Files
iio-sensor-proxy/data/net.hadess.SensorProxy.conf.in
Frederic Crozat 2a2f5c5c3b data: fix permissions when geoclue runs with a different user (#185)
Geoclue can be configured to use another user than geoclue.
2017-09-22 13:31:44 +02:00

34 lines
2.0 KiB
XML

<?xml version="1.0" encoding="UTF-8"?> <!-- -*- XML -*- -->
<!DOCTYPE busconfig PUBLIC
"-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN"
"http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
<busconfig>
<!-- Only root can own the service -->
<policy user="root">
<allow own="net.hadess.SensorProxy"/>
</policy>
<!-- Only Geoclue can access the compass -->
<policy user="@geoclue_user@">
<allow send_destination="net.hadess.SensorProxy" send_interface="net.hadess.SensorProxy.Compass" send_path="/net/hadess/SensorProxy/Compass"/>
<allow send_destination="net.hadess.SensorProxy" send_interface="org.freedesktop.DBus.Introspectable" send_path="/net/hadess/SensorProxy/Compass"/>
<allow send_destination="net.hadess.SensorProxy" send_interface="org.freedesktop.DBus.Properties" send_path="/net/hadess/SensorProxy/Compass"/>
<allow send_destination="net.hadess.SensorProxy" send_interface="org.freedesktop.DBus.Peer" send_path="/net/hadess/SensorProxy/Compass"/>
</policy>
<!-- Anyone can talk to the main interface -->
<policy context="default">
<allow send_destination="net.hadess.SensorProxy" send_interface="net.hadess.SensorProxy"/>
<allow send_destination="net.hadess.SensorProxy" send_interface="org.freedesktop.DBus.Introspectable"/>
<allow send_destination="net.hadess.SensorProxy" send_interface="org.freedesktop.DBus.Properties"/>
<allow send_destination="net.hadess.SensorProxy" send_interface="org.freedesktop.DBus.Peer"/>
<deny send_destination="net.hadess.SensorProxy" send_interface="org.freedesktop.DBus.Introspectable" send_path="/net/hadess/SensorProxy/Compass"/>
<deny send_destination="net.hadess.SensorProxy" send_interface="org.freedesktop.DBus.Properties" send_path="/net/hadess/SensorProxy/Compass"/>
<deny send_destination="net.hadess.SensorProxy" send_interface="org.freedesktop.DBus.Peer" send_path="/net/hadess/SensorProxy/Compass"/>
<!-- <deny send_destination="net.hadess.SensorProxy" send_interface="net.hadess.SensorProxy.Compass"/> -->
</policy>
</busconfig>