Bug#532670: patch to include policy in network-manager

[Sascha Silbe]

Package: network-manager
Tags: patch




CU Sascha

--
http://sascha.silbe.org/
http://www.infra-silbe.de/
diff -Nur network-manager-0.7.1/debian/changelog network-manager-0.7.1-userpolicy/debian/changelog
--- network-manager-0.7.1/debian/changelog	2009-06-27 13:54:10.000000000 +0200
+++ network-manager-0.7.1-userpolicy/debian/changelog	2009-06-27 15:47:48.000000000 +0200
@@ -1,3 +1,9 @@
+network-manager (0.7.1-2~ss1) unstable; urgency=low
+
+  * add /etc/dbus-1/system.d/nm-user-settings.conf
+
+ -- Sascha Silbe <sascha-...@silbe.org>  Sat, 27 Jun 2009 13:56:09 +0200
+
 network-manager (0.7.1-1) unstable; urgency=low
 
   * New upstream release.
diff -Nur network-manager-0.7.1/debian/network-manager.install network-manager-0.7.1-userpolicy/debian/network-manager.install
--- network-manager-0.7.1/debian/network-manager.install	2009-06-27 13:54:10.000000000 +0200
+++ network-manager-0.7.1-userpolicy/debian/network-manager.install	2009-06-27 14:12:49.000000000 +0200
@@ -19,5 +19,6 @@
 debian/tmp/etc/NetworkManager/dispatcher.d/
 debian/tmp/etc/NetworkManager/system-connections/
 debian/nm-system-settings.conf etc/NetworkManager/
+debian/nm-user-settings.conf etc/dbus-1/system.d/
 debian/tmp/lib/udev/rules.d/77-nm-probe-modem-capabilities.rules
 debian/tmp/lib/udev/nm-modem-probe
diff -Nur network-manager-0.7.1/debian/nm-user-settings.conf network-manager-0.7.1-userpolicy/debian/nm-user-settings.conf
--- network-manager-0.7.1/debian/nm-user-settings.conf	1970-01-01 01:00:00.000000000 +0100
+++ network-manager-0.7.1-userpolicy/debian/nm-user-settings.conf	2009-06-27 13:52:31.000000000 +0200
@@ -0,0 +1,39 @@
+<!DOCTYPE busconfig PUBLIC
+ "-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN"
+ "http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd";>
+<busconfig>
+	<policy user="root">
+		<allow own="org.freedesktop.NetworkManagerUserSettings"/>
+
+		<allow send_destination="org.freedesktop.NetworkManagerUserSettings"
+		       send_interface="org.freedesktop.NetworkManagerSettings"/>
+
+		<allow send_destination="org.freedesktop.NetworkManagerUserSettings"
+		       send_interface="org.freedesktop.NetworkManagerSettings.Connection"/>
+
+		<!-- Only root can get secrets -->
+		<allow send_destination="org.freedesktop.NetworkManagerUserSettings"
+		       send_interface="org.freedesktop.NetworkManagerSettings.Connection.Secrets"/>
+
+	</policy>
+	<policy at_console="true">
+		<allow own="org.freedesktop.NetworkManagerUserSettings"/>
+
+		<allow send_destination="org.freedesktop.NetworkManagerUserSettings"
+		       send_interface="org.freedesktop.NetworkManagerSettings"/>
+
+		<allow send_destination="org.freedesktop.NetworkManagerUserSettings"
+		       send_interface="org.freedesktop.NetworkManagerSettings.Connection"/>
+
+		<!-- Only root can get secrets -->
+		<deny send_destination="org.freedesktop.NetworkManagerUserSettings"
+		      send_interface="org.freedesktop.NetworkManagerSettings.Connection.Secrets"/>
+	</policy>
+	<policy context="default">
+		<deny own="org.freedesktop.NetworkManagerUserSettings"/>
+
+		<deny send_destination="org.freedesktop.NetworkManagerUserSettings"
+		      send_interface="org.freedesktop.NetworkManagerSettings"/>
+	</policy>
+</busconfig>
+

The attached patch adds the policy to the network-manager package, sparing me from installing 52 packages occupying 271MB on disk. Since the file is named differently in network-manager-kde there should be no issue with conflicting files even if network-manager-kde doesn't get patched to remove the file there.

signature.asc
Description: Digital signature