From e70bc43cdf75b36e7ad3d29e9a6f8ee1461e7d5e Mon Sep 17 00:00:00 2001
From: Lennart Poettering <lennart@poettering.net>
Date: Mon, 4 Aug 2014 18:57:37 +0200
Subject: [PATCH] machine: make sure unpriviliged "machinectl status" can show
 the machine's OS version

---
 src/machine/org.freedesktop.machine1.conf | 14 +++++++++-----
 1 file changed, 9 insertions(+), 5 deletions(-)

diff --git a/src/machine/org.freedesktop.machine1.conf b/src/machine/org.freedesktop.machine1.conf
index 3a77c70bf11..ac1aee855dc 100644
--- a/src/machine/org.freedesktop.machine1.conf
+++ b/src/machine/org.freedesktop.machine1.conf
@@ -40,10 +40,6 @@
                        send_interface="org.freedesktop.machine1.Manager"
                        send_member="ListMachines"/>
 
-                <allow send_destination="org.freedesktop.machine1"
-                       send_interface="org.freedesktop.machine1.Manager"
-                       send_member="GetMachineAddresses"/>
-
                 <allow send_destination="org.freedesktop.machine1"
                        send_interface="org.freedesktop.machine1.Manager"
                        send_member="GetMachine"/>
@@ -52,13 +48,21 @@
                        send_interface="org.freedesktop.machine1.Manager"
                        send_member="GetMachineByPID"/>
 
+                <allow send_destination="org.freedesktop.machine1"
+                       send_interface="org.freedesktop.machine1.Manager"
+                       send_member="GetMachineAddresses"/>
+
+                <allow send_destination="org.freedesktop.machine1"
+                       send_interface="org.freedesktop.machine1.Manager"
+                       send_member="GetMachineOSRelease"/>
+
                 <allow send_destination="org.freedesktop.machine1"
                        send_interface="org.freedesktop.machine1.Machine"
                        send_member="GetAddresses"/>
 
                 <allow send_destination="org.freedesktop.machine1"
                        send_interface="org.freedesktop.machine1.Machine"
-                       send_member="GetMachineOSRelease"/>
+                       send_member="GetOSRelease"/>
 
                 <allow receive_sender="org.freedesktop.machine1"/>
         </policy>