src/core/org.freedesktop.systemd1.conf

   1 <?xml version="1.0"?> <!--*-nxml-*-->
   2 <!DOCTYPE busconfig PUBLIC "-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN"
   3         "https://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
   4
   5 <!--
   6   SPDX-License-Identifier: LGPL-2.1-or-later
   7
   8   This file is part of systemd.
   9
  10   systemd is free software; you can redistribute it and/or modify it
  11   under the terms of the GNU Lesser General Public License as published by
  12   the Free Software Foundation; either version 2.1 of the License, or
  13   (at your option) any later version.
  14 -->
  15
  16 <busconfig>
  17
  18         <policy user="root">
  19                 <allow own="org.freedesktop.systemd1"/>
  20
  21                 <!-- Root clients can do everything -->
  22                 <allow send_destination="org.freedesktop.systemd1"/>
  23                 <allow receive_sender="org.freedesktop.systemd1"/>
  24
  25                 <!-- systemd may receive activator requests -->
  26                 <allow receive_interface="org.freedesktop.systemd1.Activator"
  27                        receive_member="ActivationRequest"/>
  28         </policy>
  29
  30         <policy context="default">
  31                 <deny send_destination="org.freedesktop.systemd1"/>
  32
  33                 <!-- Completely open to anyone: org.freedesktop.DBus.* interfaces -->
  34
  35                 <allow send_destination="org.freedesktop.systemd1"
  36                        send_interface="org.freedesktop.DBus.Introspectable"/>
  37
  38                 <allow send_destination="org.freedesktop.systemd1"
  39                        send_interface="org.freedesktop.DBus.Peer"/>
  40
  41                 <allow send_destination="org.freedesktop.systemd1"
  42                        send_interface="org.freedesktop.DBus.Properties"
  43                        send_member="Get"/>
  44
  45                 <allow send_destination="org.freedesktop.systemd1"
  46                        send_interface="org.freedesktop.DBus.Properties"
  47                        send_member="GetAll"/>
  48
  49                 <!-- Completely open to anyone: org.freedesktop.systemd1.Manager interface -->
  50
  51                 <allow send_destination="org.freedesktop.systemd1"
  52                        send_interface="org.freedesktop.systemd1.Manager"
  53                        send_member="GetUnit"/>
  54
  55                 <allow send_destination="org.freedesktop.systemd1"
  56                        send_interface="org.freedesktop.systemd1.Manager"
  57                        send_member="GetUnitByPID"/>
  58
  59                 <allow send_destination="org.freedesktop.systemd1"
  60                        send_interface="org.freedesktop.systemd1.Manager"
  61                        send_member="GetUnitByInvocationID"/>
  62
  63                 <allow send_destination="org.freedesktop.systemd1"
  64                        send_interface="org.freedesktop.systemd1.Manager"
  65                        send_member="GetUnitByControlGroup"/>
  66
  67                 <allow send_destination="org.freedesktop.systemd1"
  68                        send_interface="org.freedesktop.systemd1.Manager"
  69                        send_member="GetUnitByPIDFD"/>
  70
  71                 <allow send_destination="org.freedesktop.systemd1"
  72                        send_interface="org.freedesktop.systemd1.Manager"
  73                        send_member="LoadUnit"/>
  74
  75                 <allow send_destination="org.freedesktop.systemd1"
  76                        send_interface="org.freedesktop.systemd1.Manager"
  77                        send_member="GetUnitProcesses"/>
  78
  79                 <allow send_destination="org.freedesktop.systemd1"
  80                        send_interface="org.freedesktop.systemd1.Manager"
  81                        send_member="GetJob"/>
  82
  83                 <allow send_destination="org.freedesktop.systemd1"
  84                        send_interface="org.freedesktop.systemd1.Manager"
  85                        send_member="GetJobAfter"/>
  86
  87                 <allow send_destination="org.freedesktop.systemd1"
  88                        send_interface="org.freedesktop.systemd1.Manager"
  89                        send_member="GetJobBefore"/>
  90
  91                 <allow send_destination="org.freedesktop.systemd1"
  92                        send_interface="org.freedesktop.systemd1.Manager"
  93                        send_member="ListUnits"/>
  94
  95                 <allow send_destination="org.freedesktop.systemd1"
  96                        send_interface="org.freedesktop.systemd1.Manager"
