]> git.ipfire.org Git - thirdparty/systemd.git/commitdiff
machined: properly open up all missing method calls via D-Bus to unpriv clients
authorLennart Poettering <lennart@poettering.net>
Fri, 23 May 2025 12:10:50 +0000 (14:10 +0200)
committerLennart Poettering <lennart@poettering.net>
Fri, 6 Jun 2025 20:15:25 +0000 (22:15 +0200)
These method calls all already have polkit hookup, hence actually allow
them to go through on all levels.

This is mostly playing catchup with a variety of calls added over the
years.

src/machine/org.freedesktop.machine1.conf

index c3c8149f9ab6cb57258c30da11781da10a2a5138..c0b329fcc3bbcaecb241956b57c3071153e62606 100644 (file)
                        send_interface="org.freedesktop.machine1.Manager"
                        send_member="GetMachineAddresses"/>
 
+                <allow send_destination="org.freedesktop.machine1"
+                       send_interface="org.freedesktop.machine1.Manager"
+                       send_member="GetMachineSSHInfo"/>
+
                 <allow send_destination="org.freedesktop.machine1"
                        send_interface="org.freedesktop.machine1.Manager"
                        send_member="GetMachineOSRelease"/>
                        send_interface="org.freedesktop.machine1.Manager"
                        send_member="OpenMachineShell"/>
 
+                <allow send_destination="org.freedesktop.machine1"
+                       send_interface="org.freedesktop.machine1.Manager"
+                       send_member="OpenMachineRootDirectory"/>
+
                 <allow send_destination="org.freedesktop.machine1"
                        send_interface="org.freedesktop.machine1.Manager"
                        send_member="UnregisterMachine"/>
                        send_interface="org.freedesktop.machine1.Manager"
                        send_member="CopyFromMachine"/>
 
+                <allow send_destination="org.freedesktop.machine1"
+                       send_interface="org.freedesktop.machine1.Manager"
+                       send_member="CopyFromMachineWithFlags"/>
+
                 <allow send_destination="org.freedesktop.machine1"
                        send_interface="org.freedesktop.machine1.Manager"
                        send_member="CopyToMachine"/>
 
+                <allow send_destination="org.freedesktop.machine1"
+                       send_interface="org.freedesktop.machine1.Manager"
+                       send_member="CopyToMachineWithFlags"/>
+
                 <allow send_destination="org.freedesktop.machine1"
                        send_interface="org.freedesktop.machine1.Manager"
                        send_member="RemoveImage"/>
                        send_interface="org.freedesktop.machine1.Machine"
                        send_member="GetAddresses"/>
 
+                <allow send_destination="org.freedesktop.machine1"
+                       send_interface="org.freedesktop.machine1.Machine"
+                       send_member="GetSSHInfo"/>
+
                 <allow send_destination="org.freedesktop.machine1"
                        send_interface="org.freedesktop.machine1.Machine"
                        send_member="GetOSRelease"/>
                        send_interface="org.freedesktop.machine1.Machine"
                        send_member="OpenShell"/>
 
+                <allow send_destination="org.freedesktop.machine1"
+                       send_interface="org.freedesktop.machine1.Machine"
+                       send_member="OpenRootDirectory"/>
+
                 <allow send_destination="org.freedesktop.machine1"
                        send_interface="org.freedesktop.machine1.Machine"
                        send_member="Terminate"/>
                        send_interface="org.freedesktop.machine1.Machine"
                        send_member="CopyFrom"/>
 
+                <allow send_destination="org.freedesktop.machine1"
+                       send_interface="org.freedesktop.machine1.Machine"
+                       send_member="CopyFromWithFlags"/>
+
                 <allow send_destination="org.freedesktop.machine1"
                        send_interface="org.freedesktop.machine1.Machine"
                        send_member="CopyTo"/>
 
+                <allow send_destination="org.freedesktop.machine1"
+                       send_interface="org.freedesktop.machine1.Machine"
+                       send_member="CopyToWithFlags"/>
+
+                <!-- org.freedesktop.machine1.Image Method Calls -->
+
                 <allow send_destination="org.freedesktop.machine1"
                        send_interface="org.freedesktop.machine1.Image"
                        send_member="Remove"/>