X-Git-Url: https://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?a=blobdiff_plain;f=src%2Forg.freedesktop.systemd1.conf;h=6db71e2c8e1a4618f956370e6c97cdcd07be9273;hb=e8bf3c88e3a80b791cee3c6207a36e82a2ac1029;hp=377e001dee70eff348ba3d10b0f8cf13f6cdd731;hpb=dfca381db341205b7a68f40ef2b7550ac6972cab;p=elogind.git

diff --git a/src/org.freedesktop.systemd1.conf b/src/org.freedesktop.systemd1.conf
index 377e001de..6db71e2c8 100644
--- a/src/org.freedesktop.systemd1.conf
+++ b/src/org.freedesktop.systemd1.conf
@@ -16,8 +16,13 @@
         <policy user="root">
                 <allow own="org.freedesktop.systemd1"/>
 
+                <!-- Root clients can do everything -->
                 <allow send_destination="org.freedesktop.systemd1"/>
                 <allow receive_sender="org.freedesktop.systemd1"/>
+
+                <!-- systemd may receive activator requests -->
+                <allow receive_interface="org.freedesktop.systemd1.Activator"
+                       receive_member="ActivationRequest"/>
         </policy>
 
         <policy context="default">
@@ -26,6 +31,9 @@
                 <allow send_destination="org.freedesktop.systemd1"
                        send_interface="org.freedesktop.DBus.Introspectable"/>
 
+                <allow send_destination="org.freedesktop.systemd1"
+                       send_interface="org.freedesktop.DBus.Peer"/>
+
                 <allow send_destination="org.freedesktop.systemd1"
                        send_interface="org.freedesktop.DBus.Properties"
                        send_member="Get"/>
@@ -38,6 +46,10 @@
                        send_interface="org.freedesktop.systemd1.Manager"
                        send_member="GetUnit"/>
 
+                <allow send_destination="org.freedesktop.systemd1"
+                       send_interface="org.freedesktop.systemd1.Manager"
+                       send_member="GetUnitByPID"/>
+
                 <allow send_destination="org.freedesktop.systemd1"
                        send_interface="org.freedesktop.systemd1.Manager"
                        send_member="GetJob"/>