Skip to content

Commit

Permalink
Merge branch 'radio' into 'master'
Browse files Browse the repository at this point in the history
Run mms-engine under radio account

See merge request mer-core/mms-engine!25
  • Loading branch information
monich committed Jul 13, 2020
2 parents 212dac1 + 5e9d5d2 commit 3ec0bfa
Show file tree
Hide file tree
Showing 2 changed files with 15 additions and 18 deletions.
5 changes: 3 additions & 2 deletions mms-engine/dbus-org.nemomobile.MmsEngine.service
Expand Up @@ -5,5 +5,6 @@ Description=MMS engine service
Type=dbus
BusName=org.nemomobile.MmsEngine
ExecStart=/usr/sbin/mms-engine -o syslog
User=nemo
Group=privileged
User=radio
Group=radio
SupplementaryGroups=privileged inet
28 changes: 12 additions & 16 deletions mms-engine/org.nemomobile.MmsEngine.dbus.conf
Expand Up @@ -3,22 +3,18 @@
"http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
<!-- This file goes to /etc/dbus-1/system.d -->
<busconfig>
<policy user="root">
<policy context="default">
<allow own="org.nemomobile.MmsEngine"/>
<allow send_destination="org.nemomobile.MmsEngine"/>
<allow send_interface="org.nemomobile.MmsEngine"/>
</policy>

<!-- allow radio user (ofono) signaling -->
<policy user="radio">
<allow send_destination="org.nemomobile.MmsEngine"/>
<allow send_interface="org.nemomobile.MmsEngine"/>
</policy>

<!-- allow regular user for debugging -->
<policy user="nemo">
<allow own="org.nemomobile.MmsEngine"/>
<allow send_destination="org.nemomobile.MmsEngine"/>
<allow send_interface="org.nemomobile.MmsEngine"/>
<!-- The actual access control is done by mms-engine at runtime -->
<allow send_destination="org.nemomobile.MmsEngine"
send_interface="org.nemomobile.MmsEngine"/>
<allow send_destination="org.nemomobile.MmsEngine"
send_interface="org.nemomobile.MmsEngine.TransferList"/>
<allow send_destination="org.nemomobile.MmsEngine"
send_interface="org.nemomobile.MmsEngine.Transfer"/>
<allow send_destination="org.nemomobile.MmsEngine"
send_interface="org.nemomobile.Logger"/>
<allow send_destination="org.nemomobile.MmsEngine"
send_interface="org.freedesktop.DBus.Introspectable"/>
</policy>
</busconfig>

0 comments on commit 3ec0bfa

Please sign in to comment.