<?xml version="1.0" encoding="UTF-8"?> <!-- -*- XML -*- -->

<!DOCTYPE busconfig PUBLIC
 "-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN"
 "http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
<busconfig>

  <!-- This configuration file specifies the required security policies
       for the daemon to work. -->

  <!-- Only the dedicated user or root can own the Passim service -->
  <policy user="passim">
    <allow own="org.freedesktop.Passim"/>
  </policy>
  <policy user="root">
    <allow own="org.freedesktop.Passim"/>
  </policy>

 <!-- Allow anyone to call into the service - we'll reject callers using the UID as required -->
  <policy context="default">
    <allow send_destination="org.freedesktop.Passim"
           send_interface="org.freedesktop.Passim"/>
    <allow send_destination="org.freedesktop.Passim"
           send_interface="org.freedesktop.DBus.Properties"/>
    <allow send_destination="org.freedesktop.Passim"
           send_interface="org.freedesktop.DBus.Introspectable"/>
    <allow send_destination="org.freedesktop.Passim"
           send_interface="org.freedesktop.DBus.Peer"/>
  </policy>

</busconfig>
