diff options
Diffstat (limited to 'source/l/hal/hal.conf')
| -rw-r--r-- | source/l/hal/hal.conf | 69 |
1 files changed, 69 insertions, 0 deletions
diff --git a/source/l/hal/hal.conf b/source/l/hal/hal.conf new file mode 100644 index 000000000..03c75353b --- /dev/null +++ b/source/l/hal/hal.conf @@ -0,0 +1,69 @@ +<!DOCTYPE busconfig PUBLIC + "-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN" + "http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd"> +<busconfig> + + <!-- Only root or user haldaemon can own the HAL service --> + <policy user="haldaemon"> + <allow own="org.freedesktop.Hal"/> + </policy> + <policy user="root"> + <allow own="org.freedesktop.Hal"/> + </policy> + + <policy context="default"> + <!-- Allow anyone to invoke methods on the Introspectable interface --> + <allow send_destination="org.freedesktop.Hal" + send_interface="org.freedesktop.DBus.Introspectable"/> + <!-- Allow anyone to invoke methods on the Properties interface --> + <allow send_destination="org.freedesktop.Hal" + send_interface="org.freedesktop.DBus.Properties" /> + <!-- Allow anyone to invoke methods on the Manager interface --> + <allow send_destination="org.freedesktop.Hal" + send_interface="org.freedesktop.Hal.Manager"/> + <!-- Allow anyone to invoke methods on the Device interface --> + <allow send_destination="org.freedesktop.Hal" + send_interface="org.freedesktop.Hal.Device"/> + </policy> + + <!-- Allow members of 'power' group to do power management stuff --> + <policy group="power"> + <allow send_destination="org.freedesktop.Hal" + send_interface="org.freedesktop.Hal.Device.SystemPowerManagement"/> + <allow send_destination="org.freedesktop.Hal" + send_interface="org.freedesktop.Hal.Device.CPUFreq"/> + <allow send_destination="org.freedesktop.Hal" + send_interface="org.freedesktop.Hal.Device.LaptopPanel"/> + <allow send_destination="org.freedesktop.Hal" + send_interface="org.freedesktop.Hal.Device.KeyboardBacklight"/> + <allow send_destination="org.freedesktop.Hal" + send_interface="org.freedesktop.Hal.Device.LightSensor"/> + <allow send_destination="org.freedesktop.Hal" + send_interface="org.freedesktop.Hal.Device.DockStation"/> + <allow send_destination="org.freedesktop.Hal" + send_interface="org.freedesktop.Hal.Device.Leds"/> + </policy> + + <!-- Allow members of 'plugdev' group to mount/unmount volumes --> + <policy group="plugdev"> + <allow send_destination="org.freedesktop.Hal" + send_interface="org.freedesktop.Hal.Device.Storage"/> + <allow send_destination="org.freedesktop.Hal" + send_interface="org.freedesktop.Hal.Device.Storage.Removable"/> + <allow send_destination="org.freedesktop.Hal" + send_interface="org.freedesktop.Hal.Device.Volume"/> + <allow send_destination="org.freedesktop.Hal" + send_interface="org.freedesktop.Hal.Device.Volume.Crypto"/> + </policy> + + <!-- Allow members of netdev group to en/disable wake-on-lan in NICs + and to turn radios on and off --> + <policy group="netdev"> + <allow send_destination="org.freedesktop.Hal" + send_interface="org.freedesktop.Hal.Device.KillSwitch"/> + <allow send_destination="org.freedesktop.Hal" + send_interface="org.freedesktop.Hal.Device.WakeOnLan"/> + </policy> + +</busconfig> + |