1<?xml version="1.0"?> <!--*-nxml-*-->
2<!DOCTYPE busconfig PUBLIC "-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN"
3        "http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
4
5<!--
6  This file is part of systemd.
7
8  systemd is free software; you can redistribute it and/or modify it
9  under the terms of the GNU Lesser General Public License as published by
10  the Free Software Foundation; either version 2.1 of the License, or
11  (at your option) any later version.
12-->
13
14<busconfig>
15
16        <policy user="root">
17                <allow own="org.freedesktop.machine1"/>
18                <allow send_destination="org.freedesktop.machine1"/>
19                <allow receive_sender="org.freedesktop.machine1"/>
20        </policy>
21
22        <policy context="default">
23                <deny send_destination="org.freedesktop.machine1"/>
24
25                <allow send_destination="org.freedesktop.machine1"
26                       send_interface="org.freedesktop.DBus.Introspectable"/>
27
28                <allow send_destination="org.freedesktop.machine1"
29                       send_interface="org.freedesktop.DBus.Peer"/>
30
31                <allow send_destination="org.freedesktop.machine1"
32                       send_interface="org.freedesktop.DBus.Properties"
33                       send_member="Get"/>
34
35                <allow send_destination="org.freedesktop.machine1"
36                       send_interface="org.freedesktop.DBus.Properties"
37                       send_member="GetAll"/>
38
39                <allow send_destination="org.freedesktop.machine1"
40                       send_interface="org.freedesktop.machine1.Manager"
41                       send_member="ListMachines"/>
42
43                <allow send_destination="org.freedesktop.machine1"
44                       send_interface="org.freedesktop.machine1.Manager"
45                       send_member="ListImages"/>
46
47                <allow send_destination="org.freedesktop.machine1"
48                       send_interface="org.freedesktop.machine1.Manager"
49                       send_member="GetMachine"/>
50
51                <allow send_destination="org.freedesktop.machine1"
52                       send_interface="org.freedesktop.machine1.Manager"
53                       send_member="GetMachineByPID"/>
54
55                <allow send_destination="org.freedesktop.machine1"
56                       send_interface="org.freedesktop.machine1.Manager"
57                       send_member="GetImage"/>
58
59                <allow send_destination="org.freedesktop.machine1"
60                       send_interface="org.freedesktop.machine1.Manager"
61                       send_member="GetMachineAddresses"/>
62
63                <allow send_destination="org.freedesktop.machine1"
64                       send_interface="org.freedesktop.machine1.Manager"
65                       send_member="GetMachineOSRelease"/>
66
67                <allow send_destination="org.freedesktop.machine1"
68                       send_interface="org.freedesktop.machine1.Manager"
69                       send_member="GetMachineUIDShift"/>
70
71                <allow send_destination="org.freedesktop.machine1"
72                       send_interface="org.freedesktop.machine1.Manager"
73                       send_member="OpenMachineLogin"/>
74
75                <allow send_destination="org.freedesktop.machine1"
76                       send_interface="org.freedesktop.machine1.Manager"
77                       send_member="OpenMachineShell"/>
78
79                <allow send_destination="org.freedesktop.machine1"
80                       send_interface="org.freedesktop.machine1.Manager"
81                       send_member="UnregisterMachine"/>
82
83                <allow send_destination="org.freedesktop.machine1"
84                       send_interface="org.freedesktop.machine1.Manager"
85                       send_member="TerminateMachine"/>
86
87                <allow send_destination="org.freedesktop.machine1"
88                       send_interface="org.freedesktop.machine1.Manager"
89                       send_member="KillMachine"/>
90
91                <allow send_destination="org.freedesktop.machine1"
92                       send_interface="org.freedesktop.machine1.Manager"
93                       send_member="BindMountMachine"/>
94
95                <allow send_destination="org.freedesktop.machine1"
96                       send_interface="org.freedesktop.machine1.Manager"
97                       send_member="CopyFromMachine"/>
98
99                <allow send_destination="org.freedesktop.machine1"
100                       send_interface="org.freedesktop.machine1.Manager"
101                       send_member="CopyToMachine"/>
102
103                <allow send_destination="org.freedesktop.machine1"
104                       send_interface="org.freedesktop.machine1.Manager"
105                       send_member="RemoveImage"/>
106
107                <allow send_destination="org.freedesktop.machine1"
108                       send_interface="org.freedesktop.machine1.Manager"
109                       send_member="RenameImage"/>
110
111                <allow send_destination="org.freedesktop.machine1"
112                       send_interface="org.freedesktop.machine1.Manager"
113                       send_member="CloneImage"/>
114
115                <allow send_destination="org.freedesktop.machine1"
116                       send_interface="org.freedesktop.machine1.Manager"
117                       send_member="MarkImageReadOnly"/>
118
119                <allow send_destination="org.freedesktop.machine1"
120                       send_interface="org.freedesktop.machine1.Manager"
121                       send_member="SetPoolLimit"/>
122
123                <allow send_destination="org.freedesktop.machine1"