  97                        send_member="ListUnitsFiltered"/>
  98
  99                 <allow send_destination="org.freedesktop.systemd1"
 100                        send_interface="org.freedesktop.systemd1.Manager"
 101                        send_member="ListUnitsByPatterns"/>
 102
 103                 <allow send_destination="org.freedesktop.systemd1"
 104                        send_interface="org.freedesktop.systemd1.Manager"
 105                        send_member="ListUnitsByNames"/>
 106
 107                 <allow send_destination="org.freedesktop.systemd1"
 108                        send_interface="org.freedesktop.systemd1.Manager"
 109                        send_member="ListJobs"/>
 110
 111                 <allow send_destination="org.freedesktop.systemd1"
 112                        send_interface="org.freedesktop.systemd1.Manager"
 113                        send_member="Subscribe"/>
 114
 115                 <allow send_destination="org.freedesktop.systemd1"
 116                        send_interface="org.freedesktop.systemd1.Manager"
 117                        send_member="Unsubscribe"/>
 118
 119                 <allow send_destination="org.freedesktop.systemd1"
 120                        send_interface="org.freedesktop.systemd1.Manager"
 121                        send_member="Dump"/>
 122
 123                 <allow send_destination="org.freedesktop.systemd1"
 124                        send_interface="org.freedesktop.systemd1.Manager"
 125                        send_member="DumpByFileDescriptor"/>
 126
 127                 <allow send_destination="org.freedesktop.systemd1"
 128                        send_interface="org.freedesktop.systemd1.Manager"
 129                        send_member="DumpUnitsMatchingPatterns"/>
 130
 131                 <allow send_destination="org.freedesktop.systemd1"
 132                        send_interface="org.freedesktop.systemd1.Manager"
 133                        send_member="DumpUnitsMatchingPatternsByFileDescriptor"/>
 134
 135                 <allow send_destination="org.freedesktop.systemd1"
 136                        send_interface="org.freedesktop.systemd1.Manager"
 137                        send_member="ListUnitFiles"/>
 138
 139                 <allow send_destination="org.freedesktop.systemd1"
 140                        send_interface="org.freedesktop.systemd1.Manager"
 141                        send_member="ListUnitFilesByPatterns"/>
 142
 143                 <allow send_destination="org.freedesktop.systemd1"
 144                        send_interface="org.freedesktop.systemd1.Manager"
 145                        send_member="GetUnitFileState"/>
 146
 147                 <allow send_destination="org.freedesktop.systemd1"
 148                        send_interface="org.freedesktop.systemd1.Manager"
 149                        send_member="GetDefaultTarget"/>
 150
 151                 <allow send_destination="org.freedesktop.systemd1"
 152                        send_interface="org.freedesktop.systemd1.Manager"
 153                        send_member="GetUnitFileLinks"/>
 154
 155                 <allow send_destination="org.freedesktop.systemd1"
 156                        send_interface="org.freedesktop.systemd1.Manager"
 157                        send_member="LookupDynamicUserByName"/>
 158
 159                 <allow send_destination="org.freedesktop.systemd1"
 160                        send_interface="org.freedesktop.systemd1.Manager"
 161                        send_member="LookupDynamicUserByUID"/>
 162
 163                 <allow send_destination="org.freedesktop.systemd1"
 164                        send_interface="org.freedesktop.systemd1.Manager"
 165                        send_member="GetDynamicUsers"/>
 166
 167                 <!-- Completely open to anyone: org.freedesktop.systemd1.Unit interface -->
 168
 169                 <allow send_destination="org.freedesktop.systemd1"
 170                        send_interface="org.freedesktop.systemd1.Service"
 171                        send_member="GetProcesses"/>
 172
 173                 <!-- Completely open to anyone: org.freedesktop.systemd1.Slice interface -->
 174
 175                 <allow send_destination="org.freedesktop.systemd1"
 176                        send_interface="org.freedesktop.systemd1.Slice"
 177                        send_member="GetProcesses"/>
 178
 179                 <!-- Completely open to anyone: org.freedesktop.systemd1.Scope interface -->
 180
 181                 <allow send_destination="org.freedesktop.systemd1"
 182                        send_interface="org.freedesktop.systemd1.Scope"
 183                        send_member="GetProcesses"/>
