]>
Commit | Line | Data |
---|---|---|
e24067c3 LP |
1 | <?xml version="1.0"?> <!--*-nxml-*--> |
2 | <!DOCTYPE busconfig PUBLIC "-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN" | |
41d6f3bf | 3 | "https://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd"> |
e24067c3 LP |
4 | |
5 | <!-- | |
db9ecf05 | 6 | SPDX-License-Identifier: LGPL-2.1-or-later |
d9215cd8 | 7 | |
e24067c3 LP |
8 | This file is part of systemd. |
9 | ||
e24067c3 | 10 | systemd is free software; you can redistribute it and/or modify it |
5430f7f2 LP |
11 | under the terms of the GNU Lesser General Public License as published by |
12 | the Free Software Foundation; either version 2.1 of the License, or | |
e24067c3 | 13 | (at your option) any later version. |
e24067c3 LP |
14 | --> |
15 | ||
16 | <busconfig> | |
17 | ||
18 | <policy user="root"> | |
19 | <allow own="org.freedesktop.systemd1"/> | |
20 | ||
af25ec12 | 21 | <!-- Root clients can do everything --> |
e24067c3 LP |
22 | <allow send_destination="org.freedesktop.systemd1"/> |
23 | <allow receive_sender="org.freedesktop.systemd1"/> | |
af25ec12 LP |
24 | |
25 | <!-- systemd may receive activator requests --> | |
26 | <allow receive_interface="org.freedesktop.systemd1.Activator" | |
27 | receive_member="ActivationRequest"/> | |
e24067c3 LP |
28 | </policy> |
29 | ||
30 | <policy context="default"> | |
31 | <deny send_destination="org.freedesktop.systemd1"/> | |
32 | ||
a6011d18 | 33 | <!-- Completely open to anyone: org.freedesktop.DBus.* interfaces --> |
283868e1 | 34 | |
e24067c3 LP |
35 | <allow send_destination="org.freedesktop.systemd1" |
36 | send_interface="org.freedesktop.DBus.Introspectable"/> | |
37 | ||
abc00c62 LP |
38 | <allow send_destination="org.freedesktop.systemd1" |
39 | send_interface="org.freedesktop.DBus.Peer"/> | |
40 | ||
e24067c3 LP |
41 | <allow send_destination="org.freedesktop.systemd1" |
42 | send_interface="org.freedesktop.DBus.Properties" | |
43 | send_member="Get"/> | |
44 | ||
45 | <allow send_destination="org.freedesktop.systemd1" | |
46 | send_interface="org.freedesktop.DBus.Properties" | |
47 | send_member="GetAll"/> | |
48 | ||
a6011d18 LP |
49 | <!-- Completely open to anyone: org.freedesktop.systemd1.Manager interface --> |
50 | ||
e24067c3 | 51 | <allow send_destination="org.freedesktop.systemd1" |
701cc384 | 52 | send_interface="org.freedesktop.systemd1.Manager" |
e24067c3 LP |
53 | send_member="GetUnit"/> |
54 | ||
598b557b LP |
55 | <allow send_destination="org.freedesktop.systemd1" |
56 | send_interface="org.freedesktop.systemd1.Manager" | |
57 | send_member="GetUnitByPID"/> | |
58 | ||
e677657e LP |
59 | <allow send_destination="org.freedesktop.systemd1" |
60 | send_interface="org.freedesktop.systemd1.Manager" | |
4b58153d LP |
61 | send_member="GetUnitByInvocationID"/> |
62 | ||
267dd427 LP |
63 | <allow send_destination="org.freedesktop.systemd1" |
64 | send_interface="org.freedesktop.systemd1.Manager" | |
65 | send_member="GetUnitByControlGroup"/> | |
66 | ||
4b58153d | 67 | <allow send_destination="org.freedesktop.systemd1" |
e0e7bc82 LB |
68 | send_interface="org.freedesktop.systemd1.Manager" |
69 | send_member="GetUnitByPIDFD"/> | |
70 | ||
71 | <allow send_destination="org.freedesktop.systemd1" | |
4b58153d | 72 | send_interface="org.freedesktop.systemd1.Manager" |
e677657e LP |
73 | send_member="LoadUnit"/> |
74 | ||
a6011d18 LP |
75 | <allow send_destination="org.freedesktop.systemd1" |
