src/core/org.freedesktop.systemd1.conf

   1 <?xml version="1.0"?> <!--*-nxml-*-->
   2 <!DOCTYPE busconfig PUBLIC "-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN"
   3         "http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
   4
   5 <!--
   6   This file is part of systemd.
   7
   8   systemd is free software; you can redistribute it and/or modify it
   9   under the terms of the GNU Lesser General Public License as published by
  10   the Free Software Foundation; either version 2.1 of the License, or
  11   (at your option) any later version.
  12 -->
  13
  14 <busconfig>
  15
  16         <policy user="root">
  17                 <allow own="org.freedesktop.systemd1"/>
  18
  19                 <!-- Root clients can do everything -->
  20                 <allow send_destination="org.freedesktop.systemd1"/>
  21                 <allow receive_sender="org.freedesktop.systemd1"/>
  22
  23                 <!-- systemd may receive activator requests -->
  24                 <allow receive_interface="org.freedesktop.systemd1.Activator"
  25                        receive_member="ActivationRequest"/>
  26         </policy>
  27
  28         <policy context="default">
  29                 <deny send_destination="org.freedesktop.systemd1"/>
  30
  31                 <!-- Completely open to anyone -->
  32
  33                 <allow send_destination="org.freedesktop.systemd1"
  34                        send_interface="org.freedesktop.DBus.Introspectable"/>
  35
  36                 <allow send_destination="org.freedesktop.systemd1"
  37                        send_interface="org.freedesktop.DBus.Peer"/>
  38
  39                 <allow send_destination="org.freedesktop.systemd1"
  40                        send_interface="org.freedesktop.DBus.Properties"
  41                        send_member="Get"/>
  42
  43                 <allow send_destination="org.freedesktop.systemd1"
  44                        send_interface="org.freedesktop.DBus.Properties"
  45                        send_member="GetAll"/>
  46
  47                 <allow send_destination="org.freedesktop.systemd1"
  48                        send_interface="org.freedesktop.systemd1.Manager"
  49                        send_member="GetUnit"/>
  50
  51                 <allow send_destination="org.freedesktop.systemd1"
  52                        send_interface="org.freedesktop.systemd1.Manager"
  53                        send_member="GetUnitByPID"/>
  54
  55                 <allow send_destination="org.freedesktop.systemd1"
  56                        send_interface="org.freedesktop.systemd1.Manager"
  57                        send_member="LoadUnit"/>
  58
  59                 <allow send_destination="org.freedesktop.systemd1"
  60                        send_interface="org.freedesktop.systemd1.Manager"
  61                        send_member="GetJob"/>
  62
  63                 <allow send_destination="org.freedesktop.systemd1"
  64                        send_interface="org.freedesktop.systemd1.Manager"
  65                        send_member="ListUnits"/>
  66
  67                 <allow send_destination="org.freedesktop.systemd1"
  68                        send_interface="org.freedesktop.systemd1.Manager"
  69                        send_member="ListUnitsFiltered"/>
  70
  71                 <allow send_destination="org.freedesktop.systemd1"
  72                        send_interface="org.freedesktop.systemd1.Manager"
  73                        send_member="ListUnitFiles"/>
  74
  75                 <allow send_destination="org.freedesktop.systemd1"
  76                        send_interface="org.freedesktop.systemd1.Manager"
  77                        send_member="GetUnitFileState"/>
  78
  79                 <allow send_destination="org.freedesktop.systemd1"
  80                        send_interface="org.freedesktop.systemd1.Manager"
  81                        send_member="ListJobs"/>
  82
  83                 <allow send_destination="org.freedesktop.systemd1"
  84                        send_interface="org.freedesktop.systemd1.Manager"
  85                        send_member="Subscribe"/>
  86
  87                 <allow send_destination="org.freedesktop.systemd1"
  88                        send_interface="org.freedesktop.systemd1.Manager"
  89                        send_member="Unsubscribe"/>
  90
  91                 <allow send_destination="org.freedesktop.systemd1"
  92                        send_interface="org.freedesktop.systemd1.Manager"
  93                        send_member="Dump"/>
  94
  95                 <allow send_destination="org.freedesktop.systemd1"
  96                        send_interface="org.freedesktop.systemd1.Manager"
  97                        send_member="GetDefaultTarget"/>
  98
  99                 <!-- Managed via polkit or other criteria -->
 100
 101                 <allow send_destination="org.freedesktop.systemd1"
 102                        send_interface="org.freedesktop.systemd1.Manager"
 103                        send_member="StartUnit"/>
 104
 105                 <allow send_destination="org.freedesktop.systemd1"
 106                        send_interface="org.freedesktop.systemd1.Manager"
 107                        send_member="StartUnitReplace"/>
 108
 109                 <allow send_destination="org.freedesktop.systemd1"