 184
 185                 <!-- Completely open to anyone: org.freedesktop.systemd1.Socket interface -->
 186
 187                 <allow send_destination="org.freedesktop.systemd1"
 188                        send_interface="org.freedesktop.systemd1.Socket"
 189                        send_member="GetProcesses"/>
 190
 191                 <!-- Completely open to anyone: org.freedesktop.systemd1.Mount interface -->
 192
 193                 <allow send_destination="org.freedesktop.systemd1"
 194                        send_interface="org.freedesktop.systemd1.Mount"
 195                        send_member="GetProcesses"/>
 196
 197                 <!-- Completely open to anyone: org.freedesktop.systemd1.Swap interface -->
 198
 199                 <allow send_destination="org.freedesktop.systemd1"
 200                        send_interface="org.freedesktop.systemd1.Swap"
 201                        send_member="GetProcesses"/>
 202
 203                 <!-- Managed via polkit or other criteria: org.freedesktop.systemd1.Manager interface -->
 204
 205                 <allow send_destination="org.freedesktop.systemd1"
 206                        send_interface="org.freedesktop.systemd1.Manager"
 207                        send_member="StartUnit"/>
 208
 209                 <allow send_destination="org.freedesktop.systemd1"
 210                        send_interface="org.freedesktop.systemd1.Manager"
 211                        send_member="StartUnitReplace"/>
 212
 213                 <allow send_destination="org.freedesktop.systemd1"
 214                        send_interface="org.freedesktop.systemd1.Manager"
 215                        send_member="StopUnit"/>
 216
 217                 <allow send_destination="org.freedesktop.systemd1"
 218                        send_interface="org.freedesktop.systemd1.Manager"
 219                        send_member="ReloadUnit"/>
 220
 221                 <allow send_destination="org.freedesktop.systemd1"
 222                        send_interface="org.freedesktop.systemd1.Manager"
 223                        send_member="RestartUnit"/>
 224
 225                 <allow send_destination="org.freedesktop.systemd1"
 226                        send_interface="org.freedesktop.systemd1.Manager"
 227                        send_member="TryRestartUnit"/>
 228
 229                 <allow send_destination="org.freedesktop.systemd1"
 230                        send_interface="org.freedesktop.systemd1.Manager"
 231                        send_member="ReloadOrRestartUnit"/>
 232
 233                 <allow send_destination="org.freedesktop.systemd1"
 234                        send_interface="org.freedesktop.systemd1.Manager"
 235                        send_member="ReloadOrTryRestartUnit"/>
 236
 237                 <allow send_destination="org.freedesktop.systemd1"
 238                        send_interface="org.freedesktop.systemd1.Manager"
 239                        send_member="BindMountUnit"/>
 240
 241                 <allow send_destination="org.freedesktop.systemd1"
 242                        send_interface="org.freedesktop.systemd1.Manager"
 243                        send_member="MountImageUnit"/>
 244
 245                 <allow send_destination="org.freedesktop.systemd1"
 246                        send_interface="org.freedesktop.systemd1.Manager"
 247                        send_member="KillUnit"/>
 248
 249                 <allow send_destination="org.freedesktop.systemd1"
 250                        send_interface="org.freedesktop.systemd1.Manager"
 251                        send_member="QueueSignalUnit"/>
 252
 253                 <allow send_destination="org.freedesktop.systemd1"
 254                        send_interface="org.freedesktop.systemd1.Manager"
 255                        send_member="ResetFailedUnit"/>
 256
 257                 <allow send_destination="org.freedesktop.systemd1"
 258                        send_interface="org.freedesktop.systemd1.Manager"
 259                        send_member="SetUnitProperties"/>
 260
 261                 <allow send_destination="org.freedesktop.systemd1"
 262                        send_interface="org.freedesktop.systemd1.Manager"
 263                        send_member="RefUnit"/>
 264
 265                 <allow send_destination="org.freedesktop.systemd1"
 266                        send_interface="org.freedesktop.systemd1.Manager"
 267                        send_member="UnrefUnit"/>
 268
 269                 <allow send_destination="org.freedesktop.systemd1"
 270                        send_interface="org.freedesktop.systemd1.Manager"
 271                        send_member="StartTransientUnit"/>
 272
