revpi/revpi-middleware
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat(dbus): Add DBus policy configuration for revpi-middleware

Browse Source 
Introduce a new DBus policy file to manage access control for
revpi-middleware. This configuration allows full access to the root
user, limited access for the 'picontrol' group, and denies unauthorized
access by default.
This commit is contained in:
Sven Sager
2025-04-18 14:12:43 +02:00
parent 46f23a13d3
commit 46a2b3f0ce
1 changed files with 22 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

22
data/dbus-policy/com.revolutionpi.middleware1.conf Normal file
View File

@@ -0,0 +1,22 @@
<!-- /etc/dbus-1/system.d/revpi-middleware.conf -->
<busconfig>
<!-- Allow full access to root as the bus owner -->
<policy user="root">
<allow own="com.revolutionpi.middleware1"/>
<allow send_destination="com.revolutionpi.middleware1"/>
<allow receive_sender="com.revolutionpi.middleware1"/>
</policy>
<!-- System group picontrol -->
<policy group="picontrol">
<allow send_destination="com.revolutionpi.middleware1"
send_interface="org.freedesktop.DBus.Introspectable"/>
<allow send_destination="com.revolutionpi.middleware1"
send_interface="com.revolutionpi.middleware1.picontrol"/>
</policy>
<!-- Standard-Policy -->
<policy context="default">
<deny send_destination="com.revolutionpi.middleware1"/>
</policy>
</busconfig>