diff options
| author | David Herrmann <dh.herrmann@gmail.com> | 2013-10-15 21:13:39 +0200 |
|---|---|---|
| committer | David Herrmann <dh.herrmann@gmail.com> | 2013-10-15 21:13:39 +0200 |
| commit | d7d1c8f983599dca6ee30229375215978657c072 (patch) | |
| tree | 846aae59711cb498d368e8a1155e9f953d5b9039 | |
| parent | 775657712d0f6d14b70a0fe947a95a9ecc212440 (diff) | |
logind: allow unprivileged session-device access
The session-device/control API was introduced for unprivileged device
access from within a session. Add the required dbus policy to the default
logind policies.
Note: logind validates that only root and the user of a session can
use the API. Furthermore, only a single API user gets access at a time.
Notes
Backport: bugfix
| -rw-r--r-- | src/login/org.freedesktop.login1.conf | 20 |
1 files changed, 20 insertions, 0 deletions
diff --git a/src/login/org.freedesktop.login1.conf b/src/login/org.freedesktop.login1.conf index 0407609c1..04e735eb5 100644 --- a/src/login/org.freedesktop.login1.conf +++ b/src/login/org.freedesktop.login1.conf @@ -148,6 +148,26 @@ send_interface="org.freedesktop.login1.Session" send_member="SetIdleHint"/> + <allow send_destination="org.freedesktop.login1" + send_interface="org.freedesktop.login1.Session" + send_member="TakeControl"/> + + <allow send_destination="org.freedesktop.login1" + send_interface="org.freedesktop.login1.Session" + send_member="ReleaseControl"/> + + <allow send_destination="org.freedesktop.login1" + send_interface="org.freedesktop.login1.Session" + send_member="TakeDevice"/> + + <allow send_destination="org.freedesktop.login1" + send_interface="org.freedesktop.login1.Session" + send_member="ReleaseDevice"/> + + <allow send_destination="org.freedesktop.login1" + send_interface="org.freedesktop.login1.Session" + send_member="PauseDeviceComplete"/> + <allow receive_sender="org.freedesktop.login1"/> </policy> |