From nobody Tue May 03 01:01:30 2022
X-Original-To: desktop@mlmmj.nyi.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1])
	by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 59C801AA8091
	for <desktop@mlmmj.nyi.freebsd.org>; Tue,  3 May 2022 01:01:30 +0000 (UTC)
	(envelope-from bugzilla-noreply@freebsd.org)
Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3])
	(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
	 key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256
	 client-signature RSA-PSS (4096 bits) client-digest SHA256)
	(Client CN "mxrelay.nyi.freebsd.org", Issuer "R3" (verified OK))
	by mx1.freebsd.org (Postfix) with ESMTPS id 4KshVf0Jf8z3w1c
	for <desktop@FreeBSD.org>; Tue,  3 May 2022 01:01:30 +0000 (UTC)
	(envelope-from bugzilla-noreply@freebsd.org)
Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d])
	(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
	 key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256)
	(Client did not present a certificate)
	by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id DF5E114ABE
	for <desktop@FreeBSD.org>; Tue,  3 May 2022 01:01:29 +0000 (UTC)
	(envelope-from bugzilla-noreply@freebsd.org)
Received: from kenobi.freebsd.org ([127.0.1.5])
	by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 24311TNM036969
	for <desktop@FreeBSD.org>; Tue, 3 May 2022 01:01:29 GMT
	(envelope-from bugzilla-noreply@freebsd.org)
Received: (from www@localhost)
	by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 24311TQG036968
	for desktop@FreeBSD.org; Tue, 3 May 2022 01:01:29 GMT
	(envelope-from bugzilla-noreply@freebsd.org)
X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f
From: bugzilla-noreply@freebsd.org
To: desktop@FreeBSD.org
Subject: [Bug 263716] devel/dbus: not allowed to own service due to security
 policies in configuration file
Date: Tue, 03 May 2022 01:01:30 +0000
X-Bugzilla-Reason: AssignedTo
X-Bugzilla-Type: changed
X-Bugzilla-Watch-Reason: None
X-Bugzilla-Product: Ports & Packages
X-Bugzilla-Component: Individual Port(s)
X-Bugzilla-Version: Latest
X-Bugzilla-Keywords: 
X-Bugzilla-Severity: Affects Only Me
X-Bugzilla-Who: vermaden@interia.pl
X-Bugzilla-Status: Open
X-Bugzilla-Resolution: 
X-Bugzilla-Priority: ---
X-Bugzilla-Assigned-To: desktop@FreeBSD.org
X-Bugzilla-Flags: maintainer-feedback+
X-Bugzilla-Changed-Fields: 
Message-ID: <bug-263716-39348-U1ZdFfCHiu@https.bugs.freebsd.org/bugzilla/>
In-Reply-To: <bug-263716-39348@https.bugs.freebsd.org/bugzilla/>
References: <bug-263716-39348@https.bugs.freebsd.org/bugzilla/>
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/
Auto-Submitted: auto-generated
List-Id: Using and improving FreeBSD on the desktop <freebsd-desktop.freebsd.org>
List-Archive: https://lists.freebsd.org/archives/freebsd-desktop
List-Help: <mailto:freebsd-desktop+help@freebsd.org>
List-Post: <mailto:freebsd-desktop@freebsd.org>
List-Subscribe: <mailto:freebsd-desktop+subscribe@freebsd.org>
List-Unsubscribe: <mailto:freebsd-desktop+unsubscribe@freebsd.org>
Sender: owner-freebsd-desktop@freebsd.org
MIME-Version: 1.0
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org;
	s=dkim; t=1651539690;
	h=from:from:reply-to:subject:subject:date:date:message-id:message-id:
	 to:to:cc:mime-version:mime-version:content-type:content-type:
	 content-transfer-encoding:content-transfer-encoding:
	 in-reply-to:in-reply-to:references:references;
	bh=L3XlrG5DsqD/hAvIvd88ldSl0T70RJlEkp52jTib/nM=;
	b=A6HYlTMwNIlugrcohTC9NL7te6OAbfRJ/SlinzVTDdOeiIdvewudpN2OX3GZTcNfrsBS+d
	zKw55Lbqh/+OkemRVLflLT6qJvULoS6qzAtLY8/1Ak9A0587QAkmkfTBX4HV4d6J6CFcGO
	fVD2xIskqp7ykcHn1HZNIFtU9rt47o6zVknz+om7Ucl64SXujdLPXFL2WLcvXZuZTRxgKa
	0Va0odWPvzy8ZKXhQIG8YrvgW1ctA53AIVyCqXVrAt+w7obx+oigHqwB88t1DEbEqWu7ZV
	jBVijGVw2NkSLQ5LYy8vg8ZGe2LhW9MgE7ekR4jOXc25vCFciuUdCWfrIjo+cg==
ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1651539690; a=rsa-sha256; cv=none;
	b=ZMq4s4zPmkiIGhchjb/kk4zFnuce1sansBMq0lMxIF5LqOlrpwn6AWbppauSC2aQruhTNd
	J4MWeqFWeehMjjgEN6lHN03MUidRkXAgDDpXqvPXiK/9atdIqNiDfRxcskwq8Y6mlCGL/9
	TeoTnWM5CaAPM57kCoyjul8IJVuHYMgf5L2YYnCOAVALQbqZJekBnVgH6mbu9u/gBDtxSZ
	JrL4tmhSouOzYvA7Xe8pWEEa8GWOjX8sDHhh/Toj4VfIfHEk28FdT5Yb1r5vMhL0Eq19c8
	Nb0itvwtiTxTRKqZB2LuUQRNa4CC1r/k3YRQNESiplRqebgDk0+xfzNHX5mZVg==
ARC-Authentication-Results: i=1;
	mx1.freebsd.org;
	none
X-ThisMailContainsUnwantedMimeParts: N

