diff options
| author | Lennart Poettering <lennart@poettering.net> | 2018-04-16 21:41:40 +0200 |
|---|---|---|
| committer | Lennart Poettering <lennart@poettering.net> | 2018-05-24 17:01:57 +0200 |
| commit | 61d0578b07b97cbffebfd350bac481274e310d39 (patch) | |
| tree | daa8b07cf96b942ba7be0eab3ce86c1fa9cf029e /src/portable/org.freedesktop.portable1.conf | |
| parent | 19017acb9f3e5e7edad18f59acb872bfb8dda949 (diff) | |
| download | systemd-61d0578b07b97cbffebfd350bac481274e310d39.tar.gz | |
add new portable service framework
This adds a small service "systemd-portabled" and a matching client
"portablectl", which implement the "portable service" concept.
The daemon implements the actual operations, is PolicyKit-enabled and is
activated on demand with exit-on-idle.
Both the daemon and the client are an optional build artifact, enabled
by default rhough.
Diffstat (limited to 'src/portable/org.freedesktop.portable1.conf')
| -rw-r--r-- | src/portable/org.freedesktop.portable1.conf | 117 |
1 files changed, 117 insertions, 0 deletions
diff --git a/src/portable/org.freedesktop.portable1.conf b/src/portable/org.freedesktop.portable1.conf new file mode 100644 index 0000000000..4c20a886e6 --- /dev/null +++ b/src/portable/org.freedesktop.portable1.conf @@ -0,0 +1,117 @@ +<?xml version="1.0"?> <!--*-nxml-*--> +<!DOCTYPE busconfig PUBLIC "-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN" + "http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd"> + +<!-- SPDX-License-Identifier: LGPL-2.1+ --> + +<busconfig> + + <policy user="root"> + <allow own="org.freedesktop.portable1"/> + <allow send_destination="org.freedesktop.portable1"/> + <allow receive_sender="org.freedesktop.portable1"/> + </policy> + + <policy context="default"> + <deny send_destination="org.freedesktop.portable1"/> + + <!-- generic interfaces --> + + <allow send_destination="org.freedesktop.portable1" + send_interface="org.freedesktop.DBus.Introspectable"/> + + <allow send_destination="org.freedesktop.portable1" + send_interface="org.freedesktop.DBus.Peer"/> + + <allow send_destination="org.freedesktop.portable1" + send_interface="org.freedesktop.DBus.Properties" + send_member="Get"/> + + <allow send_destination="org.freedesktop.portable1" + send_interface="org.freedesktop.DBus.Properties" + send_member="GetAll"/> + + <!-- Manager object --> + + <allow send_destination="org.freedesktop.portable1" + send_interface="org.freedesktop.portable1.Manager" + send_member="GetImage"/> + + <allow send_destination="org.freedesktop.portable1" + send_interface="org.freedesktop.portable1.Manager" + send_member="ListImages"/> + + <allow send_destination="org.freedesktop.portable1" + send_interface="org.freedesktop.portable1.Manager" + send_member="GetImageOSRelease"/> + + <allow send_destination="org.freedesktop.portable1" + send_interface="org.freedesktop.portable1.Manager" + send_member="GetImageUnitFiles"/> + + <allow send_destination="org.freedesktop.portable1" + send_interface="org.freedesktop.portable1.Manager" + send_member="GetImageState"/> + + <allow send_destination="org.freedesktop.portable1" + send_interface="org.freedesktop.portable1.Manager" + send_member="AttachImage"/> + + <allow send_destination="org.freedesktop.portable1" + send_interface="org.freedesktop.portable1.Manager" + send_member="DetachImage"/> + + <allow send_destination="org.freedesktop.portable1" + send_interface="org.freedesktop.portable1.Manager" + send_member="RemoveImage"/> + + <allow send_destination="org.freedesktop.portable1" + send_interface="org.freedesktop.portable1.Manager" + send_member="MarkImageReadOnly"/> + + <allow send_destination="org.freedesktop.portable1" + send_interface="org.freedesktop.portable1.Manager" + send_member="SetImageLimit"/> + + <allow send_destination="org.freedesktop.portable1" + send_interface="org.freedesktop.portable1.Manager" + send_member="SetPoolLimit"/> + + <!-- Image object --> + + <allow send_destination="org.freedesktop.portable1" + send_interface="org.freedesktop.portable1.Image" + send_member="GetOSRelease"/> + + <allow send_destination="org.freedesktop.portable1" + send_interface="org.freedesktop.portable1.Image" + send_member="GetUnitFiles"/> + + <allow send_destination="org.freedesktop.portable1" + send_interface="org.freedesktop.portable1.Image" + send_member="GetImageState"/> + + <allow send_destination="org.freedesktop.portable1" + send_interface="org.freedesktop.portable1.Image" + send_member="Attach"/> + + <allow send_destination="org.freedesktop.portable1" + send_interface="org.freedesktop.portable1.Image" + send_member="Detach"/> + + <allow send_destination="org.freedesktop.portable1" + send_interface="org.freedesktop.portable1.Image" + send_member="Remove"/> + + <allow send_destination="org.freedesktop.portable1" + send_interface="org.freedesktop.portable1.Image" + send_member="MarkReadOnly"/> + + <allow send_destination="org.freedesktop.portable1" + send_interface="org.freedesktop.portable1.Image" + send_member="SetLimit"/> + + <allow receive_sender="org.freedesktop.portable1"/> + </policy> + +</busconfig> |