Sven Sager
46a2b3f0ce
Introduce a new DBus policy file to manage access control for revpi-middleware. This configuration allows full access to the root user, limited access for the 'picontrol' group, and denies unauthorized access by default.
23 lines
842 B
Plaintext
23 lines
842 B
Plaintext
<!-- /etc/dbus-1/system.d/revpi-middleware.conf -->
|
|
<busconfig>
|
|
<!-- Allow full access to root as the bus owner -->
|
|
<policy user="root">
|
|
<allow own="com.revolutionpi.middleware1"/>
|
|
<allow send_destination="com.revolutionpi.middleware1"/>
|
|
<allow receive_sender="com.revolutionpi.middleware1"/>
|
|
</policy>
|
|
|
|
<!-- System group picontrol -->
|
|
<policy group="picontrol">
|
|
<allow send_destination="com.revolutionpi.middleware1"
|
|
send_interface="org.freedesktop.DBus.Introspectable"/>
|
|
<allow send_destination="com.revolutionpi.middleware1"
|
|
send_interface="com.revolutionpi.middleware1.picontrol"/>
|
|
</policy>
|
|
|
|
<!-- Standard-Policy -->
|
|
<policy context="default">
|
|
<deny send_destination="com.revolutionpi.middleware1"/>
|
|
</policy>
|
|
</busconfig>
|