mirror of
https://gitlab.freedesktop.org/NetworkManager/NetworkManager.git
synced 2026-01-15 07:10:25 +01:00
fd4bdc5c54
When root is at_console, the at_console stuff overrides the user=root section. Since the default section will deny-by-default, explicitly allow certain D-Bus interfaces to be usable by at_console users (including root when root is at_console) prevents root from being denied access to those interfaces when root is at_console.
64 lines
2.6 KiB
Text
64 lines
2.6 KiB
Text
<!DOCTYPE busconfig PUBLIC
|
|
"-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN"
|
|
"http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
|
|
<busconfig>
|
|
<policy user="root">
|
|
<allow own="org.freedesktop.NetworkManager"/>
|
|
<allow send_destination="org.freedesktop.NetworkManager"/>
|
|
|
|
<allow send_destination="org.freedesktop.NetworkManager"
|
|
send_interface="org.freedesktop.NetworkManager.PPP"/>
|
|
</policy>
|
|
<policy at_console="true">
|
|
<allow send_destination="org.freedesktop.NetworkManager"/>
|
|
|
|
<allow send_destination="org.freedesktop.NetworkManager"
|
|
send_interface="org.freedesktop.DBus.Introspectable"/>
|
|
|
|
<allow send_destination="org.freedesktop.NetworkManager"
|
|
send_interface="org.freedesktop.DBus.Properties"/>
|
|
|
|
<allow send_destination="org.freedesktop.NetworkManager"
|
|
send_interface="org.freedesktop.NetworkManager"/>
|
|
|
|
<allow send_destination="org.freedesktop.NetworkManager"
|
|
send_interface="org.freedesktop.NetworkManager.AccessPoint"/>
|
|
|
|
<allow send_destination="org.freedesktop.NetworkManager"
|
|
send_interface="org.freedesktop.NetworkManager.Connection.Active"/>
|
|
|
|
<allow send_destination="org.freedesktop.NetworkManager"
|
|
send_interface="org.freedesktop.NetworkManager.Device.Cdma"/>
|
|
|
|
<allow send_destination="org.freedesktop.NetworkManager"
|
|
send_interface="org.freedesktop.NetworkManager.Device.Wired"/>
|
|
|
|
<allow send_destination="org.freedesktop.NetworkManager"
|
|
send_interface="org.freedesktop.NetworkManager.Device.Gsm"/>
|
|
|
|
<allow send_destination="org.freedesktop.NetworkManager"
|
|
send_interface="org.freedesktop.NetworkManager.Device.Serial"/>
|
|
|
|
<allow send_destination="org.freedesktop.NetworkManager"
|
|
send_interface="org.freedesktop.NetworkManager.Device.Wireless"/>
|
|
|
|
<allow send_destination="org.freedesktop.NetworkManager"
|
|
send_interface="org.freedesktop.NetworkManager.Device"/>
|
|
|
|
<allow send_destination="org.freedesktop.NetworkManager"
|
|
send_interface="org.freedesktop.NetworkManager.DHCP4Config"/>
|
|
|
|
<allow send_destination="org.freedesktop.NetworkManager"
|
|
send_interface="org.freedesktop.NetworkManager.IP4Config"/>
|
|
|
|
<allow send_destination="org.freedesktop.NetworkManager"
|
|
send_interface="org.freedesktop.NetworkManager.VPN.Connection"/>
|
|
</policy>
|
|
<policy context="default">
|
|
<deny own="org.freedesktop.NetworkManager"/>
|
|
<deny send_destination="org.freedesktop.NetworkManager"/>
|
|
</policy>
|
|
|
|
<limit name="max_replies_per_connection">512</limit>
|
|
</busconfig>
|
|
|