76 | send_interface="org.freedesktop.systemd1.Manager" | |
77 | send_member="GetUnitProcesses"/> | |
78 | ||
e24067c3 | 79 | <allow send_destination="org.freedesktop.systemd1" |
701cc384 | 80 | send_interface="org.freedesktop.systemd1.Manager" |
e24067c3 LP |
81 | send_member="GetJob"/> |
82 | ||
15ea79f8 LP |
83 | <allow send_destination="org.freedesktop.systemd1" |
84 | send_interface="org.freedesktop.systemd1.Manager" | |
85 | send_member="GetJobAfter"/> | |
86 | ||
87 | <allow send_destination="org.freedesktop.systemd1" | |
88 | send_interface="org.freedesktop.systemd1.Manager" | |
89 | send_member="GetJobBefore"/> | |
90 | ||
e24067c3 | 91 | <allow send_destination="org.freedesktop.systemd1" |
701cc384 | 92 | send_interface="org.freedesktop.systemd1.Manager" |
e24067c3 LP |
93 | send_member="ListUnits"/> |
94 | ||
cdc06ed7 DS |
95 | <allow send_destination="org.freedesktop.systemd1" |
96 | send_interface="org.freedesktop.systemd1.Manager" | |
97 | send_member="ListUnitsFiltered"/> | |
98 | ||
313fe66f | 99 | <allow send_destination="org.freedesktop.systemd1" |
100 | send_interface="org.freedesktop.systemd1.Manager" | |
101 | send_member="ListUnitsByPatterns"/> | |
102 | ||
729e3769 LP |
103 | <allow send_destination="org.freedesktop.systemd1" |
104 | send_interface="org.freedesktop.systemd1.Manager" | |
a6011d18 | 105 | send_member="ListUnitsByNames"/> |
729e3769 | 106 | |
313fe66f | 107 | <allow send_destination="org.freedesktop.systemd1" |
108 | send_interface="org.freedesktop.systemd1.Manager" | |
a6011d18 | 109 | send_member="ListJobs"/> |
313fe66f | 110 | |
729e3769 LP |
111 | <allow send_destination="org.freedesktop.systemd1" |
112 | send_interface="org.freedesktop.systemd1.Manager" | |
a6011d18 | 113 | send_member="Subscribe"/> |
729e3769 | 114 | |
291d565a LP |
115 | <allow send_destination="org.freedesktop.systemd1" |
116 | send_interface="org.freedesktop.systemd1.Manager" | |
a6011d18 | 117 | send_member="Unsubscribe"/> |
291d565a | 118 | |
3b3557c4 JS |
119 | <allow send_destination="org.freedesktop.systemd1" |
120 | send_interface="org.freedesktop.systemd1.Manager" | |
a6011d18 | 121 | send_member="Dump"/> |
3b3557c4 | 122 | |
e24067c3 | 123 | <allow send_destination="org.freedesktop.systemd1" |
c0a1bfac DT |
124 | send_interface="org.freedesktop.systemd1.Manager" |
125 | send_member="DumpByFileDescriptor"/> | |
126 | ||
d1d8786c FB |
127 | <allow send_destination="org.freedesktop.systemd1" |
128 | send_interface="org.freedesktop.systemd1.Manager" | |
293b9aa3 | 129 | send_member="DumpUnitsMatchingPatterns"/> |
d1d8786c | 130 | |
f6cce15b ZJS |
131 | <allow send_destination="org.freedesktop.systemd1" |
132 | send_interface="org.freedesktop.systemd1.Manager" | |
133 | send_member="DumpUnitsMatchingPatternsByFileDescriptor"/> | |
134 | ||
c0a1bfac | 135 | <allow send_destination="org.freedesktop.systemd1" |
701cc384 | 136 | send_interface="org.freedesktop.systemd1.Manager" |
a6011d18 | 137 | send_member="ListUnitFiles"/> |
e24067c3 LP |
138 | |
139 | <allow send_destination="org.freedesktop.systemd1" | |
701cc384 | 140 | send_interface="org.freedesktop.systemd1.Manager" |
a6011d18 | 141 | send_member="ListUnitFilesByPatterns"/> |
e24067c3 LP |
142 | |
143 | <allow send_destination="org.freedesktop.systemd1" | |
701cc384 | 144 | send_interface="org.freedesktop.systemd1.Manager" |
a6011d18 | 145 | send_member="GetUnitFileState"/> |
