src/bluetooth.conf

   1 <!-- This configuration file specifies the required security policies
   2      for Bluetooth core daemon to work. -->
   3
   4 <!DOCTYPE busconfig PUBLIC "-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN"
   5  "http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
   6 <busconfig>
   7
   8   <!-- ../system.conf have denied everything, so we just punch some holes -->
   9
  10   <policy user="root">
  11     <allow own="org.bluez"/>
  12     <allow send_destination="org.bluez"/>
  13     <allow send_interface="org.bluez.Agent"/>
  14     <allow send_interface="org.bluez.HandsfreeAgent"/>
  15     <allow send_interface="org.bluez.MediaEndpoint"/>
  16     <allow send_interface="org.bluez.MediaPlayer"/>
  17     <allow send_interface="org.bluez.Watcher"/>
  18     <allow send_interface="org.bluez.ThermometerWatcher"/>
  19   </policy>
  20
  21   <policy at_console="true">
  22     <allow send_destination="org.bluez"/>
  23   </policy>
  24
  25   <!-- allow users of lp group (printing subsystem) to
  26        communicate with bluetoothd -->
  27   <policy group="lp">
  28     <allow send_destination="org.bluez"/>
  29   </policy>
  30
  31   <policy context="default">
  32     <deny send_destination="org.bluez"/>
  33   </policy>
  34
  35 </busconfig>