org.freedesktop.systemd1.Manager"
dbus: install D-Bus policy file by default
2010-04-10 20:51:07 +04:00
send_member="GetJob"/>
<allow send_destination="org.freedesktop.systemd1"
manager: automatically GC unreferenced units
2010-04-21 08:01:13 +04:00
send_interface="org.freedesktop.systemd1.Manager"
dbus: install D-Bus policy file by default
2010-04-10 20:51:07 +04:00
send_member="ListUnits"/>
core: Filter by state behind the D-Bus API, not in the systemctl client.
2014-04-28 23:08:32 +04:00
<allow send_destination="org.freedesktop.systemd1"
send_interface="org.freedesktop.systemd1.Manager"
send_member="ListUnitsFiltered"/>
systemctl: hook up new install logic This adds a number of new options to systemctl, for presets, reenabling, masking/unmask, and runtime operations.
2011-07-25 06:58:02 +04:00
<allow send_destination="org.freedesktop.systemd1"
send_interface="org.freedesktop.systemd1.Manager"
send_member="ListUnitFiles"/>
<allow send_destination="org.freedesktop.systemd1"
send_interface="org.freedesktop.systemd1.Manager"
send_member="GetUnitFileState"/>
dbus: install D-Bus policy file by default
2010-04-10 20:51:07 +04:00
<allow send_destination="org.freedesktop.systemd1"
manager: automatically GC unreferenced units
2010-04-21 08:01:13 +04:00
send_interface="org.freedesktop.systemd1.Manager"
dbus: install D-Bus policy file by default
2010-04-10 20:51:07 +04:00
send_member="ListJobs"/>
<allow send_destination="org.freedesktop.systemd1"
manager: automatically GC unreferenced units
2010-04-21 08:01:13 +04:00
send_interface="org.freedesktop.systemd1.Manager"
dbus: install D-Bus policy file by default
2010-04-10 20:51:07 +04:00
send_member="Subscribe"/>
<allow send_destination="org.freedesktop.systemd1"
manager: automatically GC unreferenced units
2010-04-21 08:01:13 +04:00
send_interface="org.freedesktop.systemd1.Manager"
dbus: install D-Bus policy file by default
2010-04-10 20:51:07 +04:00
send_member="Unsubscribe"/>
<allow send_destination="org.freedesktop.systemd1"
manager: automatically GC unreferenced units
2010-04-21 08:01:13 +04:00
send_interface="org.freedesktop.systemd1.Manager"
dbus: install D-Bus policy file by default
2010-04-10 20:51:07 +04:00
send_member="Dump"/>
systemctl: add commands set-default and get-default systemctl set-default NAME links the default.target to the given unit, get-default prints out the path to the currently set default target.
2013-05-28 13:05:48 +04:00
<allow send_destination="org.freedesktop.systemd1"
send_interface="org.freedesktop.systemd1.Manager"
send_member="GetDefaultTarget"/>
core: Verify systemd1 DBus method callers via polkit DBus methods that retrieve information can be called by anyone. DBus methods that modify state of units are verified via polkit action: org.freedesktop.systemd1.manage-units DBus methods that modify state of unit files are verified via polkit action: org.freedesktop.systemd1.manage-unit-files DBus methods that reload the entire daemon state are verified via polkit action: org.freedesktop.systemd1.reload-daemon DBus methods that modify job state are callable from the clients that started the job. root (ie: CAP_SYS_ADMIN) can continue to perform all calls, property access etc. There are several DBus methods that can only be called by root. Open up the dbus1 policy for the above methods. (Heavily modified by Lennart, making use of the new bus_verify_polkit_async() version that doesn't force us to always pass the original callback around. Also, interactive auhentication must be opt-in, not unconditional, hence I turned this off.)
