dlcservice/org.chromium.DlcService.conf

<!DOCTYPE busconfig PUBLIC
 "-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN"
 "http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
<!--
  Copyright 2018 The Chromium OS Authors. All rights reserved.
  Use of this source code is governed by a BSD-style license that can be
  found in the LICENSE file.

  This file will be installed at /etc/dbus-1/system.d on Chromium OS.
-->
<busconfig>
  <policy user="dlcservice">
    <allow own="org.chromium.DlcService" />
    <allow receive_sender="org.chromium.DlcService" />
    <allow send_destination="org.chromium.DlcService" />
  </policy>
  <policy user="chronos">
    <allow receive_sender="org.chromium.DlcService" />
    <allow send_destination="org.chromium.DlcService"
      send_interface="org.chromium.DlcServiceInterface"
      send_member="InstallDlc" />
    <allow send_destination="org.chromium.DlcService"
      send_interface="org.chromium.DlcServiceInterface"
      send_member="Uninstall" />
    <allow send_destination="org.chromium.DlcService"
      send_interface="org.chromium.DlcServiceInterface"
      send_member="Purge" />
    <allow send_destination="org.chromium.DlcService"
      send_interface="org.chromium.DlcServiceInterface"
      send_member="GetExistingDlcs" />
    <allow send_destination="org.chromium.DlcService"
      send_interface="org.chromium.DlcServiceInterface"
      send_member="GetDlcState" />
  </policy>
  <policy user="root">
    <allow receive_sender="org.chromium.DlcService" />
    <allow send_destination="org.chromium.DlcService"
      send_interface="org.chromium.DlcServiceInterface"
      send_member="InstallDlc" />
    <allow send_destination="org.chromium.DlcService"
      send_interface="org.chromium.DlcServiceInterface"
      send_member="Uninstall" />
    <!-- GetDlcsToUpdate should only be called by update_engine. -->
    <allow send_destination="org.chromium.DlcService"
      send_interface="org.chromium.DlcServiceInterface"
      send_member="GetDlcsToUpdate" />
    <allow send_destination="org.chromium.DlcService"
      send_interface="org.chromium.DlcServiceInterface"
      send_member="GetDlcState" />
    <!-- InstallCompleted should only be called by update_engine -->
    <allow send_destination="org.chromium.DlcService"
      send_interface="org.chromium.DlcServiceInterface"
      send_member="InstallCompleted" />
    <!-- UpdateCompleted should only be called by update_engine -->
    <allow send_destination="org.chromium.DlcService"
      send_interface="org.chromium.DlcServiceInterface"
      send_member="UpdateCompleted" />
  </policy>
  <policy context="default">
    <deny send_destination="org.chromium.DlcService"/>
  </policy>
</busconfig>