src/bluetooth.conf

   1 <!-- This configuration file specifies the required security policies
   2      for Bluetooth core daemon to work. -->
   3
   4 <!DOCTYPE busconfig PUBLIC "-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN"
   5  "http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
   6 <busconfig>
   7
   8   <!-- ../system.conf have denied everything, so we just punch some holes -->
   9
  10   <policy user="root">
  11     <allow own="org.bluez"/>
  12     <allow send_destination="org.bluez"/>
  13     <allow own="org.projectx.bluetooth"/>
  14     <allow send_interface="org.projectx.bluetooth"/>
  15     <allow send_destination="org.projectx.bluetooth"/>
  16     <allow send_interface="org.projectx.bt_event"/>
  17     <allow send_destination="org.projectx.bt_event"/>
  18     <allow own="org.bluez.frwk_agent"/>
  19     <allow send_interface="org.bluez.frwk_agent"/>
  20     <allow send_destination="org.bluez.frwk_agent"/>
  21     <allow own="org.bluez.Agent1"/>
  22     <allow send_interface="org.bluez.Agent1"/>
  23     <allow send_destination="org.bluez.Agent1"/>
  24     <allow own="org.bluez.Adapter1"/>
  25     <allow send_interface="org.bluez.Adapter1"/>
  26     <allow send_destination="org.bluez.Adapter1"/>
  27     <allow own="org.bluez.Manager"/>
  28     <allow send_interface="org.bluez.Manager"/>
  29     <allow send_destination="org.bluez.Manager"/>
  30     <allow own="org.bluez.Device1"/>
  31     <allow send_interface="org.bluez.Device1"/>
  32     <allow send_destination="org.bluez.Device1"/>
  33     <allow own="org.bluez.MediaEndpoint1"/>
  34     <allow send_interface="org.bluez.MediaEndpoint1"/>
  35     <allow send_destination="org.bluez.MediaEndpoint1"/>
  36     <allow own="org.bluez.MediaPlayer1"/>
  37     <allow send_interface="org.bluez.MediaPlayer1"/>
  38     <allow send_interface="org.bluez.ThermometerWatcher1"/>
  39     <allow send_interface="org.bluez.AlertAgent1"/>
  40     <allow send_destination="org.bluez.MediaPlayer1"/>
  41     <allow own="org.bluez.MediaTransport1"/>
  42     <allow send_interface="org.bluez.MediaTransport1"/>
  43     <allow send_destination="org.bluez.MediaTransport1"/>
  44     <allow own="org.bluez.Profile1"/>
  45     <allow send_interface="org.bluez.Profile1"/>
  46     <allow send_destination="org.bluez.Profile1"/>
  47     <allow send_interface="org.bluez.HeartRateWatcher1"/>
  48     <allow send_interface="org.bluez.CyclingSpeedWatcher1"/>
  49     <allow send_interface="org.bluez.GattCharacteristic1"/>
  50     <allow send_interface="org.bluez.GattDescriptor1"/>
  51     <allow send_interface="org.freedesktop.DBus.ObjectManager"/>
  52     <allow send_interface="org.freedesktop.DBus.Properties"/>
  53   </policy>
  54
  55   <policy at_console="true">
  56     <allow send_destination="org.bluez"/>
  57   </policy>
  58
  59   <!-- allow users of bt_use group (Tizen BT group) to
  60        communicate with bluetoothd -->
  61   <policy group="bt_use">
  62     <allow send_interface="org.freedesktop.DBus.ObjectManager"/>
  63     <allow send_destination="org.bluez"/>
  64     <allow send_interface="org.projectx.bluetooth"/>
  65     <allow send_destination="org.projectx.bluetooth"/>
  66     <allow send_interface="org.projectx.bt_event"/>
  67     <allow send_destination="org.projectx.bt_event"/>
  68     <allow send_interface="org.bluez.frwk_agent"/>
  69     <allow send_destination="org.bluez.frwk_agent"/>
  70     <allow send_interface="org.bluez.Agent1"/>
  71     <allow send_destination="org.bluez.Agent1"/>
  72     <allow send_interface="org.bluez.Adapter1"/>
  73     <allow send_destination="org.bluez.Adapter1"/>
  74     <allow send_interface="org.bluez.Manager"/>
  75     <allow send_destination="org.bluez.Manager"/>
  76     <allow send_interface="org.bluez.Device1"/>
  77     <allow send_destination="org.bluez.Device1"/>
  78     <allow send_interface="org.bluez.MediaEndpoint1"/>
  79     <allow send_destination="org.bluez.MediaEndpoint1"/>
  80     <allow send_interface="org.bluez.MediaTransport1"/>
  81     <allow send_destination="org.bluez.MediaTransport1"/>
  82     <allow send_interface="org.bluez.MediaPlayer1"/>
  83     <allow send_destination="org.bluez.MediaPlayer1"/>
  84     <allow send_interface="org.bluez.Profile1"/>
  85     <allow send_destination="org.bluez.Profile1"/>
  86   </policy>
  87
  88   <!-- allow users of lp group (printing subsystem) to
  89        communicate with bluetoothd -->
  90   <policy group="lp">
  91     <allow send_destination="org.bluez"/>
  92   </policy>
  93
  94   <policy context="default">
  95     <deny send_interface="org.projectx.bluetooth"/>
  96     <deny send_destination="org.projectx.bluetooth"/>
  97     <deny send_interface="org.bluez.frwk_agent"/>
  98     <deny send_destination="org.bluez.frwk_agent"/>
  99     <deny send_interface="org.bluez.Agent1"/>
 100     <deny send_destination="org.bluez.Agent1"/>
 101     <deny send_interface="org.bluez.Adapter1"/>
 102     <deny send_destination="org.bluez.Adapter1"/>
 103     <deny send_interface="org.bluez.Manager"/>
 104     <deny send_destination="org.bluez.Manager"/>
 105     <deny send_interface="org.bluez.Device1"/>
 106     <deny send_destination="org.bluez.Device1"/>
 107     <deny send_interface="org.bluez.MediaEndpoint1"/>
 108     <deny send_destination="org.bluez.MediaEndpoint1"/>
 109     <deny send_interface="org.bluez.MediaTransport1"/>
 110     <deny send_destination="org.bluez.MediaTransport1"/>
 111     <deny send_interface="org.bluez.MediaPlayer1"/>
 112     <deny send_destination="org.bluez.MediaPlayer1"/>
 113     <deny send_interface="org.bluez.Profile1"/>
 114     <deny send_destination="org.bluez.Profile1"/>
 115   </policy>
 116
 117 </busconfig>