From a93a56e08f57ee03f3cbddf61223d7a06cf4610e Mon Sep 17 00:00:00 2001
From: Marcel Holtmann <marcel@holtmann.org>
Date: Tue, 23 Jan 2007 07:34:33 +0000
Subject: Move bluetooth.conf D-Bus security file into daemon directory

---
 daemon/Makefile.am    |  6 ++++++
 daemon/bluetooth.conf | 33 +++++++++++++++++++++++++++++++++
 2 files changed, 39 insertions(+)
 create mode 100644 daemon/bluetooth.conf

(limited to 'daemon')

diff --git a/daemon/Makefile.am b/daemon/Makefile.am
index f9474a8d..e7133f43 100644
--- a/daemon/Makefile.am
+++ b/daemon/Makefile.am
@@ -17,6 +17,12 @@ bluetoothd_service_echo_LDADD = \
 	@GLIB_LIBS@ @DBUS_LIBS@ @BLUEZ_LIBS@
 endif
 
+if CONFIGFILES
+dbusdir = $(sysconfdir)/dbus-1/system.d
+
+dbus_DATA = bluetooth.conf
+endif
+
 noinst_PROGRAMS = bluetoothd
 
 bluetoothd_SOURCES = main.c system.h \
diff --git a/daemon/bluetooth.conf b/daemon/bluetooth.conf
new file mode 100644
index 00000000..aa642a2a
--- /dev/null
+++ b/daemon/bluetooth.conf
@@ -0,0 +1,33 @@
+<!-- This configuration file specifies the required security policies
+     for Bluetooth core service to work. -->
+
+<!DOCTYPE busconfig PUBLIC "-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN"
+ "http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
+<busconfig>
+
+  <!-- ../system.conf have denied everything, so we just punch some holes -->
+
+  <policy user="root">
+    <allow own="org.bluez"/>
+  </policy>
+
+  <policy at_console="true">
+    <allow send_destination="org.bluez.Manager"/>
+    <allow receive_sender="org.bluez.Manager"/>
+
+    <allow send_path="/org/bluez"/>
+
+    <allow send_destination="org.bluez.Adapter"/>
+    <allow receive_sender="org.bluez.Adapter"/>
+
+    <allow send_destination="org.bluez.Service"/>
+    <allow receive_sender="org.bluez.Service"/>
+
+    <allow send_destination="org.bluez.Database"/>
+    <allow receive_sender="org.bluez.Database"/>
+
+    <allow send_destination="org.bluez.Security"/>
+    <allow receive_sender="org.bluez.Security"/>
+  </policy>
+
+</busconfig>
-- 
cgit