| 1 | <!DOCTYPE busconfig PUBLIC |
| 2 | "-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN" |
| 3 | "http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd"> |
| 4 | <busconfig> |
| 5 | |
| 6 | <!-- This configuration file specifies the required security policies |
| 7 | for the HAL to work. --> |
| 8 | |
| 9 | <!-- Only root, user haldaemon or group plugdev can own the HAL service --> |
| 10 | <policy user="haldaemon"> |
| 11 | <allow own="org.freedesktop.Hal"/> |
| 12 | </policy> |
| 13 | <policy user="root"> |
| 14 | <allow own="org.freedesktop.Hal"/> |
| 15 | </policy> |
| 16 | <policy group="plugdev"> |
| 17 | <allow own="org.freedesktop.Hal"/> |
| 18 | </policy> |
| 19 | |
| 20 | <!-- Allow anyone to invoke methods on the Manager and Device interfaces --> |
| 21 | <policy context="default"> |
| 22 | <allow send_interface="org.freedesktop.Hal.Manager"/> |
| 23 | <allow send_interface="org.freedesktop.Hal.Device"/> |
| 24 | <allow receive_interface="org.freedesktop.Hal.Manager" |
| 25 | receive_sender="org.freedesktop.Hal"/> |
| 26 | <allow receive_interface="org.freedesktop.Hal.Device" |
| 27 | receive_sender="org.freedesktop.Hal"/> |
| 28 | |
| 29 | <allow send_interface="org.freedesktop.Hal.Device.SystemPowerManagement"/> |
| 30 | <allow send_interface="org.freedesktop.Hal.Device.LaptopPanel"/> |
| 31 | <allow send_interface="org.freedesktop.Hal.Device.Volume"/> |
| 32 | <allow send_interface="org.freedesktop.Hal.Device.Volume.Crypto"/> |
| 33 | <allow receive_interface="org.freedesktop.Hal.Device.SystemPowerManagement" |
| 34 | receive_sender="org.freedesktop.Hal"/> |
| 35 | <allow receive_interface="org.freedesktop.Hal.Device.LaptopPanel" |
| 36 | receive_sender="org.freedesktop.Hal"/> |
| 37 | <allow receive_interface="org.freedesktop.Hal.Device.Volume" |
| 38 | receive_sender="org.freedesktop.Hal"/> |
| 39 | <allow receive_interface="org.freedesktop.Hal.Device.Volume.Crypto" |
| 40 | receive_sender="org.freedesktop.Hal"/> |
| 41 | </policy> |
| 42 | |
| 43 | <!-- Default policy for the exported interfaces --> |
| 44 | <policy context="default"> |
| 45 | <deny send_interface="org.freedesktop.Hal.Device.SystemPowerManagement"/> |
| 46 | <deny send_interface="org.freedesktop.Hal.Device.VideoAdapterPM"/> |
| 47 | <deny send_interface="org.freedesktop.Hal.Device.LaptopPanel"/> |
| 48 | <deny send_interface="org.freedesktop.Hal.Device.Volume"/> |
| 49 | <deny send_interface="org.freedesktop.Hal.Device.Volume.Crypto"/> |
| 50 | </policy> |
| 51 | |
| 52 | <policy user="root"> |
| 53 | <allow send_interface="org.freedesktop.Hal.Device.SystemPowerManagement"/> |
| 54 | <allow send_interface="org.freedesktop.Hal.Device.VideoAdapterPM"/> |
| 55 | <allow send_interface="org.freedesktop.Hal.Device.LaptopPanel"/> |
| 56 | <allow send_interface="org.freedesktop.Hal.Device.Volume"/> |
| 57 | <allow send_interface="org.freedesktop.Hal.Device.Volume.Crypto"/> |
| 58 | </policy> |
| 59 | |
| 60 | <policy group="plugdev"> |
| 61 | <allow send_interface="org.freedesktop.Hal.Device.SystemPowerManagement"/> |
| 62 | <allow send_interface="org.freedesktop.Hal.Device.VideoAdapterPM"/> |
| 63 | <allow send_interface="org.freedesktop.Hal.Device.LaptopPanel"/> |
| 64 | <allow send_interface="org.freedesktop.Hal.Device.Volume"/> |
| 65 | <allow send_interface="org.freedesktop.Hal.Device.Volume.Crypto"/> |
| 66 | </policy> |
| 67 | |
| 68 | </busconfig> |