e24067c3 LP |
146 | |
147 | <allow send_destination="org.freedesktop.systemd1" | |
701cc384 | 148 | send_interface="org.freedesktop.systemd1.Manager" |
a6011d18 | 149 | send_member="GetDefaultTarget"/> |
e24067c3 | 150 | |
99504dd4 VP |
151 | <allow send_destination="org.freedesktop.systemd1" |
152 | send_interface="org.freedesktop.systemd1.Manager" | |
a6011d18 | 153 | send_member="GetUnitFileLinks"/> |
99504dd4 | 154 | |
87da8a86 ZJS |
155 | <allow send_destination="org.freedesktop.systemd1" |
156 | send_interface="org.freedesktop.systemd1.Manager" | |
157 | send_member="LookupDynamicUserByName"/> | |
158 | ||
159 | <allow send_destination="org.freedesktop.systemd1" | |
160 | send_interface="org.freedesktop.systemd1.Manager" | |
161 | send_member="LookupDynamicUserByUID"/> | |
162 | ||
f9bfa696 YW |
163 | <allow send_destination="org.freedesktop.systemd1" |
164 | send_interface="org.freedesktop.systemd1.Manager" | |
165 | send_member="GetDynamicUsers"/> | |
166 | ||
a6011d18 LP |
167 | <!-- Completely open to anyone: org.freedesktop.systemd1.Unit interface --> |
168 | ||
169 | <allow send_destination="org.freedesktop.systemd1" | |
170 | send_interface="org.freedesktop.systemd1.Service" | |
171 | send_member="GetProcesses"/> | |
172 | ||
173 | <!-- Completely open to anyone: org.freedesktop.systemd1.Slice interface --> | |
174 | ||
175 | <allow send_destination="org.freedesktop.systemd1" | |
176 | send_interface="org.freedesktop.systemd1.Slice" | |
177 | send_member="GetProcesses"/> | |
178 | ||
179 | <!-- Completely open to anyone: org.freedesktop.systemd1.Scope interface --> | |
180 | ||
181 | <allow send_destination="org.freedesktop.systemd1" | |
182 | send_interface="org.freedesktop.systemd1.Scope" | |
183 | send_member="GetProcesses"/> | |
184 | ||
185 | <!-- Completely open to anyone: org.freedesktop.systemd1.Socket interface --> | |
186 | ||
187 | <allow send_destination="org.freedesktop.systemd1" | |
188 | send_interface="org.freedesktop.systemd1.Socket" | |
189 | send_member="GetProcesses"/> | |
190 | ||
191 | <!-- Completely open to anyone: org.freedesktop.systemd1.Mount interface --> | |
192 | ||
193 | <allow send_destination="org.freedesktop.systemd1" | |
194 | send_interface="org.freedesktop.systemd1.Mount" | |
195 | send_member="GetProcesses"/> | |
196 | ||
197 | <!-- Completely open to anyone: org.freedesktop.systemd1.Swap interface --> | |
198 | ||
199 | <allow send_destination="org.freedesktop.systemd1" | |
200 | send_interface="org.freedesktop.systemd1.Swap" | |
201 | send_member="GetProcesses"/> | |
202 | ||
203 | <!-- Managed via polkit or other criteria: org.freedesktop.systemd1.Manager interface --> | |
283868e1 SW |
204 | |
205 | <allow send_destination="org.freedesktop.systemd1" | |
206 | send_interface="org.freedesktop.systemd1.Manager" | |
207 | send_member="StartUnit"/> | |
208 | ||
209 | <allow send_destination="org.freedesktop.systemd1" | |
210 | send_interface="org.freedesktop.systemd1.Manager" | |
211 | send_member="StartUnitReplace"/> | |
212 | ||
213 | <allow send_destination="org.freedesktop.systemd1" | |
214 | send_interface="org.freedesktop.systemd1.Manager" | |
215 | send_member="StopUnit"/> | |
216 | ||
217 | <allow send_destination="org.freedesktop.systemd1" | |
218 | send_interface="org.freedesktop.systemd1.Manager" | |
219 | send_member="ReloadUnit"/> | |
220 | ||
221 | <allow send_destination="org.freedesktop.systemd1" | |
