Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 03 May 2022 01:01:30 +0000
From:      bugzilla-noreply@freebsd.org
To:        desktop@FreeBSD.org
Subject:   [Bug 263716] devel/dbus: not allowed to own service due to security policies in configuration file
Message-ID:  <bug-263716-39348-U1ZdFfCHiu@https.bugs.freebsd.org/bugzilla/>
In-Reply-To: <bug-263716-39348@https.bugs.freebsd.org/bugzilla/>
References:  <bug-263716-39348@https.bugs.freebsd.org/bugzilla/>

next in thread | previous in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D263716

--- Comment #7 from Slawomir Wojciech Wojtczak <vermaden@interia.pl> ---
I did not touched the configs - these files were installed from the package=
s.



/usr/local/etc/dbus-1/system.d/avahi-dbus.conf
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D
<!DOCTYPE busconfig PUBLIC
          "-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN"
          "http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">;
<busconfig>

  <!-- Only root or user avahi can own the Avahi service -->
  <policy user=3D"avahi">
    <allow own=3D"org.freedesktop.Avahi"/>
  </policy>
  <policy user=3D"root">
    <allow own=3D"org.freedesktop.Avahi"/>
  </policy>

  <!-- Allow anyone to invoke methods on Avahi server, except SetHostName -=
->
  <policy context=3D"default">
    <allow send_destination=3D"org.freedesktop.Avahi"/>
    <allow receive_sender=3D"org.freedesktop.Avahi"/>

    <deny send_destination=3D"org.freedesktop.Avahi"
          send_interface=3D"org.freedesktop.Avahi.Server"
send_member=3D"SetHostName"/>
  </policy>

  <!-- Allow everything, including access to SetHostName to users of the gr=
oup
"network" -->
  <policy group=3D"network">
    <allow send_destination=3D"org.freedesktop.Avahi"/>
    <allow receive_sender=3D"org.freedesktop.Avahi"/>
  </policy>
  <policy user=3D"root">
    <allow send_destination=3D"org.freedesktop.Avahi"/>
    <allow receive_sender=3D"org.freedesktop.Avahi"/>
  </policy>
</busconfig>



/usr/local/etc/dbus-1/system.d/ConsoleKit.conf
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D
<!DOCTYPE busconfig PUBLIC
 "-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN"
 "http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">;
<busconfig>

  <!-- Only root can own the service -->
  <policy user=3D"root">
    <allow own=3D"org.freedesktop.ConsoleKit"/>

    <!-- Allow all methods on interfaces -->
    <allow send_destination=3D"org.freedesktop.ConsoleKit"/>
  </policy>

  <!-- Deny all and then allow some methods on interfaces -->
  <policy context=3D"default">
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.DBus.Introspectable"/>
    <deny send_destination=3D"org.freedesktop.ConsoleKit"
          send_interface=3D"org.freedesktop.ConsoleKit.Manager"/>
    <deny send_destination=3D"org.freedesktop.ConsoleKit"
          send_interface=3D"org.freedesktop.ConsoleKit.Seat"/>
    <deny send_destination=3D"org.freedesktop.ConsoleKit"
          send_interface=3D"org.freedesktop.ConsoleKit.Session"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
          send_interface=3D"org.freedesktop.DBus.Properties" />

    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Manager"
           send_member=3D"Restart"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Manager"
           send_member=3D"CanRestart"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Manager"
           send_member=3D"Stop"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Manager"
           send_member=3D"CanStop"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Manager"
           send_member=3D"Reboot"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Manager"
           send_member=3D"CanReboot"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Manager"
           send_member=3D"PowerOff"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Manager"
           send_member=3D"CanPowerOff"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Manager"
           send_member=3D"Suspend"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Manager"
           send_member=3D"CanSuspend"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Manager"
           send_member=3D"Hibernate"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Manager"
           send_member=3D"CanHibernate"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Manager"
           send_member=3D"HybridSleep"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Manager"
           send_member=3D"CanHybridSleep"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Manager"
           send_member=3D"Inhibit"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Manager"
           send_member=3D"ListInhibitors"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Manager"
           send_member=3D"OpenSession"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Manager"
           send_member=3D"CloseSession"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Manager"
           send_member=3D"ListSeats"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Manager"
           send_member=3D"GetSeats"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Manager"
           send_member=3D"GetSessions"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Manager"
           send_member=3D"GetSessionForCookie"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Manager"
           send_member=3D"GetSessionForUnixProcess"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Manager"
           send_member=3D"GetSessionByPID"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Manager"
           send_member=3D"GetCurrentSession"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Manager"
           send_member=3D"GetSessionsForUnixUser"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Manager"
           send_member=3D"GetSessionsForUser"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Manager"
           send_member=3D"ActivateSession"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Manager"
           send_member=3D"ActivateSessionOnSeat"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Manager"
           send_member=3D"GetSystemIdleHint"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Manager"
           send_member=3D"GetSystemIdleSinceHint"/>

