policy: implement Manager interface rules
This commit is contained in:
@@ -5,12 +5,30 @@
|
|||||||
<policy context="default">
|
<policy context="default">
|
||||||
<deny send_destination="org.freedesktop.ModemManager1"/>
|
<deny send_destination="org.freedesktop.ModemManager1"/>
|
||||||
|
|
||||||
<allow send_destination="org.freedesktop.ModemManager1"
|
|
||||||
send_interface="org.freedesktop.DBus.Introspectable"/>
|
|
||||||
|
|
||||||
<!-- Methods listed here are explicitly allowed or PolicyKit protected.
|
<!-- Methods listed here are explicitly allowed or PolicyKit protected.
|
||||||
The rest are restricted to root for security.
|
The rest are restricted to root for security.
|
||||||
-->
|
-->
|
||||||
|
|
||||||
|
<!-- org.freedesktop.ModemManager1.xml -->
|
||||||
|
|
||||||
|
<!-- Allowed for everyone -->
|
||||||
|
<allow send_destination="org.freedesktop.ModemManager1"
|
||||||
|
send_interface="org.freedesktop.DBus.Introspectable"/>
|
||||||
|
|
||||||
|
<allow send_destination="org.freedesktop.ModemManager1"
|
||||||
|
send_interface="org.freedesktop.DBus.Properties"/>
|
||||||
|
|
||||||
|
<allow send_destination="org.freedesktop.ModemManager1"
|
||||||
|
send_interface="org.freedesktop.DBus.ObjectManager"/>
|
||||||
|
|
||||||
|
<!-- Protected by the Control policy rule -->
|
||||||
|
<allow send_destination="org.freedesktop.ModemManager1"
|
||||||
|
send_interface="org.freedesktop.ModemManager1"
|
||||||
|
send_member="ScanDevices"/>
|
||||||
|
|
||||||
|
<allow send_destination="org.freedesktop.ModemManager1"
|
||||||
|
send_interface="org.freedesktop.ModemManager1"
|
||||||
|
send_member="SetLogging"/>
|
||||||
</policy>
|
</policy>
|
||||||
|
|
||||||
<policy user="root">
|
<policy user="root">
|
||||||
|
Reference in New Issue
Block a user