src/core/org.freedesktop.systemd1.conf

   1 <?xml version="1.0"?> <!--*-nxml-*-->
   2 <!DOCTYPE busconfig PUBLIC "-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN"
   3         "http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
   4
   5 <!--
   6   This file is part of systemd.
   7
   8   systemd is free software; you can redistribute it and/or modify it
   9   under the terms of the GNU Lesser General Public License as published by
  10   the Free Software Foundation; either version 2.1 of the License, or
  11   (at your option) any later version.
  12 -->
  13
  14 <busconfig>
  15
  16         <policy user="root">
  17                 <allow own="org.freedesktop.systemd1"/>
  18
  19                 <!-- Root clients can do everything -->
  20                 <allow send_destination="org.freedesktop.systemd1"/>
  21                 <allow receive_sender="org.freedesktop.systemd1"/>
  22
  23                 <!-- systemd may receive activator requests -->
  24                 <allow receive_interface="org.freedesktop.systemd1.Activator"
  25                        receive_member="ActivationRequest"/>
  26         </policy>
  27
  28         <policy context="default">
  29                 <deny send_destination="org.freedesktop.systemd1"/>
  30
  31                 <!-- Completely open to anyone -->
  32
  33                 <allow send_destination="org.freedesktop.systemd1"
  34                        send_interface="org.freedesktop.DBus.Introspectable"/>
  35
  36                 <allow send_destination="org.freedesktop.systemd1"
  37                        send_interface="org.freedesktop.DBus.Peer"/>
  38
  39                 <allow send_destination="org.freedesktop.systemd1"
  40                        send_interface="org.freedesktop.DBus.Properties"
  41                        send_member="Get"/>
  42
  43                 <allow send_destination="org.freedesktop.systemd1"
  44                        send_interface="org.freedesktop.DBus.Properties"
  45                        send_member="GetAll"/>
  46
  47                 <allow send_destination="org.freedesktop.systemd1"
  48                        send_interface="org.freedesktop.systemd1.Manager"
  49                        send_member="GetUnit"/>
  50
  51                 <allow send_destination="org.freedesktop.systemd1"
  52                        send_interface="org.freedesktop.systemd1.Manager"
  53                        send_member="GetUnitByPID"/>
  54
  55                 <allow send_destination="org.freedesktop.systemd1"
  56                        send_interface="org.freedesktop.systemd1.Manager"
  57                        send_member="GetUnitByInvocationID"/>
  58
  59                 <allow send_destination="org.freedesktop.systemd1"
  60                        send_interface="org.freedesktop.systemd1.Manager"
  61                        send_member="LoadUnit"/>
  62
  63                 <allow send_destination="org.freedesktop.systemd1"
  64                        send_interface="org.freedesktop.systemd1.Manager"
  65                        send_member="GetJob"/>
  66
  67                 <allow send_destination="org.freedesktop.systemd1"
  68                        send_interface="org.freedesktop.systemd1.Manager"
  69                        send_member="GetJobAfter"/>
  70
  71                 <allow send_destination="org.freedesktop.systemd1"
  72                        send_interface="org.freedesktop.systemd1.Manager"
  73                        send_member="GetJobBefore"/>
  74
  75                 <allow send_destination="org.freedesktop.systemd1"
  76                        send_interface="org.freedesktop.systemd1.Manager"
  77                        send_member="ListUnits"/>
  78
  79                 <allow send_destination="org.freedesktop.systemd1"
  80                        send_interface="org.freedesktop.systemd1.Manager"
  81                        send_member="ListUnitsFiltered"/>
  82
  83                 <allow send_destination="org.freedesktop.systemd1"
  84                        send_interface="org.freedesktop.systemd1.Manager"
  85                        send_member="ListUnitsByPatterns"/>
  86
  87                 <allow send_destination="org.freedesktop.systemd1"
  88                        send_interface="org.freedesktop.systemd1.Manager"
  89                        send_member="ListUnitFiles"/>
  90
  91                 <allow send_destination="org.freedesktop.systemd1"
  92                        send_interface="org.freedesktop.systemd1.Manager"
  93                        send_member="ListUnitFilesByPatterns"/>
  94
  95                 <allow send_destination="org.freedesktop.systemd1"