    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Seat"
           send_member=3D"GetId"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Seat"
           send_member=3D"GetName"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Seat"
           send_member=3D"GetSessions"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Seat"
           send_member=3D"GetDevices"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Seat"
           send_member=3D"GetActiveSession"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Seat"
           send_member=3D"CanActivateSessions"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Seat"
           send_member=3D"ActivateSession"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Seat"
           send_member=3D"SwitchTo"/>

    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Session"
           send_member=3D"GetId"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Session"
           send_member=3D"GetSeatId"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Session"
           send_member=3D"GetLoginSessionId"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Session"
           send_member=3D"GetSessionType"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Session"
           send_member=3D"GetSessionClass"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Session"
           send_member=3D"GetSessionState"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Session"
           send_member=3D"GetUser"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Session"
           send_member=3D"GetUnixUser"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Session"
           send_member=3D"GetXDGRuntimeDir"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Session"
           send_member=3D"GetX11Display"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Session"
           send_member=3D"GetX11DisplayDevice"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Session"
           send_member=3D"GetDisplayDevice"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Session"
           send_member=3D"GetRemoteHostName"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Session"
           send_member=3D"GetVTNr"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Session"
           send_member=3D"IsActive"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Session"
           send_member=3D"IsLocal"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Session"
           send_member=3D"GetCreationTime"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Session"
           send_member=3D"Activate"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Session"
           send_member=3D"GetIdleHint"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Session"
           send_member=3D"SetIdleHint"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Session"
           send_member=3D"GetIdleSinceHint"/>
    <allow send_interface=3D"org.freedesktop.ConsoleKit.Session"
           send_member=3D"SetIdleHint"/>
    <allow send_interface=3D"org.freedesktop.ConsoleKit.Session"
           send_member=3D"SetLockedHint"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Session"
           send_member=3D"CanControlSession"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Session"
           send_member=3D"TakeControl"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Session"
           send_member=3D"ReleaseControl"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Session"
           send_member=3D"TakeDevice"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Session"
           send_member=3D"ReleaseDevice"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Session"
           send_member=3D"PauseDeviceComplete"/>
  </policy>

</busconfig>



/usr/local/etc/dbus-1/system.d/cups.conf
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D
<!DOCTYPE busconfig PUBLIC "-//freedesktop//DTD D-BUS Bus Configuration
1.0//EN"
 "http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">;
<busconfig>
  <!-- Only root can send this message -->
  <policy user=3D"root">
    <allow send_interface=3D"com.redhat.PrinterSpooler"/>
  </policy>

  <!-- Allow any connection to receive the message -->
  <policy context=3D"default">
    <allow receive_interface=3D"com.redhat.PrinterSpooler"/>
  </policy>
</busconfig>



/usr/local/etc/dbus-1/system.d/dbus-wpa_supplicant.conf
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D
<!DOCTYPE busconfig PUBLIC
 "-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN"
 "http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">;
<busconfig>
        <policy user=3D"root">
                <allow own=3D"fi.w1.wpa_supplicant1"/>

                <allow send_destination=3D"fi.w1.wpa_supplicant1"/>
                <allow send_interface=3D"fi.w1.wpa_supplicant1"/>
                <allow receive_sender=3D"fi.w1.wpa_supplicant1"
receive_type=3D"signal"/>
        </policy>
        <policy context=3D"default">
                <deny own=3D"fi.w1.wpa_supplicant1"/>
                <deny send_destination=3D"fi.w1.wpa_supplicant1"/>
                <deny receive_sender=3D"fi.w1.wpa_supplicant1"
receive_type=3D"signal"/>
        </policy>
</busconfig>



/usr/local/etc/dbus-1/system.d/org.freedesktop.ColorManager.conf
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D
<?xml version=3D"1.0" encoding=3D"UTF-8"?> <!-- -*- XML -*- -->

