<!DOCTYPE busconfig PUBLIC "-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN"
 "http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">

<!--
  Copyright 2020 The Chromium OS Authors. All rights reserved.
  Use of this source code is governed by a BSD-style license that can be
  found in the LICENSE file.
-->

<!-- Security policies allowing the Chrome browser to start and manage the
     arc-data-snapshotd daemon -->

<busconfig>
  <policy user="chronos">
    <!--
      Chrome browser manages a lifetime of arc-data-snapshotd daemon.

      "arc_2ddata_2dsnapshotd" below refers to the "arc-data-snapshotd" upstart
      job. Upstart escapes characters that aren't valid in D-Bus object paths
      using underscore as the escape character, followed by the character code
      in hex.
    -->
    <allow send_destination="com.ubuntu.Upstart"
           send_interface="com.ubuntu.Upstart0_6.Job"
           send_type="method_call"
           send_member="Start"
           send_path="/com/ubuntu/Upstart/jobs/arc_2ddata_2dsnapshotd" />
    <allow send_destination="com.ubuntu.Upstart"
           send_interface="com.ubuntu.Upstart0_6.Job"
           send_type="method_call"
           send_member="Stop"
           send_path="/com/ubuntu/Upstart/jobs/arc_2ddata_2dsnapshotd" />
  </policy>
</busconfig>