 273                 <allow send_destination="org.freedesktop.systemd1"
 274                        send_interface="org.freedesktop.systemd1.Manager"
 275                        send_member="AttachProcessesToUnit"/>
 276
 277                 <allow send_destination="org.freedesktop.systemd1"
 278                        send_interface="org.freedesktop.systemd1.Manager"
 279                        send_member="CancelJob"/>
 280
 281                 <allow send_destination="org.freedesktop.systemd1"
 282                        send_interface="org.freedesktop.systemd1.Manager"
 283                        send_member="ClearJobs"/>
 284
 285                 <allow send_destination="org.freedesktop.systemd1"
 286                        send_interface="org.freedesktop.systemd1.Manager"
 287                        send_member="ResetFailed"/>
 288
 289                 <allow send_destination="org.freedesktop.systemd1"
 290                        send_interface="org.freedesktop.systemd1.Manager"
 291                        send_member="Reload"/>
 292
 293                 <allow send_destination="org.freedesktop.systemd1"
 294                        send_interface="org.freedesktop.systemd1.Manager"
 295                        send_member="Reexecute"/>
 296
 297                 <allow send_destination="org.freedesktop.systemd1"
 298                        send_interface="org.freedesktop.systemd1.Manager"
 299                        send_member="EnableUnitFiles"/>
 300
 301                 <allow send_destination="org.freedesktop.systemd1"
 302                        send_interface="org.freedesktop.systemd1.Manager"
 303                        send_member="EnableUnitFilesWithFlags"/>
 304
 305                 <allow send_destination="org.freedesktop.systemd1"
 306                        send_interface="org.freedesktop.systemd1.Manager"
 307                        send_member="DisableUnitFiles"/>
 308
 309                 <allow send_destination="org.freedesktop.systemd1"
 310                        send_interface="org.freedesktop.systemd1.Manager"
 311                        send_member="DisableUnitFilesWithFlags"/>
 312
 313                 <allow send_destination="org.freedesktop.systemd1"
 314                        send_interface="org.freedesktop.systemd1.Manager"
 315                        send_member="DisableUnitFilesWithFlagsAndInstallInfo"/>
 316
 317                 <allow send_destination="org.freedesktop.systemd1"
 318                        send_interface="org.freedesktop.systemd1.Manager"
 319                        send_member="ReenableUnitFiles"/>
 320
 321                 <allow send_destination="org.freedesktop.systemd1"
 322                        send_interface="org.freedesktop.systemd1.Manager"
 323                        send_member="LinkUnitFiles"/>
 324
 325                 <allow send_destination="org.freedesktop.systemd1"
 326                        send_interface="org.freedesktop.systemd1.Manager"
 327                        send_member="PresetUnitFiles"/>
 328
 329                 <allow send_destination="org.freedesktop.systemd1"
 330                        send_interface="org.freedesktop.systemd1.Manager"
 331                        send_member="PresetUnitFilesWithMode"/>
 332
 333                 <allow send_destination="org.freedesktop.systemd1"
 334                        send_interface="org.freedesktop.systemd1.Manager"
 335                        send_member="MaskUnitFiles"/>
 336
 337                 <allow send_destination="org.freedesktop.systemd1"
 338                        send_interface="org.freedesktop.systemd1.Manager"
 339                        send_member="UnmaskUnitFiles"/>
 340
 341                 <allow send_destination="org.freedesktop.systemd1"
 342                        send_interface="org.freedesktop.systemd1.Manager"
 343                        send_member="RevertUnitFiles"/>
 344
 345                 <allow send_destination="org.freedesktop.systemd1"
 346                        send_interface="org.freedesktop.systemd1.Manager"
 347                        send_member="SetDefaultTarget"/>
 348
 349                 <allow send_destination="org.freedesktop.systemd1"
 350                        send_interface="org.freedesktop.systemd1.Manager"
 351                        send_member="PresetAllUnitFiles"/>
 352
 353                 <allow send_destination="org.freedesktop.systemd1"
 354                        send_interface="org.freedesktop.systemd1.Manager"
 355                        send_member="AddDependencyUnitFiles"/>
 356
 357                 <allow send_destination="org.freedesktop.systemd1"
 358                        send_interface="org.freedesktop.systemd1.Manager"
 359                        send_member="SetShowStatus"/>