222 | send_interface="org.freedesktop.systemd1.Manager" | |
223 | send_member="RestartUnit"/> | |
224 | ||
225 | <allow send_destination="org.freedesktop.systemd1" | |
226 | send_interface="org.freedesktop.systemd1.Manager" | |
227 | send_member="TryRestartUnit"/> | |
228 | ||
229 | <allow send_destination="org.freedesktop.systemd1" | |
230 | send_interface="org.freedesktop.systemd1.Manager" | |
231 | send_member="ReloadOrRestartUnit"/> | |
232 | ||
233 | <allow send_destination="org.freedesktop.systemd1" | |
234 | send_interface="org.freedesktop.systemd1.Manager" | |
235 | send_member="ReloadOrTryRestartUnit"/> | |
236 | ||
5e8deb94 LB |
237 | <allow send_destination="org.freedesktop.systemd1" |
238 | send_interface="org.freedesktop.systemd1.Manager" | |
239 | send_member="BindMountUnit"/> | |
240 | ||
af477139 LB |
241 | <allow send_destination="org.freedesktop.systemd1" |
242 | send_interface="org.freedesktop.systemd1.Manager" | |
243 | send_member="MountImageUnit"/> | |
244 | ||
283868e1 SW |
245 | <allow send_destination="org.freedesktop.systemd1" |
246 | send_interface="org.freedesktop.systemd1.Manager" | |
247 | send_member="KillUnit"/> | |
248 | ||
a721cd00 LP |
249 | <allow send_destination="org.freedesktop.systemd1" |
250 | send_interface="org.freedesktop.systemd1.Manager" | |
251 | send_member="QueueSignalUnit"/> | |
252 | ||
283868e1 SW |
253 | <allow send_destination="org.freedesktop.systemd1" |
254 | send_interface="org.freedesktop.systemd1.Manager" | |
255 | send_member="ResetFailedUnit"/> | |
256 | ||
257 | <allow send_destination="org.freedesktop.systemd1" | |
258 | send_interface="org.freedesktop.systemd1.Manager" | |
259 | send_member="SetUnitProperties"/> | |
260 | ||
6900c740 | 261 | <allow send_destination="org.freedesktop.systemd1" |
262 | send_interface="org.freedesktop.systemd1.Manager" | |
a6011d18 LP |
263 | send_member="RefUnit"/> |
264 | ||
265 | <allow send_destination="org.freedesktop.systemd1" | |
266 | send_interface="org.freedesktop.systemd1.Manager" | |
267 | send_member="UnrefUnit"/> | |
6900c740 | 268 | |
283868e1 SW |
269 | <allow send_destination="org.freedesktop.systemd1" |
270 | send_interface="org.freedesktop.systemd1.Manager" | |
271 | send_member="StartTransientUnit"/> | |
272 | ||
6592b975 LP |
273 | <allow send_destination="org.freedesktop.systemd1" |
274 | send_interface="org.freedesktop.systemd1.Manager" | |
275 | send_member="AttachProcessesToUnit"/> | |
276 | ||
283868e1 SW |
277 | <allow send_destination="org.freedesktop.systemd1" |
278 | send_interface="org.freedesktop.systemd1.Manager" | |
279 | send_member="CancelJob"/> | |
280 | ||
281 | <allow send_destination="org.freedesktop.systemd1" | |
282 | send_interface="org.freedesktop.systemd1.Manager" | |
a6011d18 | 283 | send_member="ClearJobs"/> |
283868e1 SW |
284 | |
285 | <allow send_destination="org.freedesktop.systemd1" | |
286 | send_interface="org.freedesktop.systemd1.Manager" | |
a6011d18 | 287 | send_member="ResetFailed"/> |
283868e1 | 288 | |
05a98afd LP |
289 | <allow send_destination="org.freedesktop.systemd1" |
290 | send_interface="org.freedesktop.systemd1.Manager" | |
a6011d18 | 291 | send_member="Reload"/> |
05a98afd LP |
292 | |
293 | <allow send_destination="org.freedesktop.systemd1" | |
294 | send_interface="org.freedesktop.systemd1.Manager" | |
a6011d18 | 295 | send_member="Reexecute"/> |
05a98afd | 296 | |
283868e1 SW |
