sl@0
|
1 |
<!DOCTYPE busconfig PUBLIC "-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN"
|
sl@0
|
2 |
"http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
|
sl@0
|
3 |
<busconfig>
|
sl@0
|
4 |
<!-- The following demonstrates how to punch holes in a default deny-all
|
sl@0
|
5 |
policy so that a particular user can own a service, and other
|
sl@0
|
6 |
connections can get messages from it -->
|
sl@0
|
7 |
|
sl@0
|
8 |
<!-- Only root can own the FooService service, and
|
sl@0
|
9 |
this user can only send the one kind of message -->
|
sl@0
|
10 |
<policy user="root">
|
sl@0
|
11 |
<allow own="org.foo.FooService"/>
|
sl@0
|
12 |
<allow send_interface="org.foo.FooBroadcastInterface"/>
|
sl@0
|
13 |
</policy>
|
sl@0
|
14 |
|
sl@0
|
15 |
<!-- Allow any connection to receive the message, but
|
sl@0
|
16 |
only if the message is sent by the owner of FooService -->
|
sl@0
|
17 |
<policy context="default">
|
sl@0
|
18 |
<allow receive_interface="org.foo.FooBroadcastInterface" receive_sender="org.foo.FooService"/>
|
sl@0
|
19 |
</policy>
|
sl@0
|
20 |
</busconfig>
|