From 388c25895e899d02d2bb76ad0749db4c6b3788fd Mon Sep 17 00:00:00 2001
From: Marcel Holtmann <marcel@holtmann.org>
Date: Fri, 5 Dec 2008 21:01:16 +0100
Subject: Add deny statements to D-Bus access policy

---
 src/bluetooth.conf | 18 +++++++++++++++++-
 1 file changed, 17 insertions(+), 1 deletion(-)

diff --git a/src/bluetooth.conf b/src/bluetooth.conf
index ecced073..6f5d1664 100644
--- a/src/bluetooth.conf
+++ b/src/bluetooth.conf
@@ -13,7 +13,6 @@
 
   <policy at_console="true">
     <allow send_path="/"/>
-    <allow send_path="/org/bluez"/>
 
     <allow send_destination="org.bluez.Manager"/>
     <allow receive_sender="org.bluez.Manager"/>
@@ -23,6 +22,23 @@
 
     <allow send_destination="org.bluez.Device"/>
     <allow receive_sender="org.bluez.Device"/>
+
+    <allow send_destination="org.bluez.Service"/>
+    <allow receive_sender="org.bluez.Service"/>
+  </policy>
+
+  <policy context="default">
+    <deny send_destination="org.bluez.Manager"/>
+    <deny receive_sender="org.bluez.Manager"/>
+
+    <deny send_destination="org.bluez.Adapter"/>
+    <deny receive_sender="org.bluez.Adapter"/>
+
+    <deny send_destination="org.bluez.Device"/>
+    <deny receive_sender="org.bluez.Device"/>  
+
+    <deny send_destination="org.bluez.Service"/>
+    <deny receive_sender="org.bluez.Service"/> 
   </policy>
 
 </busconfig>
-- 
cgit