From 82c72e918e352d833b3b08846485cd4ecd2f8be7 Mon Sep 17 00:00:00 2001
From: Sven Sager <s.sager@kunbus.com>
Date: Thu, 22 May 2025 11:09:10 +0200
Subject: [PATCH] feat(io): Add dbus policy for com.revolutionpi.ios1 bus

Signed-off-by: Sven Sager <s.sager@kunbus.com>
---
 data/dbus-policy/com.revolutionpi.ios1.conf | 22 +++++++++++++++++++++
 1 file changed, 22 insertions(+)
 create mode 100644 data/dbus-policy/com.revolutionpi.ios1.conf

diff --git a/data/dbus-policy/com.revolutionpi.ios1.conf b/data/dbus-policy/com.revolutionpi.ios1.conf
new file mode 100644
index 0000000..300ef62
--- /dev/null
+++ b/data/dbus-policy/com.revolutionpi.ios1.conf
@@ -0,0 +1,22 @@
+<!-- /usr/share/dbus-1/system.d/com.revolutionpi.ios1.conf -->
+<busconfig>
+    <!-- Allow full access to root as the bus owner -->
+    <policy user="root">
+        <allow own="com.revolutionpi.ios1"/>
+        <allow send_destination="com.revolutionpi.ios1"/>
+        <allow receive_sender="com.revolutionpi.ios1"/>
+    </policy>
+
+    <!-- System group picontrol -->
+    <policy group="picontrol">
+        <allow send_destination="com.revolutionpi.ios1"
+               send_interface="org.freedesktop.DBus.Introspectable"/>
+        <allow send_destination="com.revolutionpi.ios1"
+               send_interface="com.revolutionpi.middleware1.PiControl"/>
+    </policy>
+
+    <!-- Standard-Policy -->
+    <policy context="default">
+        <deny send_destination="com.revolutionpi.ios1"/>
+    </policy>
+</busconfig>