1<!DOCTYPE busconfig PUBLIC 2 "-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN" 3 "http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd"> 4<busconfig> 5 6 <!-- This configuration file specifies the required security policies 7 for the HAL to work. --> 8 9 <!-- Only root or user @HAL_USER@ can own the HAL service --> 10 <policy user="@HAL_USER@"> 11 <allow own="org.freedesktop.Hal"/> 12 </policy> 13 <policy user="root"> 14 <allow own="org.freedesktop.Hal"/> 15 </policy> 16 17 <!-- Allow anyone to invoke methods on the Manager and Device interfaces --> 18 <policy context="default"> 19 <allow send_interface="org.freedesktop.Hal.Manager"/> 20 <allow send_interface="org.freedesktop.Hal.Device"/> 21 <allow receive_interface="org.freedesktop.Hal.Manager" 22 receive_sender="org.freedesktop.Hal"/> 23 <allow receive_interface="org.freedesktop.Hal.Device" 24 receive_sender="org.freedesktop.Hal"/> 25 26 <allow send_interface="org.freedesktop.Hal.Device.SystemPowerManagement"/> 27 <allow send_interface="org.freedesktop.Hal.Device.LaptopPanel"/> 28 <allow send_interface="org.freedesktop.Hal.Device.Volume"/> 29 <allow send_interface="org.freedesktop.Hal.Device.Volume.Crypto"/> 30 <allow receive_interface="org.freedesktop.Hal.Device.SystemPowerManagement" 31 receive_sender="org.freedesktop.Hal"/> 32 <allow receive_interface="org.freedesktop.Hal.Device.LaptopPanel" 33 receive_sender="org.freedesktop.Hal"/> 34 <allow receive_interface="org.freedesktop.Hal.Device.Volume" 35 receive_sender="org.freedesktop.Hal"/> 36 <allow receive_interface="org.freedesktop.Hal.Device.Volume.Crypto" 37 receive_sender="org.freedesktop.Hal"/> 38 </policy> 39 40 <!-- Default policy for the exported interfaces --> 41 <policy context="default"> 42 <deny send_interface="org.freedesktop.Hal.Device.SystemPowerManagement"/> 43 <deny send_interface="org.freedesktop.Hal.Device.VideoAdapterPM"/> 44 <deny send_interface="org.freedesktop.Hal.Device.LaptopPanel"/> 45 <deny send_interface="org.freedesktop.Hal.Device.Volume"/> 46 <deny send_interface="org.freedesktop.Hal.Device.Volume.Crypto"/> 47 </policy> 48 49 <!-- This will not work if pam_console support is not enabled --> 50 <policy at_console="true"> 51 <allow send_interface="org.freedesktop.Hal.Device.SystemPowerManagement"/> 52 <allow send_interface="org.freedesktop.Hal.Device.LaptopPanel"/> 53 <allow send_interface="org.freedesktop.Hal.Device.Volume"/> 54 <allow send_interface="org.freedesktop.Hal.Device.Volume.Crypto"/> 55 </policy> 56 57 <!-- You can change this to a more suitable user, or make per-group --> 58 <policy user="0"> 59 <allow send_interface="org.freedesktop.Hal.Device.SystemPowerManagement"/> 60 <allow send_interface="org.freedesktop.Hal.Device.VideoAdapterPM"/> 61 <allow send_interface="org.freedesktop.Hal.Device.LaptopPanel"/> 62 <allow send_interface="org.freedesktop.Hal.Device.Volume"/> 63 <allow send_interface="org.freedesktop.Hal.Device.Volume.Crypto"/> 64 </policy> 65 66</busconfig> 67 68