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D263716

--- Comment #7 from Slawomir Wojciech Wojtczak <vermaden@interia.pl> ---
I did not touched the configs - these files were installed from the package=
s.



/usr/local/etc/dbus-1/system.d/avahi-dbus.conf
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D
<!DOCTYPE busconfig PUBLIC
          "-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN"
          "http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
<busconfig>

  <!-- Only root or user avahi can own the Avahi service -->
  <policy user=3D"avahi">
    <allow own=3D"org.freedesktop.Avahi"/>
  </policy>
  <policy user=3D"root">
    <allow own=3D"org.freedesktop.Avahi"/>
  </policy>

  <!-- Allow anyone to invoke methods on Avahi server, except SetHostName -=
->
  <policy context=3D"default">
    <allow send_destination=3D"org.freedesktop.Avahi"/>
    <allow receive_sender=3D"org.freedesktop.Avahi"/>

    <deny send_destination=3D"org.freedesktop.Avahi"
          send_interface=3D"org.freedesktop.Avahi.Server"
send_member=3D"SetHostName"/>
  </policy>

  <!-- Allow everything, including access to SetHostName to users of the gr=
oup
"network" -->
  <policy group=3D"network">
    <allow send_destination=3D"org.freedesktop.Avahi"/>
    <allow receive_sender=3D"org.freedesktop.Avahi"/>
  </policy>
  <policy user=3D"root">
    <allow send_destination=3D"org.freedesktop.Avahi"/>
    <allow receive_sender=3D"org.freedesktop.Avahi"/>
  </policy>
</busconfig>



/usr/local/etc/dbus-1/system.d/ConsoleKit.conf
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D
<!DOCTYPE busconfig PUBLIC
 "-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN"
 "http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
<busconfig>

  <!-- Only root can own the service -->
  <policy user=3D"root">
    <allow own=3D"org.freedesktop.ConsoleKit"/>

    <!-- Allow all methods on interfaces -->
    <allow send_destination=3D"org.freedesktop.ConsoleKit"/>
  </policy>

  <!-- Deny all and then allow some methods on interfaces -->
  <policy context=3D"default">
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.DBus.Introspectable"/>
    <deny send_destination=3D"org.freedesktop.ConsoleKit"
          send_interface=3D"org.freedesktop.ConsoleKit.Manager"/>
    <deny send_destination=3D"org.freedesktop.ConsoleKit"
          send_interface=3D"org.freedesktop.ConsoleKit.Seat"/>
    <deny send_destination=3D"org.freedesktop.ConsoleKit"
          send_interface=3D"org.freedesktop.ConsoleKit.Session"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
          send_interface=3D"org.freedesktop.DBus.Properties" />