<!DOCTYPE busconfig PUBLIC
 "-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN"
 "http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">;
<busconfig>

  <!-- This configuration file specifies the required security policies
       for the ColorManager to work. -->

  <!-- Only user root or user colord can own the colord service -->
  <policy user=3D"root">
    <allow own=3D"org.freedesktop.ColorManager"/>
  </policy>
  <policy user=3D"colord">
    <allow own=3D"org.freedesktop.ColorManager"/>
  </policy>

 <!-- Allow anyone to call into the service - we'll reject callers using
PolicyKit -->
  <policy context=3D"default">
    <allow send_destination=3D"org.freedesktop.ColorManager"
           send_interface=3D"org.freedesktop.ColorManager"/>
    <allow send_destination=3D"org.freedesktop.ColorManager"
           send_interface=3D"org.freedesktop.ColorManager.Profile"/>
    <allow send_destination=3D"org.freedesktop.ColorManager"
           send_interface=3D"org.freedesktop.ColorManager.Device"/>
    <allow send_destination=3D"org.freedesktop.ColorManager"
           send_interface=3D"org.freedesktop.ColorManager.Sensor"/>
    <allow send_destination=3D"org.freedesktop.ColorManager"
           send_interface=3D"org.freedesktop.DBus.Properties"/>
    <allow send_destination=3D"org.freedesktop.ColorManager"
           send_interface=3D"org.freedesktop.DBus.Introspectable"/>
    <allow send_destination=3D"org.freedesktop.ColorManager"
           send_interface=3D"org.freedesktop.DBus.Peer"/>
  </policy>

</busconfig>



/usr/local/etc/dbus-1/system.d/org.freedesktop.GeoClue2.Agent.conf
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D
<!DOCTYPE busconfig PUBLIC
 "-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN"
 "http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">;
<busconfig>
  <policy user=3D"root">
    <allow send_interface=3D"org.freedesktop.GeoClue2.Agent"
           send_path=3D"/org/freedesktop/GeoClue2/Agent"/>
    <allow send_interface=3D"org.freedesktop.DBus.Properties"
           send_path=3D"/org/freedesktop/GeoClue2/Agent"/>
  </policy>

  <policy user=3D"root">
    <allow send_interface=3D"org.freedesktop.GeoClue2.Agent"
           send_path=3D"/org/freedesktop/GeoClue2/Agent"/>
    <allow send_interface=3D"org.freedesktop.DBus.Properties"
           send_path=3D"/org/freedesktop/GeoClue2/Agent"/>
  </policy>
</busconfig>



/usr/local/etc/dbus-1/system.d/org.freedesktop.GeoClue2.conf
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D
<!DOCTYPE busconfig PUBLIC
 "-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN"
 "http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">;
<busconfig>
  <policy context=3D"default">
    <!-- Allow everyone to talk to main service. We'll later add an agent to
         only share the location if user allows it. -->
    <allow send_destination=3D"org.freedesktop.GeoClue2"/>
  </policy>

  <policy user=3D"root">
    <!-- Only allow root to own the name on the bus -->
    <allow own=3D"org.freedesktop.GeoClue2"/>

    <!-- Also give root access to wpa_supplicant API -->
    <allow receive_sender=3D"fi.w1.wpa_supplicant1"
           receive_type=3D"signal"/>

    <allow send_destination=3D"fi.w1.wpa_supplicant1"
           send_interface=3D"org.freedesktop.DBus.Properties"
           send_member=3D"Get"/>

    <allow send_destination=3D"fi.w1.wpa_supplicant1"
           send_interface=3D"org.freedesktop.DBus.Properties"
           send_member=3D"GetAll"/>

    <allow send_destination=3D"fi.w1.wpa_supplicant1"
           send_interface=3D"org.freedesktop.DBus.Introspectable"/>

    <allow send_destination=3D"fi.w1.wpa_supplicant1"
           send_interface=3D"fi.w1.wpa_supplicant1.Interface"
           send_type=3D"method_call"
           send_member=3D"Scan"/>
  </policy>

  <policy user=3D"root">
    <!-- Allow root to own the name on the bus -->
    <allow own=3D"org.freedesktop.GeoClue2"/>
  </policy>
</busconfig>




