From 291211ac2ba6a99c8d5a09a6ec1f91f4bc0f0a30 Mon Sep 17 00:00:00 2001
From: Dan Williams <dcbw@redhat.com>
Date: Tue, 4 May 2010 12:07:57 -0700
Subject: [PATCH] dbus: ensure only root can change debug levels

---
 src/NetworkManager.conf | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/src/NetworkManager.conf b/src/NetworkManager.conf
index 87814bec2..8d0831400 100644
--- a/src/NetworkManager.conf
+++ b/src/NetworkManager.conf
@@ -56,6 +56,10 @@
 
                 <allow send_destination="org.freedesktop.NetworkManager"
                        send_interface="org.freedesktop.NetworkManager.VPN.Connection"/>
+
+                <deny send_destination="org.freedesktop.NetworkManager"
+                       send_interface="org.freedesktop.NetworkManager"
+                       send_member="SetLogging"/>
         </policy>
         <policy context="default">
                 <deny own="org.freedesktop.NetworkManager"/>
@@ -64,6 +68,10 @@
                 <deny send_destination="org.freedesktop.NetworkManager"/>
                 <allow send_destination="org.freedesktop.NetworkManagerSystemSettings"/>
 
+                <deny send_destination="org.freedesktop.NetworkManager"
+                       send_interface="org.freedesktop.NetworkManager"
+                       send_member="SetLogging"/>
+
                 <!-- The org.freedesktop.NetworkManagerSettings.Connection.Secrets
                      interface is secured via PolicyKit.
                   -->