    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Manager"
           send_member=3D"Restart"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Manager"
           send_member=3D"CanRestart"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Manager"
           send_member=3D"Stop"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Manager"
           send_member=3D"CanStop"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Manager"
           send_member=3D"Reboot"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Manager"
           send_member=3D"CanReboot"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Manager"
           send_member=3D"PowerOff"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Manager"
           send_member=3D"CanPowerOff"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Manager"
           send_member=3D"Suspend"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Manager"
           send_member=3D"CanSuspend"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Manager"
           send_member=3D"Hibernate"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Manager"
           send_member=3D"CanHibernate"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Manager"
           send_member=3D"HybridSleep"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Manager"
           send_member=3D"CanHybridSleep"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Manager"
           send_member=3D"Inhibit"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Manager"
           send_member=3D"ListInhibitors"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Manager"
           send_member=3D"OpenSession"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Manager"
           send_member=3D"CloseSession"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Manager"
           send_member=3D"ListSeats"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Manager"
           send_member=3D"GetSeats"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Manager"
           send_member=3D"GetSessions"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Manager"
           send_member=3D"GetSessionForCookie"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Manager"
           send_member=3D"GetSessionForUnixProcess"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Manager"
           send_member=3D"GetSessionByPID"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Manager"
           send_member=3D"GetCurrentSession"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Manager"
           send_member=3D"GetSessionsForUnixUser"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Manager"
           send_member=3D"GetSessionsForUser"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Manager"
           send_member=3D"ActivateSession"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Manager"
           send_member=3D"ActivateSessionOnSeat"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Manager"
           send_member=3D"GetSystemIdleHint"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Manager"
           send_member=3D"GetSystemIdleSinceHint"/>

    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Seat"
           send_member=3D"GetId"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Seat"
           send_member=3D"GetName"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Seat"
           send_member=3D"GetSessions"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Seat"
           send_member=3D"GetDevices"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Seat"
           send_member=3D"GetActiveSession"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Seat"
           send_member=3D"CanActivateSessions"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Seat"
           send_member=3D"ActivateSession"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Seat"
           send_member=3D"SwitchTo"/>

    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Session"
           send_member=3D"GetId"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Session"
           send_member=3D"GetSeatId"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Session"
           send_member=3D"GetLoginSessionId"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Session"
           send_member=3D"GetSessionType"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Session"
           send_member=3D"GetSessionClass"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Session"
           send_member=3D"GetSessionState"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Session"
           send_member=3D"GetUser"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Session"
           send_member=3D"GetUnixUser"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Session"
           send_member=3D"GetXDGRuntimeDir"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Session"
           send_member=3D"GetX11Display"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Session"
           send_member=3D"GetX11DisplayDevice"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Session"
           send_member=3D"GetDisplayDevice"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Session"
           send_member=3D"GetRemoteHostName"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Session"
           send_member=3D"GetVTNr"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Session"
           send_member=3D"IsActive"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Session"
           send_member=3D"IsLocal"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Session"
           send_member=3D"GetCreationTime"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Session"
           send_member=3D"Activate"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Session"
           send_member=3D"GetIdleHint"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Session"
           send_member=3D"SetIdleHint"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Session"
           send_member=3D"GetIdleSinceHint"/>
    <allow send_interface=3D"org.freedesktop.ConsoleKit.Session"
           send_member=3D"SetIdleHint"/>
    <allow send_interface=3D"org.freedesktop.ConsoleKit.Session"
           send_member=3D"SetLockedHint"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Session"
           send_member=3D"CanControlSession"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Session"
           send_member=3D"TakeControl"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Session"
           send_member=3D"ReleaseControl"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Session"
           send_member=3D"TakeDevice"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Session"
           send_member=3D"ReleaseDevice"/>
    <allow send_destination=3D"org.freedesktop.ConsoleKit"
           send_interface=3D"org.freedesktop.ConsoleKit.Session"
           send_member=3D"PauseDeviceComplete"/>
  </policy>

</busconfig>



/usr/local/etc/dbus-1/system.d/cups.conf
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D
<!DOCTYPE busconfig PUBLIC "-//freedesktop//DTD D-BUS Bus Configuration
1.0//EN"
 "http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
<busconfig>
  <!-- Only root can send this message -->
  <policy user=3D"root">
    <allow send_interface=3D"com.redhat.PrinterSpooler"/>
  </policy>

  <!-- Allow any connection to receive the message -->
  <policy context=3D"default">
    <allow receive_interface=3D"com.redhat.PrinterSpooler"/>
  </policy>
</busconfig>



/usr/local/etc/dbus-1/system.d/dbus-wpa_supplicant.conf
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D
<!DOCTYPE busconfig PUBLIC
 "-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN"
 "http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
<busconfig>
        <policy user=3D"root">
                <allow own=3D"fi.w1.wpa_supplicant1"/>

