debugd/share/org.chromium.debugd.conf

<!--
  Copyright 2016 The Chromium OS Authors. All rights reserved.
  Use of this source code is governed by a BSD-style license that can be
  found in the LICENSE file.
-->

<!DOCTYPE busconfig PUBLIC
 "-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN"
 "http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
<busconfig>
  <policy context="default">
    <allow send_destination="org.chromium.debugd"/>
    <deny send_destination="org.chromium.debugd"
          send_interface="org.chromium.debugd"
          send_member="SetOomScoreAdj" />
    <deny send_destination="org.chromium.debugd"
          send_interface="org.chromium.debugd"
          send_member="EvaluateProbeFunction" />
    <!-- Only typecd should access the following commands. -->
    <deny send_destination="org.chromium.debugd"
          send_interface="org.chromium.debugd"
          send_member="EcGetInventory" />
    <deny send_destination="org.chromium.debugd"
          send_interface="org.chromium.debugd"
          send_member="EcTypeCEnterMode" />
  </policy>

  <policy user="debugd">
    <allow own="org.chromium.debugd"/>
  </policy>

  <policy user="root">
    <allow own="org.chromium.debugd"/>
    <allow send_destination="org.chromium.debugd"
           send_interface="org.chromium.debugd"
           send_member="SetOomScoreAdj" />
  </policy>

  <policy user="chronos">
    <allow send_destination="org.chromium.debugd"
           send_interface="org.chromium.debugd"
           send_member="SetOomScoreAdj" />
  </policy>

  <policy user="runtime_probe">
    <allow send_destination="org.chromium.debugd"
           send_interface="org.chromium.debugd"
           send_member="EvaluateProbeFunction" />
  </policy>

  <policy user="root">
    <allow send_destination="org.chromium.debugd"
           send_interface="org.chromium.debugd"
           send_member="EvaluateProbeFunction" />
  </policy>

  <policy user="typecd">
    <allow send_destination="org.chromium.debugd"
           send_interface="org.chromium.debugd"
           send_member="EcGetInventory" />
    <allow send_destination="org.chromium.debugd"
           send_interface="org.chromium.debugd"
           send_member="EcTypeCEnterMode" />
  </policy>

  <limit name="max_replies_per_connection">512</limit>
</busconfig>