  96                        send_interface="org.freedesktop.systemd1.Manager"
  97                        send_member="GetUnitFileState"/>
  98
  99                 <allow send_destination="org.freedesktop.systemd1"
 100                        send_interface="org.freedesktop.systemd1.Manager"
 101                        send_member="GetUnitProcesses"/>
 102
 103                 <allow send_destination="org.freedesktop.systemd1"
 104                        send_interface="org.freedesktop.systemd1.Manager"
 105                        send_member="GetUnitFileLinks"/>
 106
 107                 <allow send_destination="org.freedesktop.systemd1"
 108                        send_interface="org.freedesktop.systemd1.Manager"
 109                        send_member="ListJobs"/>
 110
 111                 <allow send_destination="org.freedesktop.systemd1"
 112                        send_interface="org.freedesktop.systemd1.Manager"
 113                        send_member="Subscribe"/>
 114
 115                 <allow send_destination="org.freedesktop.systemd1"
 116                        send_interface="org.freedesktop.systemd1.Manager"
 117                        send_member="Unsubscribe"/>
 118
 119                 <allow send_destination="org.freedesktop.systemd1"
 120                        send_interface="org.freedesktop.systemd1.Manager"
 121                        send_member="Dump"/>
 122
 123                 <allow send_destination="org.freedesktop.systemd1"
 124                        send_interface="org.freedesktop.systemd1.Manager"
 125                        send_member="GetDefaultTarget"/>
 126
 127                 <allow send_destination="org.freedesktop.systemd1"
 128                        send_interface="org.freedesktop.systemd1.Manager"
 129                        send_member="LookupDynamicUserByName"/>
 130
 131                 <allow send_destination="org.freedesktop.systemd1"
 132                        send_interface="org.freedesktop.systemd1.Manager"
 133                        send_member="LookupDynamicUserByUID"/>
 134
 135                 <!-- Managed via polkit or other criteria -->
 136
 137                 <allow send_destination="org.freedesktop.systemd1"
 138                        send_interface="org.freedesktop.systemd1.Manager"
 139                        send_member="StartUnit"/>
 140
 141                 <allow send_destination="org.freedesktop.systemd1"
 142                        send_interface="org.freedesktop.systemd1.Manager"
 143                        send_member="StartUnitReplace"/>
 144
 145                 <allow send_destination="org.freedesktop.systemd1"
 146                        send_interface="org.freedesktop.systemd1.Manager"
 147                        send_member="StopUnit"/>
 148
 149                 <allow send_destination="org.freedesktop.systemd1"
 150                        send_interface="org.freedesktop.systemd1.Manager"
 151                        send_member="ReloadUnit"/>
 152
 153                 <allow send_destination="org.freedesktop.systemd1"
 154                        send_interface="org.freedesktop.systemd1.Manager"
 155                        send_member="RestartUnit"/>
 156
 157                 <allow send_destination="org.freedesktop.systemd1"
 158                        send_interface="org.freedesktop.systemd1.Manager"
 159                        send_member="TryRestartUnit"/>
 160
 161                 <allow send_destination="org.freedesktop.systemd1"
 162                        send_interface="org.freedesktop.systemd1.Manager"
 163                        send_member="ReloadOrRestartUnit"/>
 164
 165                 <allow send_destination="org.freedesktop.systemd1"
 166                        send_interface="org.freedesktop.systemd1.Manager"
 167                        send_member="ReloadOrTryRestartUnit"/>
 168
 169                 <allow send_destination="org.freedesktop.systemd1"
 170                        send_interface="org.freedesktop.systemd1.Manager"
 171                        send_member="KillUnit"/>
 172
 173                 <allow send_destination="org.freedesktop.systemd1"
 174                        send_interface="org.freedesktop.systemd1.Manager"
 175                        send_member="ResetFailedUnit"/>
 176
 177                 <allow send_destination="org.freedesktop.systemd1"
 178                        send_interface="org.freedesktop.systemd1.Manager"
 179                        send_member="SetUnitProperties"/>
 180
 181                 <allow send_destination="org.freedesktop.systemd1"
 182                        send_interface="org.freedesktop.systemd1.Manager"
