summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorWilliam Jon McCann <jmccann@redhat.com>2008-03-06 01:31:42 +0000
committerWilliam Jon McCann <mccann@src.gnome.org>2008-03-06 01:31:42 +0000
commitfa348992288ba094abf72d4f589cfe5e151255e0 (patch)
tree07591f20e294a238853de526a9e9b521a67671bd
parent09fd5da8a1674059f8fa3f451b3fbec72f8cb113 (diff)
downloadgdm-fa348992288ba094abf72d4f589cfe5e151255e0.tar.gz
Invert the sense of the policy. Deny first.
2008-03-05 William Jon McCann <jmccann@redhat.com> * data/gdm.conf: Invert the sense of the policy. Deny first. svn path=/trunk/; revision=5936
-rw-r--r--ChangeLog5
-rw-r--r--data/gdm.conf41
2 files changed, 31 insertions, 15 deletions
diff --git a/ChangeLog b/ChangeLog
index 1c9d0b35..52bca5bd 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,5 +1,10 @@
2008-03-05 William Jon McCann <jmccann@redhat.com>
+ * data/gdm.conf:
+ Invert the sense of the policy. Deny first.
+
+2008-03-05 William Jon McCann <jmccann@redhat.com>
+
* common/gdm-settings-desktop-backend.c:
Don't allow empty strings for keys.
diff --git a/data/gdm.conf b/data/gdm.conf
index 5ca7dba9..abd19982 100644
--- a/data/gdm.conf
+++ b/data/gdm.conf
@@ -16,28 +16,39 @@
</policy>
<policy context="default">
- <allow send_interface="org.gnome.DisplayManager.Manager"/>
- <allow send_interface="org.gnome.DisplayManager.Display"/>
- <allow send_interface="org.gnome.DisplayManager.LocalDisplayFactory"/>
+ <deny send_interface="org.gnome.DisplayManager.Manager"/>
+ <deny send_interface="org.gnome.DisplayManager.Display"/>
+ <deny send_interface="org.gnome.DisplayManager.LocalDisplayFactory"/>
+ <deny send_interface="org.gnome.DisplayManager.Settings"/>
<deny send_destination="org.gnome.DisplayManager"
send_interface="org.gnome.DBus.Properties" />
- <deny send_interface="org.gnome.DisplayManager.Display"
- send_member="GetX11Cookie"/>
- <deny send_interface="org.gnome.DisplayManager.Display"
- send_member="GetX11AuthorityFile"/>
- <deny send_interface="org.gnome.DisplayManager.Display"
- send_member="AddUserAuthoritization"/>
- <deny send_interface="org.gnome.DisplayManager.Display"
- send_member="RemoveUserAuthoritization"/>
- <deny send_interface="org.gnome.DisplayManager.Display"
- send_member="SetSlaveBusName"/>
- <deny send_interface="org.gnome.DisplayManager.Settings"
- send_member="SetValue"/>
+
+ <allow send_interface="org.gnome.DisplayManager.Display"
+ send_member="GetId"/>
+ <allow send_interface="org.gnome.DisplayManager.Display"
+ send_member="GetRemoteHostname"/>
+ <allow send_interface="org.gnome.DisplayManager.Display"
+ send_member="GetSeatId"/>
+ <allow send_interface="org.gnome.DisplayManager.Display"
+ send_member="GetX11DisplayName"/>
+ <allow send_interface="org.gnome.DisplayManager.Display"
+ send_member="GetX11DisplayNumber"/>
+ <allow send_interface="org.gnome.DisplayManager.Display"
+ send_member="IsLocal"/>
+
+ <allow send_interface="org.gnome.DisplayManager.LocalDisplayFactory"
+ send_member="CreateTransientDisplay"/>
+
+ <allow send_interface="org.gnome.DisplayManager.Manager"
+ send_member="GetDisplays"/>
+
</policy>
<policy user="gdm">
<allow send_interface="org.gnome.DisplayManager.Manager"/>
<allow send_interface="org.gnome.DisplayManager.Display"/>
+ <allow send_interface="org.gnome.DisplayManager.LocalDisplayFactory"/>
+ <allow send_interface="org.gnome.DisplayManager.Settings"/>
<allow send_destination="org.gnome.DisplayManager"
send_interface="org.gnome.DBus.Properties" />
</policy>