summaryrefslogtreecommitdiff
path: root/src/backend/dbus/org.libproxy.proxy.conf.in
diff options
context:
space:
mode:
Diffstat (limited to 'src/backend/dbus/org.libproxy.proxy.conf.in')
-rw-r--r--src/backend/dbus/org.libproxy.proxy.conf.in32
1 files changed, 32 insertions, 0 deletions
diff --git a/src/backend/dbus/org.libproxy.proxy.conf.in b/src/backend/dbus/org.libproxy.proxy.conf.in
new file mode 100644
index 0000000..7116729
--- /dev/null
+++ b/src/backend/dbus/org.libproxy.proxy.conf.in
@@ -0,0 +1,32 @@
+<!DOCTYPE busconfig PUBLIC
+ "-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN"
+ "http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
+<busconfig>
+
+ <!-- This configuration file specifies the required security policies
+ for the libproxy to work. -->
+
+ <!-- Only user root or user @daemon_user@ can own the libproxy service -->
+ <policy user="root">
+ <allow own="org.libproxy.proxy"/>
+ </policy>
+
+ <policy user="@daemon_user@">
+ <allow own="org.libproxy.proxy"/>
+ </policy>
+
+ <!-- Allow anyone to call into the service - we'll reject callers using PolicyKit -->
+ <policy context="default">
+ <allow send_destination="org.libproxy.proxy"
+ send_interface="org.freedesktop.DBus.Introspectable"/>
+
+ <allow send_destination="org.libproxy.proxy"
+ send_interface="org.freedesktop.DBus.Peer"/>
+
+ <allow send_destination="org.libproxy.proxy"
+ send_interface="org.freedesktop.DBus.Properties"/>
+
+ <allow send_destination="org.libproxy.proxy"
+ send_interface="org.libproxy.proxy"/>
+ </policy>
+</busconfig> \ No newline at end of file