logiops/src/logid/logiops-dbus.conf.in
pixl 9495516e0c
Fix CVE-2024-45752
Prevents arbitrary users from accessing d-bus interface. Fixes #473.
This change now requires any application using the LogiOps D-Bus
interface to run as root.
2024-09-27 20:43:01 -04:00

16 lines
435 B
Plaintext

<!DOCTYPE busconfig PUBLIC
"-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN"
"http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
<busconfig>
<policy context="default">
<deny receive_sender="pizza.pixl.LogiOps"/>
</policy>
<policy user="root">
<allow own="pizza.pixl.LogiOps"/>
<allow send_destination="pizza.pixl.LogiOps"/>
<allow receive_sender="pizza.pixl.LogiOps"/>
</policy>
</busconfig>