124                       send_interface="org.freedesktop.machine1.Manager"
125                       send_member="SetImageLimit"/>
126
127                <allow send_destination="org.freedesktop.machine1"
128                       send_interface="org.freedesktop.machine1.Manager"
129                       send_member="GetImageHostname"/>
130
131                <allow send_destination="org.freedesktop.machine1"
132                       send_interface="org.freedesktop.machine1.Manager"
133                       send_member="GetImageMachineID"/>
134
135                <allow send_destination="org.freedesktop.machine1"
136                       send_interface="org.freedesktop.machine1.Manager"
137                       send_member="GetImageMachineInfo"/>
138
139                <allow send_destination="org.freedesktop.machine1"
140                       send_interface="org.freedesktop.machine1.Manager"
141                       send_member="GetImageOSRelease"/>
142
143                <allow send_destination="org.freedesktop.machine1"
144                       send_interface="org.freedesktop.machine1.Manager"
145                       send_member="CleanPool"/>
146
147                <allow send_destination="org.freedesktop.machine1"
148                       send_interface="org.freedesktop.machine1.Manager"
149                       send_member="MapFromMachineUser"/>
150
151                <allow send_destination="org.freedesktop.machine1"
152                       send_interface="org.freedesktop.machine1.Manager"
153                       send_member="MapToMachineUser"/>
154
155                <allow send_destination="org.freedesktop.machine1"
156                       send_interface="org.freedesktop.machine1.Manager"
157                       send_member="MapFromMachineGroup"/>
158
159                <allow send_destination="org.freedesktop.machine1"
160                       send_interface="org.freedesktop.machine1.Manager"
161                       send_member="MapToMachineGroup"/>
162
163                <allow send_destination="org.freedesktop.machine1"
164                       send_interface="org.freedesktop.machine1.Machine"
165                       send_member="GetAddresses"/>
166
167                <allow send_destination="org.freedesktop.machine1"
168                       send_interface="org.freedesktop.machine1.Machine"
169                       send_member="GetOSRelease"/>
170
171                <allow send_destination="org.freedesktop.machine1"
172                       send_interface="org.freedesktop.machine1.Machine"
173                       send_member="GetUIDShift"/>
174
175                <allow send_destination="org.freedesktop.machine1"
176                       send_interface="org.freedesktop.machine1.Machine"
177                       send_member="OpenLogin"/>
178
179                <allow send_destination="org.freedesktop.machine1"
180                       send_interface="org.freedesktop.machine1.Machine"
181                       send_member="OpenShell"/>
182
183                <allow send_destination="org.freedesktop.machine1"
184                       send_interface="org.freedesktop.machine1.Machine"
185                       send_member="Terminate"/>
186
187                <allow send_destination="org.freedesktop.machine1"
188                       send_interface="org.freedesktop.machine1.Machine"
189                       send_member="Kill"/>
190
191                <allow send_destination="org.freedesktop.machine1"
192                       send_interface="org.freedesktop.machine1.Machine"
193                       send_member="BindMount"/>
194
195                <allow send_destination="org.freedesktop.machine1"
196                       send_interface="org.freedesktop.machine1.Machine"
197                       send_member="CopyFrom"/>
198
199                <allow send_destination="org.freedesktop.machine1"
200                       send_interface="org.freedesktop.machine1.Machine"
201                       send_member="CopyTo"/>
202
203                <allow send_destination="org.freedesktop.machine1"
204                       send_interface="org.freedesktop.machine1.Image"
205                       send_member="Remove"/>
206
207                <allow send_destination="org.freedesktop.machine1"
208                       send_interface="org.freedesktop.machine1.Image"
209                       send_member="Rename"/>
210
211                <allow send_destination="org.freedesktop.machine1"
212                       send_interface="org.freedesktop.machine1.Image"
213                       send_member="Clone"/>
214
215                <allow send_destination="org.freedesktop.machine1"
216                       send_interface="org.freedesktop.machine1.Image"
217                       send_member="SetLimit"/>
218
219                <allow send_destination="org.freedesktop.machine1"
220                       send_interface="org.freedesktop.machine1.Image"
221                       send_member="MarkReadOnly"/>
222
223                <allow send_destination="org.freedesktop.machine1"
224                       send_interface="org.freedesktop.machine1.Image"
225                       send_member="GetHostname"/>
226
227                <allow send_destination="org.freedesktop.machine1"
228                       send_interface="org.freedesktop.machine1.Image"
229                       send_member="GetMachineID"/>
230
231                <allow send_destination="org.freedesktop.machine1"
232                       send_interface="org.freedesktop.machine1.Image"
233                       send_member="GetMachineInfo"/>
234
235                <allow send_destination="org.freedesktop.machine1"
236                       send_interface="org.freedesktop.machine1.Image"
237                       send_member="GetOSRelease"/>
238
239                <allow receive_sender="org.freedesktop.machine1"/>
240        </policy>
241
242</busconfig>
243