 360
 361                 <!-- Managed via polkit or other criteria: org.freedesktop.systemd1.Job interface -->
 362
 363                 <allow send_destination="org.freedesktop.systemd1"
 364                        send_interface="org.freedesktop.systemd1.Job"
 365                        send_member="Cancel"/>
 366
 367                 <allow send_destination="org.freedesktop.systemd1"
 368                        send_interface="org.freedesktop.systemd1.Job"
 369                        send_member="GetAfter"/>
 370
 371                 <allow send_destination="org.freedesktop.systemd1"
 372                        send_interface="org.freedesktop.systemd1.Job"
 373                        send_member="GetBefore"/>
 374
 375                 <!-- Managed via polkit or other criteria: org.freedesktop.systemd1.Unit interface -->
 376
 377                 <allow send_destination="org.freedesktop.systemd1"
 378                        send_interface="org.freedesktop.systemd1.Unit"
 379                        send_member="Start"/>
 380
 381                 <allow send_destination="org.freedesktop.systemd1"
 382                        send_interface="org.freedesktop.systemd1.Unit"
 383                        send_member="Stop"/>
 384
 385                 <allow send_destination="org.freedesktop.systemd1"
 386                        send_interface="org.freedesktop.systemd1.Unit"
 387                        send_member="Reload"/>
 388
 389                 <allow send_destination="org.freedesktop.systemd1"
 390                        send_interface="org.freedesktop.systemd1.Unit"
 391                        send_member="Restart"/>
 392
 393                 <allow send_destination="org.freedesktop.systemd1"
 394                        send_interface="org.freedesktop.systemd1.Unit"
 395                        send_member="TryRestart"/>
 396
 397                 <allow send_destination="org.freedesktop.systemd1"
 398                        send_interface="org.freedesktop.systemd1.Unit"
 399                        send_member="ReloadOrRestart"/>
 400
 401                 <allow send_destination="org.freedesktop.systemd1"
 402                        send_interface="org.freedesktop.systemd1.Unit"
 403                        send_member="ReloadOrTryRestart"/>
 404
 405                 <allow send_destination="org.freedesktop.systemd1"
 406                        send_interface="org.freedesktop.systemd1.Unit"
 407                        send_member="Kill"/>
 408
 409                 <allow send_destination="org.freedesktop.systemd1"
 410                        send_interface="org.freedesktop.systemd1.Unit"
 411                        send_member="QueueSignal"/>
 412
 413                 <allow send_destination="org.freedesktop.systemd1"
 414                        send_interface="org.freedesktop.systemd1.Unit"
 415                        send_member="ResetFailed"/>
 416
 417                 <allow send_destination="org.freedesktop.systemd1"
 418                        send_interface="org.freedesktop.systemd1.Unit"
 419                        send_member="SetProperties"/>
 420
 421                 <allow send_destination="org.freedesktop.systemd1"
 422                        send_interface="org.freedesktop.systemd1.Unit"
 423                        send_member="Ref"/>
 424
 425                 <allow send_destination="org.freedesktop.systemd1"
 426                        send_interface="org.freedesktop.systemd1.Unit"
 427                        send_member="Unref"/>
 428
 429                 <!-- Managed via polkit or other criteria: org.freedesktop.systemd1.Service interface -->
 430
 431                 <allow send_destination="org.freedesktop.systemd1"
 432                        send_interface="org.freedesktop.systemd1.Service"
 433                        send_member="AttachProcesses"/>
 434
 435                 <allow send_destination="org.freedesktop.systemd1"
 436                        send_interface="org.freedesktop.systemd1.Service"
 437                        send_member="BindMount"/>
 438
 439                 <allow send_destination="org.freedesktop.systemd1"
 440                        send_interface="org.freedesktop.systemd1.Service"
 441                        send_member="MountImage"/>
 442
 443                 <!-- Managed via polkit or other criteria: org.freedesktop.systemd1.Scope interface -->
 444
 445                 <allow send_destination="org.freedesktop.systemd1"
 446                        send_interface="org.freedesktop.systemd1.Scope"
 447                        send_member="AttachProcesses"/>
 448
 449                 <allow receive_sender="org.freedesktop.systemd1"/>
 450         </policy>
 451
 452 </busconfig>