 183                        send_member="ListUnitsByNames"/>
 184
 185                 <allow send_destination="org.freedesktop.systemd1"
 186                        send_interface="org.freedesktop.systemd1.Manager"
 187                        send_member="StartTransientUnit"/>
 188
 189                 <allow send_destination="org.freedesktop.systemd1"
 190                        send_interface="org.freedesktop.systemd1.Manager"
 191                        send_member="CancelJob"/>
 192
 193                 <allow send_destination="org.freedesktop.systemd1"
 194                        send_interface="org.freedesktop.systemd1.Manager"
 195                        send_member="Reload"/>
 196
 197                 <allow send_destination="org.freedesktop.systemd1"
 198                        send_interface="org.freedesktop.systemd1.Manager"
 199                        send_member="Reexecute"/>
 200
 201                 <allow send_destination="org.freedesktop.systemd1"
 202                        send_interface="org.freedesktop.systemd1.Manager"
 203                        send_member="RefUnit"/>
 204
 205                 <allow send_destination="org.freedesktop.systemd1"
 206                        send_interface="org.freedesktop.systemd1.Manager"
 207                        send_member="UnrefUnit"/>
 208
 209                 <allow send_destination="org.freedesktop.systemd1"
 210                        send_interface="org.freedesktop.systemd1.Manager"
 211                        send_member="EnableUnitFiles"/>
 212
 213                 <allow send_destination="org.freedesktop.systemd1"
 214                        send_interface="org.freedesktop.systemd1.Manager"
 215                        send_member="DisableUnitFiles"/>
 216
 217                 <allow send_destination="org.freedesktop.systemd1"
 218                        send_interface="org.freedesktop.systemd1.Manager"
 219                        send_member="ReenableUnitFiles"/>
 220
 221                 <allow send_destination="org.freedesktop.systemd1"
 222                        send_interface="org.freedesktop.systemd1.Manager"
 223                        send_member="LinkUnitFiles"/>
 224
 225                 <allow send_destination="org.freedesktop.systemd1"
 226                        send_interface="org.freedesktop.systemd1.Manager"
 227                        send_member="RevertUnitFiles"/>
 228
 229                 <allow send_destination="org.freedesktop.systemd1"
 230                        send_interface="org.freedesktop.systemd1.Manager"
 231                        send_member="PresetUnitFiles"/>
 232
 233                 <allow send_destination="org.freedesktop.systemd1"
 234                        send_interface="org.freedesktop.systemd1.Manager"
 235                        send_member="PresetUnitFilesWithMode"/>
 236
 237                 <allow send_destination="org.freedesktop.systemd1"
 238                        send_interface="org.freedesktop.systemd1.Manager"
 239                        send_member="MaskUnitFiles"/>
 240
 241                 <allow send_destination="org.freedesktop.systemd1"
 242                        send_interface="org.freedesktop.systemd1.Manager"
 243                        send_member="UnmaskUnitFiles"/>
 244
 245                 <allow send_destination="org.freedesktop.systemd1"
 246                        send_interface="org.freedesktop.systemd1.Manager"
 247                        send_member="SetDefaultTarget"/>
 248
 249                 <allow send_destination="org.freedesktop.systemd1"
 250                        send_interface="org.freedesktop.systemd1.Manager"
 251                        send_member="PresetAllUnitFiles"/>
 252
 253                 <allow send_destination="org.freedesktop.systemd1"
 254                        send_interface="org.freedesktop.systemd1.Manager"
 255                        send_member="AddDependencyUnitFiles"/>
 256
 257                 <allow send_destination="org.freedesktop.systemd1"
 258                        send_interface="org.freedesktop.systemd1.Job"
 259                        send_member="Cancel"/>
 260
 261                 <allow send_destination="org.freedesktop.systemd1"
 262                        send_interface="org.freedesktop.systemd1.Job"
 263                        send_member="GetAfter"/>
 264
 265                 <allow send_destination="org.freedesktop.systemd1"
 266                        send_interface="org.freedesktop.systemd1.Job"
 267                        send_member="GetBefore"/>
 268
 269                 <allow receive_sender="org.freedesktop.systemd1"/>
 270         </policy>
 271
 272 </busconfig>