summaryrefslogtreecommitdiffstats
path: root/daemon
diff options
context:
space:
mode:
authorMarcel Holtmann <marcel@holtmann.org>2007-01-23 07:34:33 +0000
committerMarcel Holtmann <marcel@holtmann.org>2007-01-23 07:34:33 +0000
commita93a56e08f57ee03f3cbddf61223d7a06cf4610e (patch)
treee8d12530532e79c918c74ad868f8179a9ae72118 /daemon
parent1bc5e02b94a1524de2ccb7e2f0704a895ad77de6 (diff)
Move bluetooth.conf D-Bus security file into daemon directory
Diffstat (limited to 'daemon')
-rw-r--r--daemon/Makefile.am6
-rw-r--r--daemon/bluetooth.conf33
2 files changed, 39 insertions, 0 deletions
diff --git a/daemon/Makefile.am b/daemon/Makefile.am
index f9474a8d..e7133f43 100644
--- a/daemon/Makefile.am
+++ b/daemon/Makefile.am
@@ -17,6 +17,12 @@ bluetoothd_service_echo_LDADD = \
@GLIB_LIBS@ @DBUS_LIBS@ @BLUEZ_LIBS@
endif
+if CONFIGFILES
+dbusdir = $(sysconfdir)/dbus-1/system.d
+
+dbus_DATA = bluetooth.conf
+endif
+
noinst_PROGRAMS = bluetoothd
bluetoothd_SOURCES = main.c system.h \
diff --git a/daemon/bluetooth.conf b/daemon/bluetooth.conf
new file mode 100644
index 00000000..aa642a2a
--- /dev/null
+++ b/daemon/bluetooth.conf
@@ -0,0 +1,33 @@
+<!-- This configuration file specifies the required security policies
+ for Bluetooth core service to work. -->
+
+<!DOCTYPE busconfig PUBLIC "-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN"
+ "http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
+<busconfig>
+
+ <!-- ../system.conf have denied everything, so we just punch some holes -->
+
+ <policy user="root">
+ <allow own="org.bluez"/>
+ </policy>
+
+ <policy at_console="true">
+ <allow send_destination="org.bluez.Manager"/>
+ <allow receive_sender="org.bluez.Manager"/>
+
+ <allow send_path="/org/bluez"/>
+
+ <allow send_destination="org.bluez.Adapter"/>
+ <allow receive_sender="org.bluez.Adapter"/>
+
+ <allow send_destination="org.bluez.Service"/>
+ <allow receive_sender="org.bluez.Service"/>
+
+ <allow send_destination="org.bluez.Database"/>
+ <allow receive_sender="org.bluez.Database"/>
+
+ <allow send_destination="org.bluez.Security"/>
+ <allow receive_sender="org.bluez.Security"/>
+ </policy>
+
+</busconfig>