297 | <allow send_destination="org.freedesktop.systemd1" |
298 | send_interface="org.freedesktop.systemd1.Manager" | |
299 | send_member="EnableUnitFiles"/> | |
300 | ||
d668ba13 RP |
301 | <allow send_destination="org.freedesktop.systemd1" |
302 | send_interface="org.freedesktop.systemd1.Manager" | |
303 | send_member="EnableUnitFilesWithFlags"/> | |
304 | ||
283868e1 SW |
305 | <allow send_destination="org.freedesktop.systemd1" |
306 | send_interface="org.freedesktop.systemd1.Manager" | |
307 | send_member="DisableUnitFiles"/> | |
308 | ||
d668ba13 RP |
309 | <allow send_destination="org.freedesktop.systemd1" |
310 | send_interface="org.freedesktop.systemd1.Manager" | |
311 | send_member="DisableUnitFilesWithFlags"/> | |
312 | ||
313 | <allow send_destination="org.freedesktop.systemd1" | |
314 | send_interface="org.freedesktop.systemd1.Manager" | |
315 | send_member="DisableUnitFilesWithFlagsAndInstallInfo"/> | |
316 | ||
283868e1 SW |
317 | <allow send_destination="org.freedesktop.systemd1" |
318 | send_interface="org.freedesktop.systemd1.Manager" | |
319 | send_member="ReenableUnitFiles"/> | |
320 | ||
321 | <allow send_destination="org.freedesktop.systemd1" | |
322 | send_interface="org.freedesktop.systemd1.Manager" | |
323 | send_member="LinkUnitFiles"/> | |
324 | ||
325 | <allow send_destination="org.freedesktop.systemd1" | |
326 | send_interface="org.freedesktop.systemd1.Manager" | |
327 | send_member="PresetUnitFiles"/> | |
328 | ||
329 | <allow send_destination="org.freedesktop.systemd1" | |
330 | send_interface="org.freedesktop.systemd1.Manager" | |
331 | send_member="PresetUnitFilesWithMode"/> | |
332 | ||
333 | <allow send_destination="org.freedesktop.systemd1" | |
334 | send_interface="org.freedesktop.systemd1.Manager" | |
335 | send_member="MaskUnitFiles"/> | |
336 | ||
337 | <allow send_destination="org.freedesktop.systemd1" | |
338 | send_interface="org.freedesktop.systemd1.Manager" | |
339 | send_member="UnmaskUnitFiles"/> | |
340 | ||
a6011d18 LP |
341 | <allow send_destination="org.freedesktop.systemd1" |
342 | send_interface="org.freedesktop.systemd1.Manager" | |
343 | send_member="RevertUnitFiles"/> | |
344 | ||
283868e1 SW |
345 | <allow send_destination="org.freedesktop.systemd1" |
346 | send_interface="org.freedesktop.systemd1.Manager" | |
347 | send_member="SetDefaultTarget"/> | |
348 | ||
349 | <allow send_destination="org.freedesktop.systemd1" | |
350 | send_interface="org.freedesktop.systemd1.Manager" | |
351 | send_member="PresetAllUnitFiles"/> | |
352 | ||
e94937df LN |
353 | <allow send_destination="org.freedesktop.systemd1" |
354 | send_interface="org.freedesktop.systemd1.Manager" | |
355 | send_member="AddDependencyUnitFiles"/> | |
356 | ||
0bb007f7 FB |
357 | <allow send_destination="org.freedesktop.systemd1" |
358 | send_interface="org.freedesktop.systemd1.Manager" | |
359 | send_member="SetShowStatus"/> | |
360 | ||
a6011d18 LP |
361 | <!-- Managed via polkit or other criteria: org.freedesktop.systemd1.Job interface --> |
362 | ||
283868e1 SW |
363 | <allow send_destination="org.freedesktop.systemd1" |
364 | send_interface="org.freedesktop.systemd1.Job" | |
365 | send_member="Cancel"/> | |
366 | ||
15ea79f8 LP |
367 | <allow send_destination="org.freedesktop.systemd1" |
368 | send_interface="org.freedesktop.systemd1.Job" | |
369 | send_member="GetAfter"/> | |
370 | ||
371 | <allow send_destination="org.freedesktop.systemd1" | |
