[dbus] Stricten D-Bus policies. JB#45281

Just <allow send_destination="xxx"/> enables access to all D-Bus services hosted the process providing service xxx.
sailfishos · Mar 28, 2019 · 87ebe69 · 87ebe69
1 parent 8265e9c
commit 87ebe69
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 2 deletions.
diff --git a/plugins/dbus_service/org.sailfishos.nfc.daemon.conf b/plugins/dbus_service/org.sailfishos.nfc.daemon.conf
@@ -5,6 +5,7 @@
         <allow own="org.sailfishos.nfc.daemon"/>
     </policy>
     <policy context="default">
-        <allow send_destination="org.sailfishos.nfc.daemon"/>
+        <allow send_destination="org.sailfishos.nfc.daemon"
+               send_interface="org.sailfishos.nfc.Daemon"/>
     </policy>
 </busconfig>
diff --git a/plugins/settings/org.sailfishos.nfc.settings.conf b/plugins/settings/org.sailfishos.nfc.settings.conf
@@ -5,6 +5,7 @@
         <allow own="org.sailfishos.nfc.settings"/>
     </policy>
     <policy context="default">
-        <allow send_destination="org.sailfishos.nfc.Settings"/>
+        <allow send_destination="org.sailfishos.nfc.settings"
+               send_interface="org.sailfishos.nfc.Settings"/>
     </policy>
 </busconfig>