1 files changed, 49 insertions, 0 deletions
diff --git a/data/console-kit.conf b/data/console-kit.conf
new file mode 100644
index 0000000..b6bfcdb
--- /dev/null
+++ b/data/console-kit.conf
@@ -0,0 +1,49 @@
+<!DOCTYPE busconfig PUBLIC
+ "-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN"
+ "http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
+<busconfig>
+
+  <!-- Only root can own the service -->
+  <policy user="root">
+    <allow own="org.freedesktop.ConsoleKit"/>
+
+    <allow send_interface="org.freedesktop.ConsoleKit.Manager"/>
+    <allow send_interface="org.freedesktop.ConsoleKit.Seat"/>
+    <allow send_interface="org.freedesktop.ConsoleKit.Session"/>
+
+    <allow send_interface="org.freedesktop.ConsoleKit.Manager"
+           send_member="OpenConsoleWithParameters"/>
+    <allow send_interface="org.freedesktop.ConsoleKit.Session"
+           send_member="Lock"/>
+    <allow send_interface="org.freedesktop.ConsoleKit.Session"
+           send_member="Unlock"/>
+  </policy>
+
+  <!-- Allow anyone to invoke methods on the interfaces -->
+  <policy context="default">
+    <allow send_interface="org.freedesktop.ConsoleKit.Manager"/>
+    <allow send_interface="org.freedesktop.ConsoleKit.Seat"/>
+    <allow send_interface="org.freedesktop.ConsoleKit.Session"/>
+
+    <deny send_interface="org.freedesktop.ConsoleKit.Manager"
+          send_member="OpenSessionWithParameters"/>
+    <deny send_interface="org.freedesktop.ConsoleKit.Session"
+          send_member="Lock"/>
+    <deny send_interface="org.freedesktop.ConsoleKit.Session"
+          send_member="Unlock"/>
+  </policy>
+
+  <policy user="gdm">
+    <allow send_interface="org.freedesktop.ConsoleKit.Manager"/>
+    <allow send_interface="org.freedesktop.ConsoleKit.Seat"/>
+    <allow send_interface="org.freedesktop.ConsoleKit.Session"/>
+
+    <allow send_interface="org.freedesktop.ConsoleKit.Manager"
+           send_member="OpenConsoleWithParameters"/>
+    <allow send_interface="org.freedesktop.ConsoleKit.Session"
+           send_member="Lock"/>
+    <allow send_interface="org.freedesktop.ConsoleKit.Session"
+           send_member="Unlock"/>
+  </policy>
+
+</busconfig>