/etc/dbus-1/system.d/oddjob.conf is in oddjob 0.34.3-2.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 | <?xml version="1.0"?>
<!DOCTYPE busconfig PUBLIC
"-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN"
"http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
<busconfig>
<!-- This configuration file specifies the required security policies
for the oddjob service to work. It controls which requests users
will be allowed to issue to oddjobd over the bus, which is quite
different from controlling whether or not oddjobd will attempt to
fulfill the request. -->
<!-- Only root can own the oddjob service -->
<policy user="root">
<allow own="com.redhat.oddjob"/>
</policy>
<!-- Allow anyone to try to call the quit method of the
com.redhat.oddjob interface implemented by the
/com/redhat/oddjob object provided by the
com.redhat.oddjob service -->
<policy context="default">
<allow send_destination="com.redhat.oddjob" send_path="/com/redhat/oddjob" send_interface="com.redhat.oddjob" send_member="quit"/>
</policy>
<!-- Allow anyone to try to call the list method of the
com.redhat.oddjob interface implemented by the
/com/redhat/oddjob object provided by the
com.redhat.oddjob service -->
<policy context="default">
<allow send_destination="com.redhat.oddjob" send_path="/com/redhat/oddjob" send_interface="com.redhat.oddjob" send_member="list"/>
</policy>
<!-- Allow anyone to try to call the listall method of the
com.redhat.oddjob interface implemented by the
/com/redhat/oddjob object provided by the
com.redhat.oddjob service -->
<policy context="default">
<allow send_destination="com.redhat.oddjob" send_path="/com/redhat/oddjob" send_interface="com.redhat.oddjob" send_member="listall"/>
</policy>
<!-- Allow anyone to try to call the reload method of the
com.redhat.oddjob interface implemented by the
/com/redhat/oddjob object provided by the
com.redhat.oddjob service -->
<policy context="default">
<allow send_destination="com.redhat.oddjob" send_path="/com/redhat/oddjob" send_interface="com.redhat.oddjob" send_member="reload"/>
</policy>
<!-- Allow anyone to try to call the introspection methods of the
every object provided by the com.redhat.oddjob service -->
<policy context="default">
<allow send_destination="com.redhat.oddjob" send_interface="org.freedesktop.DBus.Introspectable"/>
</policy>
</busconfig>
|