mirror of
https://git.kernel.org/pub/scm/network/wireless/iwd.git
synced 2024-10-04 18:38:48 +02:00
fe2272c112
There is no need to punch the holes for netdev/wheel groups to send to the .Agent interface. This is only done by the iwd daemon itself and the policy for user 'root' already takes care of this.
29 lines
792 B
Plaintext
29 lines
792 B
Plaintext
<!-- This configuration file specifies the required security policies
|
|
for Wireless daemon to work. -->
|
|
|
|
<!DOCTYPE busconfig PUBLIC "-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN"
|
|
"http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
|
|
<busconfig>
|
|
|
|
<!-- ../system.conf have denied everything, so we just punch some holes -->
|
|
|
|
<policy user="root">
|
|
<allow own="net.connman.iwd"/>
|
|
<allow send_destination="net.connman.iwd"/>
|
|
<allow send_interface="net.connman.iwd.Agent"/>
|
|
</policy>
|
|
|
|
<policy group="wheel">
|
|
<allow send_destination="net.connman.iwd"/>
|
|
</policy>
|
|
|
|
<policy group="netdev">
|
|
<allow send_destination="net.connman.iwd"/>
|
|
</policy>
|
|
|
|
<policy context="default">
|
|
<deny send_destination="net.connman.iwd"/>
|
|
</policy>
|
|
|
|
</busconfig>
|