Dropped dbus at_console policy and implemented polkit authorization. By the default policy the query actions are allowed for all users, actions which do modification to the system settings or Tuned state are by default allowed only for active users that have console, others need admin authorization. Resolves: rhbz#1095142 Signed-off-by: Jaroslav Škarvada <jskarvad@redhat.com>
16 lines
587 B
XML
16 lines
587 B
XML
<?xml version="1.0"?>
|
|
<!DOCTYPE busconfig PUBLIC "-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN"
|
|
"http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
|
|
|
|
<busconfig>
|
|
<policy context="default">
|
|
<allow receive_sender="com.redhat.tuned" />
|
|
<allow send_destination="com.redhat.tuned" send_interface="org.freedesktop.DBus.Introspectable" />
|
|
<allow send_destination="com.redhat.tuned" send_interface="com.redhat.tuned.control" />
|
|
</policy>
|
|
|
|
<policy user="root">
|
|
<allow own="com.redhat.tuned" />
|
|
<allow send_destination="com.redhat.tuned" />
|
|
</policy>
|
|
</busconfig>
|