test/bus-policy/many-rules.conf

   1 <!DOCTYPE busconfig PUBLIC "-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN"
   2  "http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
   3 <busconfig>
   4   <user>mybususer</user>
   5   <listen>unix:path=/foo/bar</listen>
   6   <listen>tcp:port=1234</listen>
   7   <includedir>basic.d</includedir>
   8   <standard_session_servicedirs />
   9   <servicedir>/usr/share/foo</servicedir>
  10   <include ignore_missing="yes">nonexistent.conf</include>
  11   <policy context="default">
  12     <allow user="*"/>
  13     <deny send_interface="org.freedesktop.System" send_member="Reboot"/>
  14     <deny receive_interface="org.freedesktop.System" receive_member="Reboot"/>
  15     <deny send_path="/foo/bar/SystemObjectThing" send_member="Reboot"/>
  16     <deny own="org.freedesktop.System"/>
  17     <deny own_prefix="org.freedesktop.ManySystems"/>
  18     <deny send_destination="org.freedesktop.System"/>
  19     <deny receive_sender="org.freedesktop.System"/>
  20     <deny user="root"/>
  21     <deny group="bin"/>
  22     <allow send_type="error"/>
  23     <allow send_type="method_call"/>
  24     <allow send_type="method_return"/>
  25     <allow send_type="signal"/>
  26     <deny send_destination="org.freedesktop.Bar" send_interface="org.freedesktop.Foo"/>
  27     <deny send_destination="org.freedesktop.Bar" send_interface="org.freedesktop.Foo" send_type="method_call"/>
  28   </policy>
  29
  30   <policy context="mandatory">
  31     <allow user="*"/>
  32     <deny send_interface="org.freedesktop.System" send_member="Reboot"/>
  33     <deny receive_interface="org.freedesktop.System" receive_member="Reboot"/>
  34     <deny send_path="/foo/bar/SystemObjectThing" send_member="Reboot"/>
  35     <deny own="org.freedesktop.System"/>
  36     <deny own_prefix="org.freedesktop.ManySystems"/>
  37     <deny send_destination="org.freedesktop.System"/>
  38     <deny receive_sender="org.freedesktop.System"/>
  39     <deny user="root"/>
  40     <deny group="bin"/>
  41     <allow send_type="error"/>
  42     <allow send_type="method_call"/>
  43     <allow send_type="method_return"/>
  44     <allow send_type="signal"/>
  45     <deny send_destination="org.freedesktop.Bar" send_interface="org.freedesktop.Foo"/>
  46     <deny send_destination="org.freedesktop.Bar" send_interface="org.freedesktop.Foo" send_type="method_call"/>
  47   </policy>
  48
  49   <limit name="max_incoming_bytes">5000</limit>
  50   <limit name="max_outgoing_bytes">5000</limit>
  51   <limit name="max_message_size">300</limit>
  52   <limit name="service_start_timeout">5000</limit>
  53   <limit name="auth_timeout">6000</limit>
  54   <limit name="max_completed_connections">50</limit>
  55   <limit name="max_incomplete_connections">80</limit>
  56   <limit name="max_connections_per_user">64</limit>
  57   <limit name="max_pending_service_starts">64</limit>
  58   <limit name="max_names_per_connection">256</limit>
  59   <limit name="max_match_rules_per_connection">512</limit>
  60
  61 </busconfig>