tuned-adm: full permissions to users with physical access

edwardbadboy · Oct 30, 2012 · 5cdd115 · 5cdd115
1 parent 09d20c6
commit 5cdd115
Showing 1 changed file with 9 additions and 9 deletions.
diff --git a/dbus.conf b/dbus.conf
@@ -7,22 +7,22 @@
 -->
 
 <busconfig>
-
-	<policy user="root">
-		<allow own="com.redhat.tuned"/>
-		<allow send_destination="com.redhat.tuned" />
-		<allow receive_sender="com.redhat.tuned" />
-	</policy>
-
 	<policy context="default">
-		<deny send_destination="com.redhat.tuned"/>
+		<deny send_destination="com.redhat.tuned" />
+		<allow receive_sender="com.redhat.tuned" />
 
 		<allow send_destination="com.redhat.tuned" send_interface="org.freedesktop.DBus.Introspectable" />
 
 		<allow send_destination="com.redhat.tuned" send_interface="com.redhat.tuned.control" send_member="active_profile" />
 		<allow send_destination="com.redhat.tuned" send_interface="com.redhat.tuned.control" send_member="status" />
+	</policy>
 
-		<allow receive_sender="com.redhat.com" />
+	<policy user="root">
+		<allow own="com.redhat.tuned" />
+		<allow send_destination="com.redhat.tuned" />
 	</policy>
 
+	<policy at_console="true">
+		<allow send_destination="com.redhat.tuned" />
+	</policy>
 </busconfig>