/usr/local/etc/dbus-1/system.d/org.freedesktop.PolicyKit1.conf
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D
<?xml version=3D"1.0" encoding=3D"UTF-8"?> <!-- -*- XML -*- -->

<!DOCTYPE busconfig PUBLIC
 "-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN"
 "http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">;
<busconfig>
  <policy user=3D"polkitd">
    <allow own=3D"org.freedesktop.PolicyKit1"/>
  </policy>

  <policy context=3D"default">
    <allow send_destination=3D"org.freedesktop.PolicyKit1"/>
  </policy>

  <!-- Allow uid 0 to send messages on the
org.freedesktop.PolicyKit1.AuthenticationAgent interface -->
  <policy user=3D"polkitd">
    <allow send_interface=3D"org.freedesktop.PolicyKit1.AuthenticationAgent=
"/>
  </policy>

</busconfig>




/usr/local/etc/dbus-1/system.d/org.freedesktop.UDisks2.conf
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D
<?xml version=3D"1.0" encoding=3D"UTF-8"?> <!-- -*- XML -*- -->

<!DOCTYPE busconfig PUBLIC
 "-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN"
 "http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">;
<busconfig>
  <!-- Only root can own the service -->
  <policy user=3D"root">
    <allow own=3D"org.freedesktop.UDisks2"/>
  </policy>

  <!-- Anyone can send messages to the owner of org.freedesktop.UDisks2 -->
  <policy context=3D"default">
    <allow send_destination=3D"org.freedesktop.UDisks2"/>
  </policy>
</busconfig>



/usr/local/etc/dbus-1/system.d/pulseaudio-system.conf
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D
<?xml version=3D"1.0"?><!--*-nxml-*-->
<!DOCTYPE busconfig PUBLIC "-//freedesktop//DTD D-BUS Bus Configuration
1.0//EN"
 "http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">;

<!--
This file is part of PulseAudio.

PulseAudio is free software; you can redistribute it and/or modify it
under the terms of the GNU Lesser General Public License as
published by the Free Software Foundation; either version 2.1 of the
License, or (at your option) any later version.

PulseAudio is distributed in the hope that it will be useful, but WITHOUT
ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
or FITNESS FOR A PARTICULAR PURPOSE. See the GNU Lesser General
Public License for more details.

You should have received a copy of the GNU Lesser General Public
License along with PulseAudio; if not, see <http://www.gnu.org/licenses/>.
-->

<busconfig>

  <!-- System-wide PulseAudio runs as 'pulse' user. This fragment is
       not necessary for user PulseAudio instances. -->

  <policy user=3D"pulse">
    <allow own=3D"org.pulseaudio.Server"/>
  </policy>

</busconfig>



/usr/local/etc/dbus-1/session.conf
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D
<!--
This configuration file is no longer required and may be removed.

In older versions of dbus, this file defined the behaviour of the well-known
session bus. That behaviour is now determined by
/usr/local/share/dbus-1/session.conf, which should not be edited.

For local configuration changes, create a file
session-local.conf or files matching session.d/*.conf in the same directory
as this one, with a <busconfig> element containing configuration directives.
These directives can override D-Bus or OS defaults.

For upstream or distribution-wide defaults that can be overridden
by a local sysadmin, create files matching
/usr/local/share/dbus-1/session.d/*.conf instead.
-->
<!DOCTYPE busconfig PUBLIC "-//freedesktop//DTD D-Bus Bus Configuration
1.0//EN"
 "http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">;
<busconfig></busconfig>




/usr/local/etc/dbus-1/system.conf
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D
<!--
This configuration file is no longer required and may be removed.

In older versions of dbus, this file defined the behaviour of the well-known
system bus. That behaviour is now determined by
/usr/local/share/dbus-1/system.conf, which should not be edited.

For local configuration changes, create a file
system-local.conf or files matching system.d/*.conf in the same directory
as this one, with a <busconfig> element containing configuration directives.
These directives can override D-Bus or OS defaults.

For upstream or distribution-wide defaults that can be overridden
by a local sysadmin, create files matching
/usr/local/share/dbus-1/system.d/*.conf instead.
-->
<!DOCTYPE busconfig PUBLIC "-//freedesktop//DTD D-Bus Bus Configuration
1.0//EN"
 "http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">;
<busconfig></busconfig>



Regards.

--=20
You are receiving this mail because:
You are the assignee for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-263716-39348-U1ZdFfCHiu>