a3da85bfda
This way it will work independently from where qrexec-policy tool will be called (in most cases - from a system service, as root). This is also very similar architecture to what we'll need when moving to GUI domain - there GUI part will also be separated from policy evaluation logic. QubesOS/qubes-issues#910
20 lines
644 B
XML
20 lines
644 B
XML
<?xml version="1.0" encoding="UTF-8"?> <!-- -*- XML -*- -->
|
|
|
|
<!DOCTYPE busconfig PUBLIC
|
|
"-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN"
|
|
"http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
|
|
<busconfig>
|
|
<!-- User need to be in qubes group to own the service -->
|
|
<policy group="qubes">
|
|
<allow own="org.qubesos.PolicyAgent"/>
|
|
</policy>
|
|
<policy context="default">
|
|
|
|
<allow send_destination="org.qubesos.PolicyAgent"
|
|
send_interface="org.freedesktop.DBus.Introspectable"/>
|
|
|
|
<allow send_destination="org.qubesos.PolicyAgent"
|
|
send_interface="org.qubesos.PolicyAgent"/>
|
|
</policy>
|
|
</busconfig>
|