From: Wu zheng <wu.zheng@intel.com>
Date: Wed, 23 Oct 2013 03:07:48 +0000 (+0800)
Subject: Modify the dbus rules to access the bluetoothd
X-Git-Tag: submit/tizen/20140605.113613~31
X-Git-Url: http://review.tizen.org/git/?a=commitdiff_plain;h=1651d2b4d5fd28e8beb3c873f71ec7e6871a6800;p=platform%2Fupstream%2Fbluez.git

Modify the dbus rules to access the bluetoothd

Author: DoHyun Pyun <dh79.pyun@samsung.com>

We should allow to access only about the permitted user or interface

Change-Id: I826f25c466962325721f6734a4d4d7706ba3a651
---

diff --git a/src/bluetooth.conf b/src/bluetooth.conf
index ad8891a..9b4b6b1 100644
--- a/src/bluetooth.conf
+++ b/src/bluetooth.conf
@@ -10,14 +10,33 @@
   <policy user="root">
     <allow own="org.bluez"/>
     <allow send_destination="org.bluez"/>
+    <allow own="org.projectx.bluetooth"/>
+    <allow send_interface="org.projectx.bluetooth"/>
+    <allow send_destination="org.projectx.bluetooth"/>
+    <allow own="org.bluez.frwk_agent"/>
+    <allow send_interface="org.bluez.frwk_agent"/>
+    <allow send_destination="org.bluez.frwk_agent"/>
+    <allow own="org.bluez.Agent1"/>
     <allow send_interface="org.bluez.Agent1"/>
+    <allow send_destination="org.bluez.Agent1"/>
+    <allow own="org.bluez.Adapter1"/>
+    <allow send_interface="org.bluez.Adapter1"/>
+    <allow send_destination="org.bluez.Adapter1"/>
+    <allow own="org.bluez.Manager"/>
+    <allow send_interface="org.bluez.Manager"/>
+    <allow send_destination="org.bluez.Manager"/>
+    <allow own="org.bluez.Device1"/>
+    <allow send_interface="org.bluez.Device1"/>
+    <allow send_destination="org.bluez.Device1"/>
+    <allow own="org.bluez.MediaEndpoint1"/>
     <allow send_interface="org.bluez.MediaEndpoint1"/>
+    <allow send_destination="org.bluez.MediaEndpoint1"/>
+    <allow own="org.bluez.MediaPlayer1"/>
     <allow send_interface="org.bluez.MediaPlayer1"/>
-    <allow send_interface="org.bluez.ThermometerWatcher1"/>
-    <allow send_interface="org.bluez.AlertAgent1"/>
+    <allow send_destination="org.bluez.MediaPlayer1"/>
+    <allow own="org.bluez.Profile1"/>
     <allow send_interface="org.bluez.Profile1"/>
-    <allow send_interface="org.bluez.HeartRateWatcher1"/>
-    <allow send_interface="org.bluez.CyclingSpeedWatcher1"/>
+    <allow send_destination="org.bluez.Profile1"/>
     <allow send_interface="org.freedesktop.DBus.ObjectManager"/>
   </policy>
 
@@ -25,14 +44,54 @@
     <allow send_destination="org.bluez"/>
   </policy>
 
-  <!-- allow users of lp group (printing subsystem) to 
+  <!-- allow users of bt_use group (Tizen BT group) to
+       communicate with bluetoothd -->
+  <policy group="bt_use">
+    <allow send_interface="org.projectx.bluetooth"/>
+    <allow send_destination="org.projectx.bluetooth"/>
+    <allow send_interface="org.bluez.frwk_agent"/>
+    <allow send_destination="org.bluez.frwk_agent"/>
+    <allow send_interface="org.bluez.Agent1"/>
+    <allow send_destination="org.bluez.Agent1"/>
+    <allow send_interface="org.bluez.Adapter1"/>
+    <allow send_destination="org.bluez.Adapter1"/>
+    <allow send_interface="org.bluez.Manager"/>
+    <allow send_destination="org.bluez.Manager"/>
+    <allow send_interface="org.bluez.Device1"/>
+    <allow send_destination="org.bluez.Device1"/>
+    <allow send_interface="org.bluez.MediaEndpoint1"/>
+    <allow send_destination="org.bluez.MediaEndpoint1"/>
+    <allow send_interface="org.bluez.MediaPlayer1"/>
+    <allow send_destination="org.bluez.MediaPlayer1"/>
+    <allow send_interface="org.bluez.Profile1"/>
+    <allow send_destination="org.bluez.Profile1"/>
+  </policy>
+
+  <!-- allow users of lp group (printing subsystem) to
        communicate with bluetoothd -->
   <policy group="lp">
     <allow send_destination="org.bluez"/>
   </policy>
 
   <policy context="default">
-    <deny send_destination="org.bluez"/>
+    <deny send_interface="org.projectx.bluetooth"/>
+    <deny send_destination="org.projectx.bluetooth"/>
+    <deny send_interface="org.bluez.frwk_agent"/>
+    <deny send_destination="org.bluez.frwk_agent"/>
+    <deny send_interface="org.bluez.Agent1"/>
+    <deny send_destination="org.bluez.Agent1"/>
+    <deny send_interface="org.bluez.Adapter1"/>
+    <deny send_destination="org.bluez.Adapter1"/>
+    <deny send_interface="org.bluez.Manager"/>
+    <deny send_destination="org.bluez.Manager"/>
+    <deny send_interface="org.bluez.Device1"/>
+    <deny send_destination="org.bluez.Device1"/>
+    <deny send_interface="org.bluez.MediaEndpoint1"/>
+    <deny send_destination="org.bluez.MediaEndpoint1"/>
+    <deny send_interface="org.bluez.MediaPlayer1"/>
+    <deny send_destination="org.bluez.MediaPlayer1"/>
+    <deny send_interface="org.bluez.Profile1"/>
+    <deny send_destination="org.bluez.Profile1"/>
   </policy>
 
 </busconfig>