<!DOCTYPE busconfig PUBLIC "-//freedesktop//DTD D-Bus Bus Configuration 1.0//EN" "http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
<busconfig>
    <fork />
    <auth>EXTERNAL</auth>
    <listen>unix:path=/tmp/dummy</listen>
    <policy context="default">
        <allow user="*" />
        <allow send_type="signal" />
        <allow send_requested_reply="true" send_type="method_return" />
        <allow send_requested_reply="true" send_type="error" />
        <allow receive_type="method_call" />
        <allow receive_type="method_return" />
        <allow receive_type="error" />
        <allow receive_type="signal" />
        <allow send_destination="org.freedesktop.DBus" />
    </policy>
    <!-- from .../config/FirewallD.conf -->
    <policy user="root">
        <allow own="org.fedoraproject.FirewallD1" />
        <allow own="org.fedoraproject.FirewallD1.config" />
        <allow send_destination="org.fedoraproject.FirewallD1" />
        <allow send_destination="org.fedoraproject.FirewallD1.config" />
    </policy>
    <policy context="default">
        <allow send_destination="org.fedoraproject.FirewallD1" />
        <allow send_destination="org.fedoraproject.FirewallD1" send_interface="org.freedesktop.DBus.Introspectable" />
        <allow send_destination="org.fedoraproject.FirewallD1" send_interface="org.freedesktop.DBus.Properties" />
        <allow send_destination="org.fedoraproject.FirewallD1.config" />
    </policy>

    <!-- from org.freedesktop.NetworkManager.conf -->
    <policy user="root">
        <allow own="org.freedesktop.NetworkManager" />
        <allow send_destination="org.freedesktop.NetworkManager" />

        <allow send_destination="org.freedesktop.NetworkManager" send_interface="org.freedesktop.NetworkManager.PPP" />

        <allow send_interface="org.freedesktop.NetworkManager.SecretAgent" />
        <!-- These are there because some broken policies do
                         <deny send_interface="..." /> (see dbus-daemon(8) for details).
                         This seems to override that for the known VPN plugins.
                      -->
        <allow send_destination="org.freedesktop.NetworkManager.openconnect" />
        <allow send_destination="org.freedesktop.NetworkManager.openswan" />
        <allow send_destination="org.freedesktop.NetworkManager.openvpn" />
        <allow send_destination="org.freedesktop.NetworkManager.pptp" />
        <allow send_destination="org.freedesktop.NetworkManager.vpnc" />
        <allow send_destination="org.freedesktop.NetworkManager.ssh" />
        <allow send_destination="org.freedesktop.NetworkManager.iodine" />
        <allow send_destination="org.freedesktop.NetworkManager.l2tp" />
        <allow send_destination="org.freedesktop.NetworkManager.libreswan" />
        <allow send_destination="org.freedesktop.NetworkManager.fortisslvpn" />
        <allow send_destination="org.freedesktop.NetworkManager.strongswan" />
        <allow send_interface="org.freedesktop.NetworkManager.VPN.Plugin" />

        <allow send_destination="org.fedoraproject.FirewallD1" />

        <!-- Allow the custom name for the dnsmasq instance spawned by NM
                         from the dns dnsmasq plugin to own it's dbus name, and for
                         messages to be sent to it.
                     -->
        <allow own="org.freedesktop.NetworkManager.dnsmasq" />
        <allow send_destination="org.freedesktop.NetworkManager.dnsmasq" />
    </policy>
</busconfig>
