From ef7ee407bc58ea24db828cad9e1e7d628e322067 Mon Sep 17 00:00:00 2001
From: William Jon McCann <mccann@jhu.edu>
Date: Thu, 8 Mar 2007 21:06:55 -0500
Subject: prevent the use of the glib properties interface

We don't want anyone to be able to directly modify properties.
Also make these policies mandatory.
---
 data/ConsoleKit.conf | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/data/ConsoleKit.conf b/data/ConsoleKit.conf
index b6bfcdb..d40d887 100644
--- a/data/ConsoleKit.conf
+++ b/data/ConsoleKit.conf
@@ -20,7 +20,7 @@
   </policy>
 
   <!-- Allow anyone to invoke methods on the interfaces -->
-  <policy context="default">
+  <policy context="mandatory">
     <allow send_interface="org.freedesktop.ConsoleKit.Manager"/>
     <allow send_interface="org.freedesktop.ConsoleKit.Seat"/>
     <allow send_interface="org.freedesktop.ConsoleKit.Session"/>
@@ -31,6 +31,8 @@
           send_member="Lock"/>
     <deny send_interface="org.freedesktop.ConsoleKit.Session"
           send_member="Unlock"/>
+    <deny send_destination="org.freedesktop.ConsoleKit"
+          send_interface="org.freedesktop.DBus.Properties" />
   </policy>
 
   <policy user="gdm">
-- 
cgit