                <allow send_destination=3D"fi.w1.wpa_supplicant1"/>
                <allow send_interface=3D"fi.w1.wpa_supplicant1"/>
                <allow receive_sender=3D"fi.w1.wpa_supplicant1"
receive_type=3D"signal"/>
        </policy>
        <policy context=3D"default">
                <deny own=3D"fi.w1.wpa_supplicant1"/>
                <deny send_destination=3D"fi.w1.wpa_supplicant1"/>
                <deny receive_sender=3D"fi.w1.wpa_supplicant1"
receive_type=3D"signal"/>
        </policy>
</busconfig>



/usr/local/etc/dbus-1/system.d/org.freedesktop.ColorManager.conf
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D
<?xml version=3D"1.0" encoding=3D"UTF-8"?> <!-- -*- XML -*- -->

<!DOCTYPE busconfig PUBLIC
 "-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN"
 "http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
<busconfig>

  <!-- This configuration file specifies the required security policies
       for the ColorManager to work. -->

  <!-- Only user root or user colord can own the colord service -->
  <policy user=3D"root">
    <allow own=3D"org.freedesktop.ColorManager"/>
  </policy>
  <policy user=3D"colord">
    <allow own=3D"org.freedesktop.ColorManager"/>
  </policy>

 <!-- Allow anyone to call into the service - we'll reject callers using
PolicyKit -->
  <policy context=3D"default">
    <allow send_destination=3D"org.freedesktop.ColorManager"
           send_interface=3D"org.freedesktop.ColorManager"/>
    <allow send_destination=3D"org.freedesktop.ColorManager"
           send_interface=3D"org.freedesktop.ColorManager.Profile"/>
    <allow send_destination=3D"org.freedesktop.ColorManager"
           send_interface=3D"org.freedesktop.ColorManager.Device"/>
    <allow send_destination=3D"org.freedesktop.ColorManager"
           send_interface=3D"org.freedesktop.ColorManager.Sensor"/>
    <allow send_destination=3D"org.freedesktop.ColorManager"
           send_interface=3D"org.freedesktop.DBus.Properties"/>
    <allow send_destination=3D"org.freedesktop.ColorManager"
           send_interface=3D"org.freedesktop.DBus.Introspectable"/>
    <allow send_destination=3D"org.freedesktop.ColorManager"
           send_interface=3D"org.freedesktop.DBus.Peer"/>
  </policy>

</busconfig>



/usr/local/etc/dbus-1/system.d/org.freedesktop.GeoClue2.Agent.conf
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D
<!DOCTYPE busconfig PUBLIC
 "-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN"
 "http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
<busconfig>
  <policy user=3D"root">
    <allow send_interface=3D"org.freedesktop.GeoClue2.Agent"
           send_path=3D"/org/freedesktop/GeoClue2/Agent"/>
    <allow send_interface=3D"org.freedesktop.DBus.Properties"
           send_path=3D"/org/freedesktop/GeoClue2/Agent"/>
  </policy>

  <policy user=3D"root">
    <allow send_interface=3D"org.freedesktop.GeoClue2.Agent"
           send_path=3D"/org/freedesktop/GeoClue2/Agent"/>
    <allow send_interface=3D"org.freedesktop.DBus.Properties"
           send_path=3D"/org/freedesktop/GeoClue2/Agent"/>
  </policy>
</busconfig>



/usr/local/etc/dbus-1/system.d/org.freedesktop.GeoClue2.conf
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D
<!DOCTYPE busconfig PUBLIC
 "-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN"
 "http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
<busconfig>
  <policy context=3D"default">
    <!-- Allow everyone to talk to main service. We'll later add an agent to
         only share the location if user allows it. -->
    <allow send_destination=3D"org.freedesktop.GeoClue2"/>
  </policy>

  <policy user=3D"root">
    <!-- Only allow root to own the name on the bus -->
    <allow own=3D"org.freedesktop.GeoClue2"/>

    <!-- Also give root access to wpa_supplicant API -->
    <allow receive_sender=3D"fi.w1.wpa_supplicant1"
           receive_type=3D"signal"/>

    <allow send_destination=3D"fi.w1.wpa_supplicant1"
           send_interface=3D"org.freedesktop.DBus.Properties"
           send_member=3D"Get"/>

    <allow send_destination=3D"fi.w1.wpa_supplicant1"
           send_interface=3D"org.freedesktop.DBus.Properties"
           send_member=3D"GetAll"/>

    <allow send_destination=3D"fi.w1.wpa_supplicant1"
           send_interface=3D"org.freedesktop.DBus.Introspectable"/>

    <allow send_destination=3D"fi.w1.wpa_supplicant1"
           send_interface=3D"fi.w1.wpa_supplicant1.Interface"
           send_type=3D"method_call"
           send_member=3D"Scan"/>
  </policy>

