diff options
| author | Colin Walters <walters@verbum.org> | 2009-01-18 13:06:37 -0500 | 
|---|---|---|
| committer | David Zeuthen <davidz@redhat.com> | 2009-01-18 13:06:37 -0500 | 
| commit | e0d9cc359b3099307067107b59ec691418e280b8 (patch) | |
| tree | d13c7db8b03a92f88d5e2f66182dab4f37f620f6 | |
| parent | 6ef0f62dc8b41c6904099c2d2836747da38d69df (diff) | |
fix up D-Bus permissions
| -rw-r--r-- | data/ConsoleKit.conf | 120 | 
1 files changed, 80 insertions, 40 deletions
diff --git a/data/ConsoleKit.conf b/data/ConsoleKit.conf index 710d32a..ccbc500 100644 --- a/data/ConsoleKit.conf +++ b/data/ConsoleKit.conf @@ -8,88 +8,128 @@      <allow own="org.freedesktop.ConsoleKit"/>      <!-- Allow all methods on interfaces --> -    <allow send_interface="org.freedesktop.ConsoleKit.Manager"/> -    <allow send_interface="org.freedesktop.ConsoleKit.Seat"/> -    <allow send_interface="org.freedesktop.ConsoleKit.Session"/> +    <allow send_destination="org.freedesktop.ConsoleKit"/>    </policy>    <!-- Deny all and then allow some methods on interfaces -->    <policy context="default"> -    <deny send_interface="org.freedesktop.ConsoleKit.Manager"/> -    <deny send_interface="org.freedesktop.ConsoleKit.Seat"/> -    <deny send_interface="org.freedesktop.ConsoleKit.Session"/> +    <allow send_destination="org.freedesktop.ConsoleKit" +           send_interface="org.freedesktop.DBus.Introspectable"/> +    <deny send_destination="org.freedesktop.ConsoleKit"  +          send_interface="org.freedesktop.ConsoleKit.Manager"/> +    <deny send_destination="org.freedesktop.ConsoleKit"  +          send_interface="org.freedesktop.ConsoleKit.Seat"/> +    <deny send_destination="org.freedesktop.ConsoleKit"  +          send_interface="org.freedesktop.ConsoleKit.Session"/>      <deny send_destination="org.freedesktop.ConsoleKit"            send_interface="org.freedesktop.DBus.Properties" /> -    <allow send_interface="org.freedesktop.ConsoleKit.Manager" +    <allow send_destination="org.freedesktop.ConsoleKit" +           send_interface="org.freedesktop.ConsoleKit.Manager"             send_member="Restart"/> -    <allow send_interface="org.freedesktop.ConsoleKit.Manager" +    <allow send_destination="org.freedesktop.ConsoleKit" +           send_interface="org.freedesktop.ConsoleKit.Manager"             send_member="Stop"/> -    <allow send_interface="org.freedesktop.ConsoleKit.Manager" +    <allow send_destination="org.freedesktop.ConsoleKit" +           send_interface="org.freedesktop.ConsoleKit.Manager"             send_member="OpenSession"/> -    <allow send_interface="org.freedesktop.ConsoleKit.Manager" +    <allow send_destination="org.freedesktop.ConsoleKit" +           send_interface="org.freedesktop.ConsoleKit.Manager"             send_member="CloseSession"/> -    <allow send_interface="org.freedesktop.ConsoleKit.Manager" +    <allow send_destination="org.freedesktop.ConsoleKit" +           send_interface="org.freedesktop.ConsoleKit.Manager"             send_member="GetSeats"/> -    <allow send_interface="org.freedesktop.ConsoleKit.Manager" +    <allow send_destination="org.freedesktop.ConsoleKit" +           send_interface="org.freedesktop.ConsoleKit.Manager"             send_member="GetSessionForCookie"/> -    <allow send_interface="org.freedesktop.ConsoleKit.Manager" +    <allow send_destination="org.freedesktop.ConsoleKit" +           send_interface="org.freedesktop.ConsoleKit.Manager"             send_member="GetSessionForUnixProcess"/> -    <allow send_interface="org.freedesktop.ConsoleKit.Manager" +    <allow send_destination="org.freedesktop.ConsoleKit" +           send_interface="org.freedesktop.ConsoleKit.Manager"             send_member="GetCurrentSession"/> -    <allow send_interface="org.freedesktop.ConsoleKit.Manager" +    <allow send_destination="org.freedesktop.ConsoleKit" +           send_interface="org.freedesktop.ConsoleKit.Manager"             send_member="GetSessionsForUnixUser"/> -    <allow send_interface="org.freedesktop.ConsoleKit.Manager" +    <allow send_destination="org.freedesktop.ConsoleKit" +           send_interface="org.freedesktop.ConsoleKit.Manager"             send_member="GetSessionsForUser"/> -    <allow send_interface="org.freedesktop.ConsoleKit.Manager" +    <allow send_destination="org.freedesktop.ConsoleKit" +           send_interface="org.freedesktop.ConsoleKit.Manager"             send_member="GetSystemIdleHint"/> -    <allow send_interface="org.freedesktop.ConsoleKit.Manager" +    <allow send_destination="org.freedesktop.ConsoleKit" +           send_interface="org.freedesktop.ConsoleKit.Manager"             send_member="GetSystemIdleSinceHint"/> -    <allow send_interface="org.freedesktop.ConsoleKit.Seat" +    <allow send_destination="org.freedesktop.ConsoleKit" +           send_interface="org.freedesktop.ConsoleKit.Seat"             send_member="GetId"/> -    <allow send_interface="org.freedesktop.ConsoleKit.Seat" +    <allow