 110                        send_interface="org.freedesktop.systemd1.Manager"
 111                        send_member="StopUnit"/>
 112
 113                 <allow send_destination="org.freedesktop.systemd1"
 114                        send_interface="org.freedesktop.systemd1.Manager"
 115                        send_member="ReloadUnit"/>
 116
 117                 <allow send_destination="org.freedesktop.systemd1"
 118                        send_interface="org.freedesktop.systemd1.Manager"
 119                        send_member="RestartUnit"/>
 120
 121                 <allow send_destination="org.freedesktop.systemd1"
 122                        send_interface="org.freedesktop.systemd1.Manager"
 123                        send_member="TryRestartUnit"/>
 124
 125                 <allow send_destination="org.freedesktop.systemd1"
 126                        send_interface="org.freedesktop.systemd1.Manager"
 127                        send_member="ReloadOrRestartUnit"/>
 128
 129                 <allow send_destination="org.freedesktop.systemd1"
 130                        send_interface="org.freedesktop.systemd1.Manager"
 131                        send_member="ReloadOrTryRestartUnit"/>
 132
 133                 <allow send_destination="org.freedesktop.systemd1"
 134                        send_interface="org.freedesktop.systemd1.Manager"
 135                        send_member="KillUnit"/>
 136
 137                 <allow send_destination="org.freedesktop.systemd1"
 138                        send_interface="org.freedesktop.systemd1.Manager"
 139                        send_member="ResetFailedUnit"/>
 140
 141                 <allow send_destination="org.freedesktop.systemd1"
 142                        send_interface="org.freedesktop.systemd1.Manager"
 143                        send_member="SetUnitProperties"/>
 144
 145                 <allow send_destination="org.freedesktop.systemd1"
 146                        send_interface="org.freedesktop.systemd1.Manager"
 147                        send_member="StartTransientUnit"/>
 148
 149                 <allow send_destination="org.freedesktop.systemd1"
 150                        send_interface="org.freedesktop.systemd1.Manager"
 151                        send_member="CancelJob"/>
 152
 153                 <allow send_destination="org.freedesktop.systemd1"
 154                        send_interface="org.freedesktop.systemd1.Manager"
 155                        send_member="Reload"/>
 156
 157                 <allow send_destination="org.freedesktop.systemd1"
 158                        send_interface="org.freedesktop.systemd1.Manager"
 159                        send_member="Reexecute"/>
 160
 161                 <allow send_destination="org.freedesktop.systemd1"
 162                        send_interface="org.freedesktop.systemd1.Manager"
 163                        send_member="EnableUnitFiles"/>
 164
 165                 <allow send_destination="org.freedesktop.systemd1"
 166                        send_interface="org.freedesktop.systemd1.Manager"
 167                        send_member="DisableUnitFiles"/>
 168
 169                 <allow send_destination="org.freedesktop.systemd1"
 170                        send_interface="org.freedesktop.systemd1.Manager"
 171                        send_member="ReenableUnitFiles"/>
 172
 173                 <allow send_destination="org.freedesktop.systemd1"
 174                        send_interface="org.freedesktop.systemd1.Manager"
 175                        send_member="LinkUnitFiles"/>
 176
 177                 <allow send_destination="org.freedesktop.systemd1"
 178                        send_interface="org.freedesktop.systemd1.Manager"
 179                        send_member="PresetUnitFiles"/>
 180
 181                 <allow send_destination="org.freedesktop.systemd1"
 182                        send_interface="org.freedesktop.systemd1.Manager"
 183                        send_member="PresetUnitFilesWithMode"/>
 184
 185                 <allow send_destination="org.freedesktop.systemd1"
 186                        send_interface="org.freedesktop.systemd1.Manager"
 187                        send_member="MaskUnitFiles"/>
 188
 189                 <allow send_destination="org.freedesktop.systemd1"
 190                        send_interface="org.freedesktop.systemd1.Manager"
 191                        send_member="UnmaskUnitFiles"/>
 192
 193                 <allow send_destination="org.freedesktop.systemd1"
 194                        send_interface="org.freedesktop.systemd1.Manager"
 195                        send_member="SetDefaultTarget"/>
 196
 197                 <allow send_destination="org.freedesktop.systemd1"
 198                        send_interface="org.freedesktop.systemd1.Manager"
 199                        send_member="PresetAllUnitFiles"/>
 200
 201                 <allow send_destination="org.freedesktop.systemd1"
 202                        send_interface="org.freedesktop.systemd1.Manager"
 203                        send_member="AddDependencyUnitFiles"/>
 204
 205                 <allow send_destination="org.freedesktop.systemd1"
 206                        send_interface="org.freedesktop.systemd1.Job"
 207                        send_member="Cancel"/>
 208
 209                 <allow receive_sender="org.freedesktop.systemd1"/>
 210         </policy>
 211
 212 </busconfig>