diff options
| author | Oskar Świtalski <o.switalski@samsung.com> | 2015-11-10 11:14:46 +0100 |
|---|---|---|
| committer | Oskar Świtalski <o.switalski@samsung.com> | 2015-11-10 11:18:59 +0100 |
| commit | e3cae2fb0844cd337f959b3dd0b6f27abb58f2ff (patch) | |
| tree | aca50bbe168034386df37392801b61fcf142c477 | |
| parent | a4269fcb613fe9c18c810162ccf6ed94dec34dd7 (diff) | |
| download | dnsmasq-e3cae2fb0844cd337f959b3dd0b6f27abb58f2ff.tar.gz dnsmasq-e3cae2fb0844cd337f959b3dd0b6f27abb58f2ff.tar.bz2 dnsmasq-e3cae2fb0844cd337f959b3dd0b6f27abb58f2ff.zip | |
Apply Cynara privilege checks to dbus conf file
For SetServers and ClearCache methods check network.set privilege,
allow for everyone GetVersion method
Change-Id: Ic586d0947f8bdc1c6c96bdd40e22738a7dc63af8
Signed-off-by: Oskar Świtalski <o.switalski@samsung.com>
| -rw-r--r-- | dbus/dnsmasq.conf | 12 |
1 files changed, 10 insertions, 2 deletions
diff --git a/dbus/dnsmasq.conf b/dbus/dnsmasq.conf index a14f363..222867c 100644 --- a/dbus/dnsmasq.conf +++ b/dbus/dnsmasq.conf @@ -7,8 +7,16 @@ <allow send_destination="uk.org.thekelleys.dnsmasq"/> </policy> <policy context="default"> - <allow own="uk.org.thekelleys.dnsmasq"/> - <allow send_destination="uk.org.thekelleys.dnsmasq"/> + <check send_destination="uk.org.thekelleys.dnsmasq" + send_interface="uk.org.thekelleys.dnsmasq" send_member="SetServers" + privilege="http://tizen.org/privilege/network.set"/> + + <check send_destination="uk.org.thekelleys.dnsmasq" + send_interface="uk.org.thekelleys.dnsmasq" send_member="ClearCache" + privilege="http://tizen.org/privilege/network.set"/> + + <allow send_destination="uk.org.thekelleys.dnsmasq" + send_interface="uk.org.thekelleys.dnsmasq" send_member="GetVersion"/> </policy> </busconfig> |