<allow own="org.freedesktop.Avahi"/>
</policy>
- <!-- Allow anyone to invoke methods on the Manager and Device interfaces -->
+ <!-- Allow anyone to invoke methods on Avahi server, except SetHostName -->
<policy context="default">
- <allow send_interface="org.freedesktop.Avahi"/>
+ <allow send_destination="org.freedesktop.Avahi"/>
+ <allow receive_sender="org.freedesktop.Avahi"/>
- <allow receive_interface="org.freedesktop.Avahi"
- receive_sender="org.freedesktop.Avahi"/>
+ <deny send_interface="org.freedesktop.Avahi.Server" send_member="SetHostName"/>
</policy>
- <limit name="max_match_rules_per_connection">512</limit>
- <limit name="max_connections_per_user">20</limit>
-
+ <!-- Allow everything, including access to SetHostName to users of the group "@AVAHI_PRIV_ACCESS_GROUP@" -->
+ <policy group="@AVAHI_PRIV_ACCESS_GROUP@">
+ <allow send_destination="org.freedesktop.Avahi"/>
+ <allow receive_sender="org.freedesktop.Avahi"/>
+ </policy>
</busconfig>