X-Git-Url: http://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?p=elogind.git;a=blobdiff_plain;f=src%2Forg.freedesktop.systemd1.conf;h=8008f0f4bab5eaf3e35fdf3d4a387f40ed9fa1b3;hp=377e001dee70eff348ba3d10b0f8cf13f6cdd731;hb=ee17ee7c5cc22c286f943578918beaa78bbc86db;hpb=dfca381db341205b7a68f40ef2b7550ac6972cab

diff --git a/src/org.freedesktop.systemd1.conf b/src/org.freedesktop.systemd1.conf
index 377e001de..8008f0f4b 100644
--- a/src/org.freedesktop.systemd1.conf
+++ b/src/org.freedesktop.systemd1.conf
@@ -16,8 +16,13 @@
         <policy user="root">
                 <allow own="org.freedesktop.systemd1"/>
 
+                <!-- Root clients can do everything -->
                 <allow send_destination="org.freedesktop.systemd1"/>
                 <allow receive_sender="org.freedesktop.systemd1"/>
+
+                <!-- systemd may receive activator requests -->
+                <allow receive_interface="org.freedesktop.systemd1.Activator"
+                       receive_member="ActivationRequest"/>
         </policy>
 
         <policy context="default">
@@ -26,6 +31,9 @@
                 <allow send_destination="org.freedesktop.systemd1"
                        send_interface="org.freedesktop.DBus.Introspectable"/>
 
+                <allow send_destination="org.freedesktop.systemd1"
+                       send_interface="org.freedesktop.DBus.Peer"/>
+
                 <allow send_destination="org.freedesktop.systemd1"
                        send_interface="org.freedesktop.DBus.Properties"
                        send_member="Get"/>
@@ -38,6 +46,14 @@
                        send_interface="org.freedesktop.systemd1.Manager"
                        send_member="GetUnit"/>
 
+                <allow send_destination="org.freedesktop.systemd1"
+                       send_interface="org.freedesktop.systemd1.Manager"
+                       send_member="GetUnitByPID"/>
+
+                <allow send_destination="org.freedesktop.systemd1"
+                       send_interface="org.freedesktop.systemd1.Manager"
+                       send_member="LoadUnit"/>
+
                 <allow send_destination="org.freedesktop.systemd1"
                        send_interface="org.freedesktop.systemd1.Manager"
                        send_member="GetJob"/>