From 1cc1c3615786c2f871044eaa471c7554bb2df3d2 Mon Sep 17 00:00:00 2001
From: Marcel Holtmann <marcel@holtmann.org>
Date: Sun, 9 Oct 2005 22:17:14 +0000
Subject: Add D-Bus security configuration

---
 hcid/Makefile.am |  2 +-
 hcid/dbus.conf   | 24 ++++++++++++++++++++++++
 2 files changed, 25 insertions(+), 1 deletion(-)
 create mode 100644 hcid/dbus.conf

diff --git a/hcid/Makefile.am b/hcid/Makefile.am
index 7f235c73..f195c152 100644
--- a/hcid/Makefile.am
+++ b/hcid/Makefile.am
@@ -35,7 +35,7 @@ AM_YFLAGS = -d
 
 CLEANFILES = lexer.c parser.c parser.h
 
-EXTRA_DIST = $(man_MANS) $(conf_DATA) dbus.h dbus.c
+EXTRA_DIST = $(man_MANS) $(conf_DATA) dbus.h dbus.c dbus.conf
 
 MAINTAINERCLEANFILES = Makefile.in
 
diff --git a/hcid/dbus.conf b/hcid/dbus.conf
new file mode 100644
index 00000000..af3c49e7
--- /dev/null
+++ b/hcid/dbus.conf
@@ -0,0 +1,24 @@
+<!-- This configuration file specifies the required security policies
+     for BlueZ hcid to work. -->
+
+<!DOCTYPE busconfig PUBLIC "-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN"
+ "http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
+<busconfig>
+
+  <!-- ../system.conf have denied everything, so we just punch some holes -->
+
+  <policy context="default">
+    <allow own="org.bluez"/>
+
+    <allow send_destination="org.bluez.Device"/>
+    <allow receive_sender="org.bluez.Device"/>
+
+    <allow send_path="/org/bluez/Device"/>
+
+    <allow send_destination="org.bluez.Manager"/>
+    <allow receive_sender="org.bluez.Manager"/>
+
+    <allow send_path="/org/bluez/Manager"/>
+  </policy>
+
+</busconfig>
-- 
cgit