diff options
| author | Aleksander Morgado <aleksander@aleksander.es> | 2019-09-25 12:37:08 +0200 |
|---|---|---|
| committer | Aleksander Morgado <aleksander@aleksander.es> | 2019-09-25 13:08:32 +0200 |
| commit | 7a7b3aa5cba44759ebe3276d5a6e4e25f7d2e850 (patch) | |
| tree | 6dcc6f5573ba2cb1ccf76233a61e26d4d77cf638 /data | |
| parent | be2500b02a837a368d178ef7d71124273ee22263 (diff) | |
polkit,time: protect GetNetworkTime() with a new 'Time' policy rule
Diffstat (limited to 'data')
| -rw-r--r-- | data/org.freedesktop.ModemManager1.conf.polkit | 7 | ||||
| -rw-r--r-- | data/org.freedesktop.ModemManager1.policy.in.in | 9 |
2 files changed, 16 insertions, 0 deletions
diff --git a/data/org.freedesktop.ModemManager1.conf.polkit b/data/org.freedesktop.ModemManager1.conf.polkit index e6ba8710..311883fe 100644 --- a/data/org.freedesktop.ModemManager1.conf.polkit +++ b/data/org.freedesktop.ModemManager1.conf.polkit @@ -299,6 +299,13 @@ send_interface="org.freedesktop.ModemManager1.Modem.Signal" send_member="Setup"/> + <!-- org.freedesktop.ModemManager1.Modem.Time.xml --> + + <!-- Protected by the Time policy rule --> + <allow send_destination="org.freedesktop.ModemManager1" + send_interface="org.freedesktop.ModemManager1.Modem.Time" + send_member="GetNetworkTime"/> + </policy> <policy user="root"> diff --git a/data/org.freedesktop.ModemManager1.policy.in.in b/data/org.freedesktop.ModemManager1.policy.in.in index 7edb20c7..235affd7 100644 --- a/data/org.freedesktop.ModemManager1.policy.in.in +++ b/data/org.freedesktop.ModemManager1.policy.in.in @@ -54,6 +54,15 @@ </defaults> </action> + <action id="org.freedesktop.ModemManager1.Time"> + <description>Query network time and timezone information</description> + <message>System policy prevents querying network time information.</message> + <defaults> + <allow_inactive>no</allow_inactive> + <allow_active>@MM_DEFAULT_USER_POLICY@</allow_active> + </defaults> + </action> + <action id="org.freedesktop.ModemManager1.Location"> <description>Enable and view geographic location and positioning information</description> <message>System policy prevents enabling or viewing geographic location information.</message> |