372 | send_interface="org.freedesktop.systemd1.Job" | |
373 | send_member="GetBefore"/> | |
374 | ||
a6011d18 LP |
375 | <!-- Managed via polkit or other criteria: org.freedesktop.systemd1.Unit interface --> |
376 | ||
377 | <allow send_destination="org.freedesktop.systemd1" | |
378 | send_interface="org.freedesktop.systemd1.Unit" | |
379 | send_member="Start"/> | |
380 | ||
381 | <allow send_destination="org.freedesktop.systemd1" | |
382 | send_interface="org.freedesktop.systemd1.Unit" | |
383 | send_member="Stop"/> | |
384 | ||
385 | <allow send_destination="org.freedesktop.systemd1" | |
386 | send_interface="org.freedesktop.systemd1.Unit" | |
387 | send_member="Reload"/> | |
388 | ||
389 | <allow send_destination="org.freedesktop.systemd1" | |
390 | send_interface="org.freedesktop.systemd1.Unit" | |
391 | send_member="Restart"/> | |
392 | ||
393 | <allow send_destination="org.freedesktop.systemd1" | |
394 | send_interface="org.freedesktop.systemd1.Unit" | |
395 | send_member="TryRestart"/> | |
396 | ||
397 | <allow send_destination="org.freedesktop.systemd1" | |
398 | send_interface="org.freedesktop.systemd1.Unit" | |
399 | send_member="ReloadOrRestart"/> | |
400 | ||
401 | <allow send_destination="org.freedesktop.systemd1" | |
402 | send_interface="org.freedesktop.systemd1.Unit" | |
403 | send_member="ReloadOrTryRestart"/> | |
404 | ||
405 | <allow send_destination="org.freedesktop.systemd1" | |
406 | send_interface="org.freedesktop.systemd1.Unit" | |
407 | send_member="Kill"/> | |
408 | ||
a721cd00 LP |
409 | <allow send_destination="org.freedesktop.systemd1" |
410 | send_interface="org.freedesktop.systemd1.Unit" | |
411 | send_member="QueueSignal"/> | |
412 | ||
a6011d18 LP |
413 | <allow send_destination="org.freedesktop.systemd1" |
414 | send_interface="org.freedesktop.systemd1.Unit" | |
415 | send_member="ResetFailed"/> | |
416 | ||
417 | <allow send_destination="org.freedesktop.systemd1" | |
418 | send_interface="org.freedesktop.systemd1.Unit" | |
419 | send_member="SetProperties"/> | |
420 | ||
421 | <allow send_destination="org.freedesktop.systemd1" | |
422 | send_interface="org.freedesktop.systemd1.Unit" | |
423 | send_member="Ref"/> | |
424 | ||
425 | <allow send_destination="org.freedesktop.systemd1" | |
426 | send_interface="org.freedesktop.systemd1.Unit" | |
427 | send_member="Unref"/> | |
428 | ||
6592b975 LP |
429 | <!-- Managed via polkit or other criteria: org.freedesktop.systemd1.Service interface --> |
430 | ||
431 | <allow send_destination="org.freedesktop.systemd1" | |
432 | send_interface="org.freedesktop.systemd1.Service" | |
433 | send_member="AttachProcesses"/> | |
434 | ||
5e8deb94 LB |
435 | <allow send_destination="org.freedesktop.systemd1" |
436 | send_interface="org.freedesktop.systemd1.Service" | |
437 | send_member="BindMount"/> | |
438 | ||
af477139 LB |
439 | <allow send_destination="org.freedesktop.systemd1" |
440 | send_interface="org.freedesktop.systemd1.Service" | |
441 | send_member="MountImage"/> | |
442 | ||
6592b975 LP |
443 | <!-- Managed via polkit or other criteria: org.freedesktop.systemd1.Scope interface --> |
444 | ||
445 | <allow send_destination="org.freedesktop.systemd1" | |
446 | send_interface="org.freedesktop.systemd1.Scope" | |
447 | send_member="AttachProcesses"/> | |
448 | ||
e24067c3 LP |
449 | <allow receive_sender="org.freedesktop.systemd1"/> |
450 | </policy> | |
451 | ||
452 | </busconfig> |