[avahi] copy the configuration file of avahi for dbus

Signed-off-by: Markus Rathgeb <rathgeb.markus@googlemail.com>
[mkl:
 - split into smaller patches
 - copy default config file to
   generic/etc/dbus-1/system.d/avahi-dbus.conf
 - use install_alternative
]
Signed-off-by: Marc Kleine-Budde <mkl@pengutronix.de>

1 files changed, 28 insertions, 0 deletions

diff --git a/generic/etc/dbus-1/system.d/avahi-dbus.conf b/generic/etc/dbus-1/system.d/avahi-dbus.conf
new file mode 100644
index 000000000..ecea91430
--- /dev/null
+++ b/generic/etc/dbus-1/system.d/avahi-dbus.conf
@@ -0,0 +1,28 @@
+<!DOCTYPE busconfig PUBLIC
+          "-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN"
+          "http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
+<busconfig>
+
+  <!-- Only root or user avahi can own the Avahi service -->
+  <policy user="avahi">
+    <allow own="org.freedesktop.Avahi"/>
+  </policy>
+  <policy user="root">
+    <allow own="org.freedesktop.Avahi"/>
+  </policy>
+
+  <!-- Allow anyone to invoke methods on Avahi server, except SetHostName -->
+  <policy context="default">
+    <allow send_destination="org.freedesktop.Avahi"/>
+    <allow receive_sender="org.freedesktop.Avahi"/>
+
+    <deny send_destination="org.freedesktop.Avahi"
+          send_interface="org.freedesktop.Avahi.Server" send_member="SetHostName"/>
+  </policy>
+
+  <!-- Allow everything, including access to SetHostName to users of the group "netdev" -->
+  <policy group="netdev">
+    <allow send_destination="org.freedesktop.Avahi"/>
+    <allow receive_sender="org.freedesktop.Avahi"/>
+  </policy>
+</busconfig>