summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorWilliam Jon McCann <mccann@jhu.edu>2007-03-08 21:06:55 -0500
committerWilliam Jon McCann <mccann@jhu.edu>2007-03-08 21:06:55 -0500
commitef7ee407bc58ea24db828cad9e1e7d628e322067 (patch)
treef030c8402176744f46ae2dc3c44adab34b17eef8
parentf4173a08a83db8879ae9c82356f7a9702cb4f883 (diff)
prevent the use of the glib properties interface
We don't want anyone to be able to directly modify properties. Also make these policies mandatory.
-rw-r--r--data/ConsoleKit.conf4
1 files changed, 3 insertions, 1 deletions
diff --git a/data/ConsoleKit.conf b/data/ConsoleKit.conf
index b6bfcdb..d40d887 100644
--- a/data/ConsoleKit.conf
+++ b/data/ConsoleKit.conf
@@ -20,7 +20,7 @@
</policy>
<!-- Allow anyone to invoke methods on the interfaces -->
- <policy context="default">
+ <policy context="mandatory">
<allow send_interface="org.freedesktop.ConsoleKit.Manager"/>
<allow send_interface="org.freedesktop.ConsoleKit.Seat"/>
<allow send_interface="org.freedesktop.ConsoleKit.Session"/>
@@ -31,6 +31,8 @@
send_member="Lock"/>
<deny send_interface="org.freedesktop.ConsoleKit.Session"
send_member="Unlock"/>
+ <deny send_destination="org.freedesktop.ConsoleKit"
+ send_interface="org.freedesktop.DBus.Properties" />
</policy>
<policy user="gdm">