tpm_manager/server/org.chromium.TpmManager.conf

<!DOCTYPE busconfig PUBLIC
 "-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN"
 "http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
<!--
  Copyright 2021 The Chromium OS Authors. All rights reserved.
  Use of this source code is governed by a BSD-style license that can be
  found in the LICENSE file.
-->

<!--
  This file will be installed at /etc/dbus-1/system.d on Chromium OS.
-->
<busconfig>
  <policy user="tpm_manager">
    <allow own="org.chromium.TpmManager" />
    <allow send_destination="org.chromium.TpmManager" />
  </policy>
  <policy user="root">
    <allow own="org.chromium.TpmManager" />
    <allow send_destination="org.chromium.TpmManager" />
    <allow receive_interface="org.chromium.TpmManager"
           receive_member="SignalOwnershipTaken"
           receive_type="signal" />
  </policy>
  <policy user="attestation">
    <allow receive_interface="org.chromium.TpmManager"
           receive_member="SignalOwnershipTaken"
           receive_type="signal" />
  </policy>
  <policy user="cryptohome">
    <allow receive_interface="org.chromium.TpmManager"
           receive_member="SignalOwnershipTaken"
           receive_type="signal" />
  </policy>
  <policy user="cdm-oemcrypto">
    <allow send_destination="org.chromium.TpmManager"
           send_interface="org.chromium.TpmManager"
           send_member="GetTpmNonsensitiveStatus" />
  </policy>
  <policy user="power">
    <allow send_destination="org.chromium.TpmManager"
           send_interface="org.chromium.TpmManager"
           send_member="GetDictionaryAttackInfo"/>
  </policy>
  <policy user="chronos">
    <allow receive_interface="org.chromium.TpmManager"
           receive_member="SignalOwnershipTaken"
           receive_type="signal" />
    <allow send_destination="org.chromium.TpmManager"
           send_interface="org.chromium.TpmManager"
           send_member="GetSupportedFeatures" />
  </policy>
  <policy context="default">
    <allow send_destination="org.chromium.TpmManager" />
    <!-- introspection denied -->
    <deny send_destination="org.chromium.TpmManager"
          send_interface="org.freedesktop.DBus.Introspectable" />
    <deny receive_interface="org.chromium.TpmManager"
          receive_member="SignalOwnershipTaken"
          receive_type="signal" />
  </policy>
</busconfig>