Set the default deny policy for system dbus

org.freedesktop.locale1.conf  - send: deny, own: deny
org.freedesktop.login1.conf   - send: deny, own: deny
org.freedesktop.systemd1.conf - send: deny, own: deny

Change-Id: I49f402d56f83700fe7528eab3e034cd845afc0a2
Signed-off-by: Hyotaek Shim <hyotaek.shim@samsung.com>

diff --git a/src/core/org.freedesktop.systemd1.conf b/src/core/org.freedesktop.systemd1.conf
index 3c64f20..850194e 100644 (file)
--- a/src/core/org.freedesktop.systemd1.conf
+++ b/src/core/org.freedesktop.systemd1.conf
@@ -26,6 +26,7 @@
         </policy>
 
         <policy context="default">
+                <deny own="org.freedesktop.systemd1"/>
                 <deny send_destination="org.freedesktop.systemd1"/>
 
                 <!-- Completely open to anyone -->

diff --git a/src/locale/org.freedesktop.locale1.conf b/src/locale/org.freedesktop.locale1.conf
index 79d0ecd..f4050a6 100644 (file)
--- a/src/locale/org.freedesktop.locale1.conf
+++ b/src/locale/org.freedesktop.locale1.conf
@@ -20,7 +20,8 @@
         </policy>
 
         <policy context="default">
-                <allow send_destination="org.freedesktop.locale1"/>
+                <deny own="org.freedesktop.locale1"/>
+                <deny send_destination="org.freedesktop.locale1"/>
                 <allow receive_sender="org.freedesktop.locale1"/>
         </policy>
 

diff --git a/src/login/org.freedesktop.login1.conf b/src/login/org.freedesktop.login1.conf
index c89e404..b00c3b8 100644 (file)
--- a/src/login/org.freedesktop.login1.conf
+++ b/src/login/org.freedesktop.login1.conf
@@ -20,6 +20,7 @@
         </policy>
 
         <policy context="default">
+                <deny own="org.freedesktop.login1"/>
                 <deny send_destination="org.freedesktop.login1"/>
 
                 <allow send_destination="org.freedesktop.login1"