Add a dbus config for system-server

diff --git a/CMakeLists.txt b/CMakeLists.txt
index 8ade278..0195001 100755 (executable)
--- a/CMakeLists.txt
+++ b/CMakeLists.txt
@@ -73,6 +73,7 @@ INSTALL(TARGETS ${PROJECT_NAME} DESTINATION bin)
 INSTALL(FILES ${MOVINAND_FORMAT} DESTINATION bin)
 INSTALL(FILES ${UDEV_RULES} DESTINATION ${UDEV_RULES_PATH})
 INSTALL(PROGRAMS ${CMAKE_BINARY_DIR}/system_server.sh DESTINATION /etc/rc.d/init.d)
+INSTALL(FILES system-server.conf DESTINATION /etc/dbus-1/system.d)
 
 ADD_SUBDIRECTORY(restarter)
 ADD_SUBDIRECTORY(sys_event)

diff --git a/packaging/system-server.spec b/packaging/system-server.spec
index bc21980..a5a7959 100755 (executable)
--- a/packaging/system-server.spec
+++ b/packaging/system-server.spec
@@ -124,6 +124,7 @@ systemctl daemon-reload
 %{_libdir}/systemd/system/system-server.service
 %{_datadir}/system-server/udev-rules/91-system-server.rules
 %{_datadir}/system-server/sys_device_noti/res/locale/*/LC_MESSAGES/*.mo
+%config %{_sysconfdir}/dbus-1/system.d/system-server.conf
 %{_sysconfdir}/rc.d/init.d/system_server.sh
 %{_sysconfdir}/rc.d/rc3.d/S35system-server
 %{_sysconfdir}/rc.d/rc5.d/S00system-server

diff --git a/system-server.conf b/system-server.conf
new file mode 100644 (file)
index 0000000..21a6638
--- /dev/null
+++ b/system-server.conf
@@ -0,0 +1,10 @@
+<!DOCTYPE busconfig PUBLIC "-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN"
+ "http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
+<busconfig>
+    <policy user="root">
+        <allow own="slp.system.server"/>
+    </policy>
+    <policy context="default">
+        <deny own="slp.system.server"/>
+    </policy>
+</busconfig>