summaryrefslogtreecommitdiffstats
path: root/projectroot/etc/dbus-1/system.d/avahi-dbus.conf
diff options
context:
space:
mode:
authorMarc Kleine-Budde <mkl@pengutronix.de>2015-06-11 12:18:01 +0200
committerMarc Kleine-Budde <mkl@pengutronix.de>2015-06-18 16:22:13 +0200
commit28db1773524eb763569939d4066e32dbf50c69a0 (patch)
tree964e2f4165b48179d7ac39ac8d472788d60f99f0 /projectroot/etc/dbus-1/system.d/avahi-dbus.conf
parent878707bd943a04fc8e3a55a151499359e81ce780 (diff)
downloadptxdist-28db1773524eb763569939d4066e32dbf50c69a0.tar.gz
ptxdist-28db1773524eb763569939d4066e32dbf50c69a0.tar.xz
generic: rename generic -> projectroot
Signed-off-by: Marc Kleine-Budde <mkl@pengutronix.de>
Diffstat (limited to 'projectroot/etc/dbus-1/system.d/avahi-dbus.conf')
-rw-r--r--projectroot/etc/dbus-1/system.d/avahi-dbus.conf28
1 files changed, 28 insertions, 0 deletions
diff --git a/projectroot/etc/dbus-1/system.d/avahi-dbus.conf b/projectroot/etc/dbus-1/system.d/avahi-dbus.conf
new file mode 100644
index 000000000..ecea91430
--- /dev/null
+++ b/projectroot/etc/dbus-1/system.d/avahi-dbus.conf
@@ -0,0 +1,28 @@
+<!DOCTYPE busconfig PUBLIC
+ "-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN"
+ "http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
+<busconfig>
+
+ <!-- Only root or user avahi can own the Avahi service -->
+ <policy user="avahi">
+ <allow own="org.freedesktop.Avahi"/>
+ </policy>
+ <policy user="root">
+ <allow own="org.freedesktop.Avahi"/>
+ </policy>
+
+ <!-- Allow anyone to invoke methods on Avahi server, except SetHostName -->
+ <policy context="default">
+ <allow send_destination="org.freedesktop.Avahi"/>
+ <allow receive_sender="org.freedesktop.Avahi"/>
+
+ <deny send_destination="org.freedesktop.Avahi"
+ send_interface="org.freedesktop.Avahi.Server" send_member="SetHostName"/>
+ </policy>
+
+ <!-- Allow everything, including access to SetHostName to users of the group "netdev" -->
+ <policy group="netdev">
+ <allow send_destination="org.freedesktop.Avahi"/>
+ <allow receive_sender="org.freedesktop.Avahi"/>
+ </policy>
+</busconfig>