debian-atomic-system-files/apt-ostree-systemd/org.debian.aptostree1.conf
2025-09-01 14:05:34 -07:00

40 lines
1.4 KiB
XML

<?xml version="1.0" encoding="UTF-8"?> <!-- -*- XML -*- -->
<!DOCTYPE busconfig PUBLIC
"-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN"
"http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
<busconfig>
<!-- Only root can own the service -->
<policy user="root">
<allow own="org.debian.aptostree1"/>
<allow send_destination="org.debian.aptostree1"/>
</policy>
<!-- Allow anyone to call into the service - we'll reject callers using PolicyKit -->
<policy context="default">
<deny send_destination="org.debian.aptostree1"/>
<allow send_destination="org.debian.aptostree1"
send_interface="org.freedesktop.DBus.Introspectable"/>
<allow send_destination="org.debian.aptostree1"
send_interface="org.freedesktop.DBus.ObjectManager"/>
<allow send_destination="org.debian.aptostree1"
send_interface="org.freedesktop.DBus.Peer"/>
<allow send_destination="org.debian.aptostree1"
send_interface="org.freedesktop.DBus.Properties"
send_member="Get"/>
<allow send_destination="org.debian.aptostree1"
send_interface="org.freedesktop.DBus.Properties"
send_member="GetAll"/>
<allow send_destination="org.debian.aptostree1"
send_interface="org.debian.aptostree1.OS"/>
<allow send_destination="org.debian.aptostree1"
send_interface="org.debian.aptostree1.Sysroot"/>
</policy>
</busconfig>