diff options
| author | Aleksander Morgado <aleksander@lanedo.com> | 2012-02-26 22:45:03 +0100 |
|---|---|---|
| committer | Aleksander Morgado <aleksander@lanedo.com> | 2012-03-16 14:53:15 +0100 |
| commit | dad31604cb4237d94df0d85ecb61fe46aa42fa78 (patch) | |
| tree | 43edee56ace6e84d792627138e069ca165a0bd75 | |
| parent | d06d76e3796b1fed7efe1990b27497e42f16d984 (diff) | |
policy: implement Manager interface rules
| -rw-r--r-- | data/org.freedesktop.ModemManager1.conf.polkit | 24 |
1 files changed, 21 insertions, 3 deletions
diff --git a/data/org.freedesktop.ModemManager1.conf.polkit b/data/org.freedesktop.ModemManager1.conf.polkit index 153c3936..0bd3b2be 100644 --- a/data/org.freedesktop.ModemManager1.conf.polkit +++ b/data/org.freedesktop.ModemManager1.conf.polkit @@ -5,12 +5,30 @@ <policy context="default"> <deny send_destination="org.freedesktop.ModemManager1"/> - <allow send_destination="org.freedesktop.ModemManager1" - send_interface="org.freedesktop.DBus.Introspectable"/> - <!-- Methods listed here are explicitly allowed or PolicyKit protected. The rest are restricted to root for security. --> + + <!-- org.freedesktop.ModemManager1.xml --> + + <!-- Allowed for everyone --> + <allow send_destination="org.freedesktop.ModemManager1" + send_interface="org.freedesktop.DBus.Introspectable"/> + + <allow send_destination="org.freedesktop.ModemManager1" + send_interface="org.freedesktop.DBus.Properties"/> + + <allow send_destination="org.freedesktop.ModemManager1" + send_interface="org.freedesktop.DBus.ObjectManager"/> + + <!-- Protected by the Control policy rule --> + <allow send_destination="org.freedesktop.ModemManager1" + send_interface="org.freedesktop.ModemManager1" + send_member="ScanDevices"/> + + <allow send_destination="org.freedesktop.ModemManager1" + send_interface="org.freedesktop.ModemManager1" + send_member="SetLogging"/> </policy> <policy user="root"> |