2014-08-06 13:45:36 +04:00
<!-- Managed via polkit or other criteria -->
<allow send_destination="org.freedesktop.systemd1"
send_interface="org.freedesktop.systemd1.Manager"
send_member="StartUnit"/>
<allow send_destination="org.freedesktop.systemd1"
send_interface="org.freedesktop.systemd1.Manager"
send_member="StartUnitReplace"/>
<allow send_destination="org.freedesktop.systemd1"
send_interface="org.freedesktop.systemd1.Manager"
send_member="StopUnit"/>
<allow send_destination="org.freedesktop.systemd1"
send_interface="org.freedesktop.systemd1.Manager"
send_member="ReloadUnit"/>
<allow send_destination="org.freedesktop.systemd1"
send_interface="org.freedesktop.systemd1.Manager"
send_member="RestartUnit"/>
<allow send_destination="org.freedesktop.systemd1"
send_interface="org.freedesktop.systemd1.Manager"
send_member="TryRestartUnit"/>
<allow send_destination="org.freedesktop.systemd1"
send_interface="org.freedesktop.systemd1.Manager"
send_member="ReloadOrRestartUnit"/>
<allow send_destination="org.freedesktop.systemd1"
send_interface="org.freedesktop.systemd1.Manager"
send_member="ReloadOrTryRestartUnit"/>
<allow send_destination="org.freedesktop.systemd1"
send_interface="org.freedesktop.systemd1.Manager"
send_member="KillUnit"/>
<allow send_destination="org.freedesktop.systemd1"
send_interface="org.freedesktop.systemd1.Manager"
send_member="ResetFailedUnit"/>
<allow send_destination="org.freedesktop.systemd1"
send_interface="org.freedesktop.systemd1.Manager"
send_member="SetUnitProperties"/>
<allow send_destination="org.freedesktop.systemd1"
send_interface="org.freedesktop.systemd1.Manager"
send_member="StartTransientUnit"/>
<allow send_destination="org.freedesktop.systemd1"
send_interface="org.freedesktop.systemd1.Manager"
send_member="CancelJob"/>
<allow send_destination="org.freedesktop.systemd1"
send_interface="org.freedesktop.systemd1.Manager"
send_member="Reload"/>
<allow send_destination="org.freedesktop.systemd1"
send_interface="org.freedesktop.systemd1.Manager"
send_member="Reexecute"/>
<allow send_destination="org.freedesktop.systemd1"
send_interface="org.freedesktop.systemd1.Manager"
send_member="EnableUnitFiles"/>
<allow send_destination="org.freedesktop.systemd1"
send_interface="org.freedesktop.systemd1.Manager"
send_member="DisableUnitFiles"/>
<allow send_destination="org.freedesktop.systemd1"
send_interface="org.freedesktop.systemd1.Manager"
send_member="ReenableUnitFiles"/>
<allow send_destination="org.freedesktop.systemd1"
send_interface="org.freedesktop.systemd1.Manager"
send_member="LinkUnitFiles"/>
<allow send_destination="org.freedesktop.systemd1"
send_interface="org.freedesktop.systemd1.Manager"
send_member="PresetUnitFiles"/>
<allow send_destination="org.freedesktop.systemd1"
send_interface="org.freedesktop.systemd1.Manager"
send_member="PresetUnitFilesWithMode"/>
<allow send_destination="org.freedesktop.systemd1"
send_interface="org.freedesktop.systemd1.Manager"
send_member="MaskUnitFiles"/>
<allow send_destination="org.freedesktop.systemd1"
send_interface="org.freedesktop.systemd1.Manager"
send_member="UnmaskUnitFiles"/>
<allow send_destination="org.freedesktop.systemd1"
send_interface="org.freedesktop.systemd1.Manager"
send_member="SetDefaultTarget"/>
<allow send_destination="org.freedesktop.systemd1"
send_interface="org.freedesktop.systemd1.Manager"
send_member="PresetAllUnitFiles"/>
systemctl: add add-wants and add-requires verbs
2014-10-08 13:59:46 +04:00
<allow send_destination="org.freedesktop.systemd1"
send_interface="org.freedesktop.systemd1.Manager"
send_member="AddDependencyUnitFiles"/>
core: Verify systemd1 DBus method callers via polkit DBus methods that retrieve information can be called by anyone. DBus methods that modify state of units are verified via polkit action: org.freedesktop.systemd1.manage-units DBus methods that modify state of unit files are verified via polkit action: org.freedesktop.systemd1.manage-unit-files DBus methods that reload the entire daemon state are verified via polkit action: org.freedesktop.systemd1.reload-daemon DBus methods that modify job state are callable from the clients that started the job. root (ie: CAP_SYS_ADMIN) can continue to perform all calls, property access etc. There are several DBus methods that can only be called by root. Open up the dbus1 policy for the above methods. (Heavily modified by Lennart, making use of the new bus_verify_polkit_async() version that doesn't force us to always pass the original callback around. Also, interactive auhentication must be opt-in, not unconditional, hence I turned this off.)
2014-08-06 13:45:36 +04:00
<allow send_destination="org.freedesktop.systemd1"
send_interface="org.freedesktop.systemd1.Job"
send_member="Cancel"/>
dbus: install D-Bus policy file by default
2010-04-10 20:51:07 +04:00
<allow receive_sender="org.freedesktop.systemd1"/>
</policy>
</busconfig>
Copy Permalink