Skip to content

Commit ce2c685

Browse files
Update mctpd-dbus.conf to open properties, introspection, and objects to unprivileged users, and full access to a special group
Signed-off-by: James Lee <james@codeconstruct.com.au>
1 parent 10f7b79 commit ce2c685

1 file changed

Lines changed: 25 additions & 1 deletion

File tree

conf/mctpd-dbus.conf

Lines changed: 25 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2,9 +2,33 @@
22
<!DOCTYPE busconfig PUBLIC "-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN"
33
"http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
44
<busconfig>
5+
<policy context="default">
6+
<deny send_destination="au.com.codeconstruct.MCTP1">
7+
8+
<allow receive_sender="au.com.codeconstruct.MCTP1"/>
9+
10+
<allow send_destination="au.com.codeconstruct.MCTP1"
11+
send_interface="org.freedesktop.DBus.Propeties"
12+
send_member="Get"/>
13+
14+
<allow send_destination="au.com.codeconstruct.MCTP1"
15+
send_interface="org.freedesktop.DBus.Propeties"
16+
send_member="GetAll"/>
17+
18+
<allow send_destination="au.com.codeconstruct.MCTP1"
19+
send_interface="org.freedesktop.DBus.Introspectable"/>
20+
21+
<allow send_destination="au.com.codeconstruct.MCTP1"
22+
send_interface="org.freedesktop.DBus.ObjectManager"/>
23+
</policy>
524
<policy user="mctpd">
625
<allow own="au.com.codeconstruct.MCTP1"/>
26+
</policy>
27+
<policy group="mctp-admin">
28+
<allow send_destination="au.com.codeconstruct.MCTP1"/>
29+
</policy>
30+
<policy user="root">
31+
<allow own="au.com.codeconstruct.MCTP1"/>
732
<allow send_destination="au.com.codeconstruct.MCTP1"/>
8-
<allow receive_sender="au.com.codeconstruct.MCTP1"/>
933
</policy>
1034
</busconfig>

0 commit comments

Comments
 (0)