summaryrefslogtreecommitdiffstats
path: root/data
diff options
context:
space:
mode:
authorWilliam Jon McCann <mccann@jhu.edu>2007-03-08 21:06:55 -0500
committerWilliam Jon McCann <mccann@jhu.edu>2007-03-08 21:06:55 -0500
commitef7ee407bc58ea24db828cad9e1e7d628e322067 (patch)
treef030c8402176744f46ae2dc3c44adab34b17eef8 /data
parentf4173a08a83db8879ae9c82356f7a9702cb4f883 (diff)
prevent the use of the glib properties interface
We don't want anyone to be able to directly modify properties. Also make these policies mandatory.
Diffstat (limited to 'data')
-rw-r--r--data/ConsoleKit.conf4
1 files changed, 3 insertions, 1 deletions
diff --git a/data/ConsoleKit.conf b/data/ConsoleKit.conf
index b6bfcdb..d40d887 100644
--- a/data/ConsoleKit.conf
+++ b/data/ConsoleKit.conf
@@ -20,7 +20,7 @@
</policy>
<!-- Allow anyone to invoke methods on the interfaces -->
- <policy context="default">
+ <policy context="mandatory">
<allow send_interface="org.freedesktop.ConsoleKit.Manager"/>
<allow send_interface="org.freedesktop.ConsoleKit.Seat"/>
<allow send_interface="org.freedesktop.ConsoleKit.Session"/>
@@ -31,6 +31,8 @@
send_member="Lock"/>
<deny send_interface="org.freedesktop.ConsoleKit.Session"
send_member="Unlock"/>
+ <deny send_destination="org.freedesktop.ConsoleKit"
+ send_interface="org.freedesktop.DBus.Properties" />
</policy>
<policy user="gdm">