send_destination="org.freedesktop.ConsoleKit" +           send_interface="org.freedesktop.ConsoleKit.Seat"             send_member="GetSessions"/> -    <allow send_interface="org.freedesktop.ConsoleKit.Seat" +    <allow send_destination="org.freedesktop.ConsoleKit" +           send_interface="org.freedesktop.ConsoleKit.Seat"             send_member="GetDevices"/> -    <allow send_interface="org.freedesktop.ConsoleKit.Seat" +    <allow send_destination="org.freedesktop.ConsoleKit" +           send_interface="org.freedesktop.ConsoleKit.Seat"             send_member="GetActiveSession"/> -    <allow send_interface="org.freedesktop.ConsoleKit.Seat" +    <allow send_destination="org.freedesktop.ConsoleKit" +           send_interface="org.freedesktop.ConsoleKit.Seat"             send_member="CanActivateSessions"/> -    <allow send_interface="org.freedesktop.ConsoleKit.Seat" +    <allow send_destination="org.freedesktop.ConsoleKit" +           send_interface="org.freedesktop.ConsoleKit.Seat"             send_member="ActivateSession"/> -    <allow send_interface="org.freedesktop.ConsoleKit.Session" +    <allow send_destination="org.freedesktop.ConsoleKit" +           send_interface="org.freedesktop.ConsoleKit.Session"             send_member="GetId"/> -    <allow send_interface="org.freedesktop.ConsoleKit.Session" +    <allow send_destination="org.freedesktop.ConsoleKit" +           send_interface="org.freedesktop.ConsoleKit.Session"             send_member="GetSeatId"/> -    <allow send_interface="org.freedesktop.ConsoleKit.Session" +    <allow send_destination="org.freedesktop.ConsoleKit" +           send_interface="org.freedesktop.ConsoleKit.Session"             send_member="GetLoginSessionId"/> -    <allow send_interface="org.freedesktop.ConsoleKit.Session" +    <allow send_destination="org.freedesktop.ConsoleKit" +           send_interface="org.freedesktop.ConsoleKit.Session"             send_member="GetSessionType"/> -    <allow send_interface="org.freedesktop.ConsoleKit.Session" +    <allow send_destination="org.freedesktop.ConsoleKit" +           send_interface="org.freedesktop.ConsoleKit.Session"             send_member="GetUser"/> -    <allow send_interface="org.freedesktop.ConsoleKit.Session" +    <allow send_destination="org.freedesktop.ConsoleKit" +           send_interface="org.freedesktop.ConsoleKit.Session"             send_member="GetUnixUser"/> -    <allow send_interface="org.freedesktop.ConsoleKit.Session" +    <allow send_destination="org.freedesktop.ConsoleKit" +           send_interface="org.freedesktop.ConsoleKit.Session"             send_member="GetX11Display"/> -    <allow send_interface="org.freedesktop.ConsoleKit.Session" +    <allow send_destination="org.freedesktop.ConsoleKit" +           send_interface="org.freedesktop.ConsoleKit.Session"             send_member="GetX11DisplayDevice"/> -    <allow send_interface="org.freedesktop.ConsoleKit.Session" +    <allow send_destination="org.freedesktop.ConsoleKit" +           send_interface="org.freedesktop.ConsoleKit.Session"             send_member="GetDisplayDevice"/> -    <allow send_interface="org.freedesktop.ConsoleKit.Session" +    <allow send_destination="org.freedesktop.ConsoleKit" +           send_interface="org.freedesktop.ConsoleKit.Session"             send_member="GetRemoteHostName"/> -    <allow send_interface="org.freedesktop.ConsoleKit.Session" +    <allow send_destination="org.freedesktop.ConsoleKit" +           send_interface="org.freedesktop.ConsoleKit.Session"             send_member="IsActive"/> -    <allow send_interface="org.freedesktop.ConsoleKit.Session" +    <allow send_destination="org.freedesktop.ConsoleKit" +           send_interface="org.freedesktop.ConsoleKit.Session"             send_member="IsLocal"/> -    <allow send_interface="org.freedesktop.ConsoleKit.Session" +    <allow send_destination="org.freedesktop.ConsoleKit" +           send_interface="org.freedesktop.ConsoleKit.Session"             send_member="GetCreationTime"/> -    <allow send_interface="org.freedesktop.ConsoleKit.Session" +    <allow send_destination="org.freedesktop.ConsoleKit" +           send_interface="org.freedesktop.ConsoleKit.Session"             send_member="Activate"/> -    <allow send_interface="org.freedesktop.ConsoleKit.Session" +    <allow send_destination="org.freedesktop.ConsoleKit" +           send_interface="org.freedesktop.ConsoleKit.Session"             send_member="GetIdleHint"/> -    <allow send_interface="org.freedesktop.ConsoleKit.Session" +    <allow send_destination="org.freedesktop.ConsoleKit" +           send_interface="org.freedesktop.ConsoleKit.Session" +           send_member="SetIdleHint"/> +    <allow send_destination="org.freedesktop.ConsoleKit" +           send_interface="org.freedesktop.ConsoleKit.Session"             send_member="GetIdleSinceHint"/>      <allow send_interface="org.freedesktop.ConsoleKit.Session"             send_member="SetIdleHint"/>  | 