  <policy user=3D"root">
    <!-- Allow root to own the name on the bus -->
    <allow own=3D"org.freedesktop.GeoClue2"/>
  </policy>
</busconfig>




/usr/local/etc/dbus-1/system.d/org.freedesktop.PolicyKit1.conf
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D
<?xml version=3D"1.0" encoding=3D"UTF-8"?> <!-- -*- XML -*- -->

<!DOCTYPE busconfig PUBLIC
 "-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN"
 "http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
<busconfig>
  <policy user=3D"polkitd">
    <allow own=3D"org.freedesktop.PolicyKit1"/>
  </policy>

  <policy context=3D"default">
    <allow send_destination=3D"org.freedesktop.PolicyKit1"/>
  </policy>

  <!-- Allow uid 0 to send messages on the
org.freedesktop.PolicyKit1.AuthenticationAgent interface -->
  <policy user=3D"polkitd">
    <allow send_interface=3D"org.freedesktop.PolicyKit1.AuthenticationAgent=
"/>
  </policy>

</busconfig>




/usr/local/etc/dbus-1/system.d/org.freedesktop.UDisks2.conf
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D
<?xml version=3D"1.0" encoding=3D"UTF-8"?> <!-- -*- XML -*- -->

<!DOCTYPE busconfig PUBLIC
 "-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN"
 "http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
<busconfig>
  <!-- Only root can own the service -->
  <policy user=3D"root">
    <allow own=3D"org.freedesktop.UDisks2"/>
  </policy>

  <!-- Anyone can send messages to the owner of org.freedesktop.UDisks2 -->
  <policy context=3D"default">
    <allow send_destination=3D"org.freedesktop.UDisks2"/>
  </policy>
</busconfig>



/usr/local/etc/dbus-1/system.d/pulseaudio-system.conf
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D
<?xml version=3D"1.0"?><!--*-nxml-*-->
<!DOCTYPE busconfig PUBLIC "-//freedesktop//DTD D-BUS Bus Configuration
1.0//EN"
 "http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">

<!--
This file is part of PulseAudio.

PulseAudio is free software; you can redistribute it and/or modify it
under the terms of the GNU Lesser General Public License as
published by the Free Software Foundation; either version 2.1 of the
License, or (at your option) any later version.

PulseAudio is distributed in the hope that it will be useful, but WITHOUT
ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
or FITNESS FOR A PARTICULAR PURPOSE. See the GNU Lesser General
Public License for more details.

You should have received a copy of the GNU Lesser General Public
License along with PulseAudio; if not, see <http://www.gnu.org/licenses/>.
-->

<busconfig>

  <!-- System-wide PulseAudio runs as 'pulse' user. This fragment is
       not necessary for user PulseAudio instances. -->

  <policy user=3D"pulse">
    <allow own=3D"org.pulseaudio.Server"/>
  </policy>

</busconfig>



/usr/local/etc/dbus-1/session.conf
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D
<!--
This configuration file is no longer required and may be removed.

In older versions of dbus, this file defined the behaviour of the well-known
session bus. That behaviour is now determined by
/usr/local/share/dbus-1/session.conf, which should not be edited.

For local configuration changes, create a file
session-local.conf or files matching session.d/*.conf in the same directory
as this one, with a <busconfig> element containing configuration directives.
These directives can override D-Bus or OS defaults.

For upstream or distribution-wide defaults that can be overridden
by a local sysadmin, create files matching
/usr/local/share/dbus-1/session.d/*.conf instead.
-->
<!DOCTYPE busconfig PUBLIC "-//freedesktop//DTD D-Bus Bus Configuration
1.0//EN"
 "http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
<busconfig></busconfig>




/usr/local/etc/dbus-1/system.conf
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D
<!--
This configuration file is no longer required and may be removed.

In older versions of dbus, this file defined the behaviour of the well-known
system bus. That behaviour is now determined by
/usr/local/share/dbus-1/system.conf, which should not be edited.

For local configuration changes, create a file
system-local.conf or files matching system.d/*.conf in the same directory
as this one, with a <busconfig> element containing configuration directives.
These directives can override D-Bus or OS defaults.

For upstream or distribution-wide defaults that can be overridden
by a local sysadmin, create files matching
/usr/local/share/dbus-1/system.d/*.conf instead.
-->
<!DOCTYPE busconfig PUBLIC "-//freedesktop//DTD D-Bus Bus Configuration
1.0//EN"
 "http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
<busconfig></busconfig>



Regards.

--=20
You are receiving this mail because:
You are the assignee for the bug.=