diff options
author | William Jon McCann <mccann@jhu.edu> | 2007-03-08 21:06:55 -0500 |
---|---|---|
committer | William Jon McCann <mccann@jhu.edu> | 2007-03-08 21:06:55 -0500 |
commit | ef7ee407bc58ea24db828cad9e1e7d628e322067 (patch) | |
tree | f030c8402176744f46ae2dc3c44adab34b17eef8 | |
parent | f4173a08a83db8879ae9c82356f7a9702cb4f883 (diff) |
prevent the use of the glib properties interface
We don't want anyone to be able to directly modify properties.
Also make these policies mandatory.
-rw-r--r-- | data/ConsoleKit.conf | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/data/ConsoleKit.conf b/data/ConsoleKit.conf index b6bfcdb..d40d887 100644 --- a/data/ConsoleKit.conf +++ b/data/ConsoleKit.conf @@ -20,7 +20,7 @@ </policy> <!-- Allow anyone to invoke methods on the interfaces --> - <policy context="default"> + <policy context="mandatory"> <allow send_interface="org.freedesktop.ConsoleKit.Manager"/> <allow send_interface="org.freedesktop.ConsoleKit.Seat"/> <allow send_interface="org.freedesktop.ConsoleKit.Session"/> @@ -31,6 +31,8 @@ send_member="Lock"/> <deny send_interface="org.freedesktop.ConsoleKit.Session" send_member="Unlock"/> + <deny send_destination="org.freedesktop.ConsoleKit" + send_interface="org.freedesktop.DBus.Properties" /> </policy> <policy user="gdm"> |