mirror of
https://gitlab.freedesktop.org/dbus/dbus.git
synced 2026-05-03 06:38:00 +02:00
a683a80c40
Get matching rules mostly working in the bus; only actually parsing the rule text remains. However, the client side of "signal connections" hasn't been started, this patch is only the bus side. * dbus/dispatch.c: fix for the matching rules changes * bus/driver.c (bus_driver_handle_remove_match) (bus_driver_handle_add_match): send an ack reply from these method calls * glib/dbus-gproxy.c (dbus_gproxy_begin_call): fix order of arguments, reported by Seth Nickell * bus/config-parser.c (append_rule_from_element): support eavesdrop=true|false attribute on policies so match rules can be prevented from snooping on the system bus. * bus/dbus-daemon-1.1.in: consistently use terminology "sender" and "destination" in attribute names; fix some docs bugs; add eavesdrop=true|false attribute * bus/driver.c (bus_driver_handle_add_match) (bus_driver_handle_remove_match): handle AddMatch, RemoveMatch messages * dbus/dbus-protocol.h (DBUS_SERVICE_ORG_FREEDESKTOP_BROADCAST): get rid of broadcast service concept, signals are just always broadcast * bus/signals.c, bus/dispatch.c, bus/connection.c, bus/bus.c: mostly implement matching rules stuff (currently only exposed as signal connections)
57 lines
2.5 KiB
Text
57 lines
2.5 KiB
Text
<!DOCTYPE busconfig PUBLIC "-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN"
|
|
"http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
|
|
<busconfig>
|
|
<user>mybususer</user>
|
|
<listen>unix:path=/foo/bar</listen>
|
|
<listen>tcp:port=1234</listen>
|
|
<includedir>basic.d</includedir>
|
|
<servicedir>/usr/share/foo</servicedir>
|
|
<include ignore_missing="yes">nonexistent.conf</include>
|
|
<policy context="default">
|
|
<allow user="*"/>
|
|
<deny send_interface="org.freedesktop.System" send_member="Reboot"/>
|
|
<deny receive_interface="org.freedesktop.System" receive_member="Reboot"/>
|
|
<deny send_path="/foo/bar/SystemObjectThing" send_member="Reboot"/>
|
|
<deny own="org.freedesktop.System"/>
|
|
<deny send_destination="org.freedesktop.System"/>
|
|
<deny receive_sender="org.freedesktop.System"/>
|
|
<deny user="root"/>
|
|
<deny group="root"/>
|
|
<allow send_type="error"/>
|
|
<allow send_type="method_call"/>
|
|
<allow send_type="method_return"/>
|
|
<allow send_type="signal"/>
|
|
<deny send_destination="org.freedesktop.Bar" send_interface="org.freedesktop.Foo"/>
|
|
<deny send_destination="org.freedesktop.Bar" send_interface="org.freedesktop.Foo" send_type="method_call"/>
|
|
</policy>
|
|
|
|
<policy context="mandatory">
|
|
<allow user="*"/>
|
|
<deny send_interface="org.freedesktop.System" send_member="Reboot"/>
|
|
<deny receive_interface="org.freedesktop.System" receive_member="Reboot"/>
|
|
<deny send_path="/foo/bar/SystemObjectThing" send_member="Reboot"/>
|
|
<deny own="org.freedesktop.System"/>
|
|
<deny send_destination="org.freedesktop.System"/>
|
|
<deny receive_sender="org.freedesktop.System"/>
|
|
<deny user="root"/>
|
|
<deny group="root"/>
|
|
<allow send_type="error"/>
|
|
<allow send_type="method_call"/>
|
|
<allow send_type="method_return"/>
|
|
<allow send_type="signal"/>
|
|
<deny send_destination="org.freedesktop.Bar" send_interface="org.freedesktop.Foo"/>
|
|
<deny send_destination="org.freedesktop.Bar" send_interface="org.freedesktop.Foo" send_type="method_call"/>
|
|
</policy>
|
|
|
|
<limit name="max_incoming_bytes">5000</limit>
|
|
<limit name="max_outgoing_bytes">5000</limit>
|
|
<limit name="max_message_size">300</limit>
|
|
<limit name="activation_timeout">5000</limit>
|
|
<limit name="auth_timeout">6000</limit>
|
|
<limit name="max_completed_connections">50</limit>
|
|
<limit name="max_incomplete_connections">80</limit>
|
|
<limit name="max_connections_per_user">64</limit>
|
|
<limit name="max_pending_activations">64</limit>
|
|
<limit name="max_services_per_connection">256</limit>
|
|
|
|
</busconfig>
|