1 files changed, 42 insertions, 0 deletions
diff --git a/src/tdebluez-common/org.trinitydesktop.tdebluez.conf b/src/tdebluez-common/org.trinitydesktop.tdebluez.conf
new file mode 100644
index 0000000..fa48877
--- /dev/null
+++ b/src/tdebluez-common/org.trinitydesktop.tdebluez.conf
@@ -0,0 +1,42 @@
+<?xml version="1.0" encoding="UTF-8"?> <!-- -*- XML -*- -->
+<!DOCTYPE busconfig PUBLIC
+ "-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN"
+ "http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
+<busconfig>
+  <!-- Only root can own the service -->
+  <policy user="root">
+    <allow own="org.trinitydesktop.tdebluez"/>
+    <allow send_destination="org.bluez"/>
+    <allow send_destination="org.trinitydesktop.tdebluez"/>
+    <allow send_path="/org/trinitydesktop/tdebluez"
+           send_interface="org.bluez.Agent1"/>
+    <allow send_path="/org/trinitydesktop/tdebluez"
+           send_interface="org.freedesktop.DBus.Introspectable"/>
+  </policy>
+
+  <policy at_console="true">
+  <!-- Users with physical access to the machine are allowed access -->
+    <allow send_destination="org.bluez"/>
+    <allow send_destination="org.trinitydesktop.tdebluez"/>
+    <allow send_path="/org/trinitydesktop/tdebluez"
+           send_interface="org.freedesktop.DBus.Introspectable"/>
+    <allow send_path="/org/trinitydesktop/tdebluez"
+           send_interface="org.bluez.Agent1"/>
+  </policy>
+
+  <!-- allow users of bluetooth group to communicate -->
+  <policy group="bluetooth">
+    <allow own="org.trinitydesktop.tdebluez"/>
+    <allow send_destination="org.bluez"/>
+    <allow send_destination="org.trinitydesktop.tdebluez"/>
+    <allow send_path="/org/trinitydesktop/tdebluez"
+           send_interface="org.freedesktop.DBus.Introspectable"/>
+    <allow send_path="/org/trinitydesktop/tdebluez"
+           send_interface="org.bluez.Agent1"/>
+  </policy>
+
+  <policy context="default">
+    <!-- Everyone else is denied access -->
+    <deny send_destination="org.trinitydesktop.tdebluez"/>
+  </policy>
+</busconfig>