From 8ca75c8f99ff390a78402d3d32b7b23abab20035 Mon Sep 17 00:00:00 2001
From: Lennart Poettering <lennart@poettering.net>
Date: Tue, 16 Jun 2009 22:24:42 +0200
Subject: limit usage of Exit()/ResetKnown()/ResetAll() to root

---
 org.freedesktop.RealtimeKit1.conf | 13 +++++++++++++
 1 file changed, 13 insertions(+)

diff --git a/org.freedesktop.RealtimeKit1.conf b/org.freedesktop.RealtimeKit1.conf
index e3b5263..c8d4eb5 100644
--- a/org.freedesktop.RealtimeKit1.conf
+++ b/org.freedesktop.RealtimeKit1.conf
@@ -14,5 +14,18 @@
   <policy context="default">
     <allow send_destination="org.freedesktop.RealtimeKit1"/>
     <allow receive_sender="org.freedesktop.RealtimeKit1"/>
+
+    <deny send_destination="org.freedesktop.RealtimeKit1"
+          send_interface="org.freedesktop.RealtimeKit1" send_member="Exit"/>
+    <deny send_destination="org.freedesktop.RealtimeKit1"
+          send_interface="org.freedesktop.RealtimeKit1" send_member="ResetKnown"/>
+    <deny send_destination="org.freedesktop.RealtimeKit1"
+          send_interface="org.freedesktop.RealtimeKit1" send_member="ResetAll"/>
   </policy>
+
+  <policy user="root">
+    <allow send_destination="org.freedesktop.RealtimeKit1"/>
+    <allow receive_sender="org.freedesktop.RealtimeKit1"/>
+  </policy>
+
 </busconfig>
-- 
cgit