Add dbus policy for GATT service

[platform/core/connectivity/bluetooth-frwk.git] / bt-oal / bluez_hal / bluetooth-frwk-gap-agent.conf

diff --git a/bt-oal/bluez_hal/bluetooth-frwk-gap-agent.conf b/bt-oal/bluez_hal/bluetooth-frwk-gap-agent.conf
index 53ba193..aedbd95 100644 (file)
--- a/bt-oal/bluez_hal/bluetooth-frwk-gap-agent.conf
+++ b/bt-oal/bluez_hal/bluetooth-frwk-gap-agent.conf
@@ -2,27 +2,28 @@
  "http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
 <busconfig>
     <policy user="root">
-        <allow send_destination="org.projectx.bt" send_interface="org.bluez.Agent1"/>
+        <!-- service name(org.bt.frwk.p<pid>) is changeable by pid -->
+        <allow own_prefix="org.bt.frwk"/>
+        <allow send_interface="org.bluez.Profile1" send_member="NewConnection"/>
+        <allow send_interface="org.bluez.Profile1" send_member="RequestDisconnection"/>
+        <!-- No send_destination because private connection does not have well-known service name -->
+        <allow send_interface="org.freedesktop.DBus.ObjectManager"/>
+        <allow send_interface="org.bluez.GattCharacteristic1"/>
+        <allow send_interface="org.bluez.GattDescriptor1"/>
     </policy>
     <policy group="network_fw">
-        <allow send_destination="org.projectx.bt" send_interface="org.bluez.Agent1"/>
+        <!-- service name(org.bt.frwk.p<pid>) is changeable by pid -->
+        <allow own_prefix="org.bt.frwk"/>
+        <allow send_interface="org.bluez.Profile1" send_member="NewConnection"/>
+        <allow send_interface="org.bluez.Profile1" send_member="RequestDisconnection"/>
+        <!-- No send_destination because private connection does not have well-known service name -->
+        <allow send_interface="org.freedesktop.DBus.ObjectManager"/>
+        <allow send_interface="org.bluez.GattCharacteristic1"/>
+        <allow send_interface="org.bluez.GattDescriptor1"/>
     </policy>
     <policy context="default">
-        <deny own="org.bluez.Agent1"/>
-        <allow receive_sender="org.bluez.Agent1"/>
-        <deny send_destination="org.bluez.Agent1"/>
-        <check send_destination="org.projectx.bt" send_interface="org.bluez.Agent1" send_member="RequestPasskey" privilege="http://tizen.org/privilege/bluetooth.admin"/>
-        <check send_destination="org.projectx.bt" send_interface="org.bluez.Agent1" send_member="DisplayPasskey" privilege="http://tizen.org/privilege/bluetooth.admin"/>
-        <check send_destination="org.projectx.bt" send_interface="org.bluez.Agent1" send_member="RequestConfirmation" privilege="http://tizen.org/privilege/bluetooth.admin"/>
-        <check send_destination="org.projectx.bt" send_interface="org.bluez.Agent1" send_member="RequestAuthorization" privilege="http://tizen.org/privilege/bluetooth.admin"/>
-        <check send_destination="org.projectx.bt" send_interface="org.bluez.Agent1" send_member="AuthorizeService" privilege="http://tizen.org/privilege/bluetooth.admin"/>
-        <check send_destination="org.projectx.bt" send_interface="org.bluez.Agent1" send_member="Cancel" privilege="http://tizen.org/privilege/bluetooth.admin"/>
-        <check send_destination="org.projectx.bt" send_interface="org.bluez.Agent1" send_member="Release" privilege="http://tizen.org/privilege/bluetooth.admin"/>
-        <check send_destination="org.projectx.bt" send_interface="org.bluez.Agent1" send_member="ReplyPinCode" privilege="http://tizen.org/privilege/bluetooth.admin"/>
-        <check send_destination="org.projectx.bt" send_interface="org.bluez.Agent1" send_member="ReplyPasskey" privilege="http://tizen.org/privilege/bluetooth.admin"/>
-        <check send_destination="org.projectx.bt" send_interface="org.bluez.Agent1" send_member="ReplyConfirmation" privilege="http://tizen.org/privilege/bluetooth.admin"/>
-        <check send_destination="org.projectx.bt" send_interface="org.bluez.Agent1" send_member="ReplyAuthorize" privilege="http://tizen.org/privilege/bluetooth.admin"/>
-        <check send_destination="org.projectx.bt" send_interface="org.bluez.Agent1" send_member="ConfirmModeChange" privilege="http://tizen.org/privilege/bluetooth.admin"/>
-        <check send_destination="org.projectx.bt" send_interface="org.bluez.Agent1" send_member="GetDiscoverableTimeout" privilege="http://tizen.org/privilege/bluetooth.admin"/>
+        <deny own_prefix="org.bt.frwk"/>
+        <deny send_interface="org.bluez.Profile1" send_member="NewConnection"/>
+        <deny send_interface="org.bluez.Profile1" send_member="RequestDisconnection"/>
     </policy>
 </busconfig>