<!DOCTYPE busconfig PUBLIC "-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN"
  "http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
<busconfig>
  <policy user="root">
    <allow own="org.chromium.Cryptohome" />
    <allow send_destination="org.chromium.Cryptohome" />
  </policy>
  <policy user="chronos">
    <!-- introspection is denied -->
    <deny send_destination="org.chromium.Cryptohome"
          send_interface="org.freedesktop.DBus.Introspectable" />
    <!-- properties denied -->
    <deny send_destination="org.chromium.Cryptohome"
          send_interface="org.freedesktop.DBus.Properties" />
    <!-- allow explicit methods -->
    <allow send_destination="org.chromium.Cryptohome"
           send_interface="org.chromium.CryptohomeInterface"
           send_member="CheckKey"/>
    <allow send_destination="org.chromium.Cryptohome"
           send_interface="org.chromium.CryptohomeInterface"
           send_member="ListKeysEx"/>
    <allow send_destination="org.chromium.Cryptohome"
           send_interface="org.chromium.CryptohomeInterface"
           send_member="CheckKeyEx"/>
    <allow send_destination="org.chromium.Cryptohome"
           send_interface="org.chromium.CryptohomeInterface"
           send_member="RemoveKeyEx"/>
    <allow send_destination="org.chromium.Cryptohome"
           send_interface="org.chromium.CryptohomeInterface"
           send_member="GetKeyDataEx"/>
    <allow send_destination="org.chromium.Cryptohome"
           send_interface="org.chromium.CryptohomeInterface"
           send_member="AsyncCheckKey"/>
    <allow send_destination="org.chromium.Cryptohome"
           send_interface="org.chromium.CryptohomeInterface"
           send_member="MigrateKey"/>
    <allow send_destination="org.chromium.Cryptohome"
           send_interface="org.chromium.CryptohomeInterface"
           send_member="AsyncMigrateKey"/>
    <allow send_destination="org.chromium.Cryptohome"
           send_interface="org.chromium.CryptohomeInterface"
           send_member="AddKey"/>
    <allow send_destination="org.chromium.Cryptohome"
           send_interface="org.chromium.CryptohomeInterface"
           send_member="AddKeyEx"/>
    <allow send_destination="org.chromium.Cryptohome"
           send_interface="org.chromium.CryptohomeInterface"
           send_member="AsyncAddKey"/>
    <allow send_destination="org.chromium.Cryptohome"
           send_interface="org.chromium.CryptohomeInterface"
           send_member="UpdateKeyEx"/>
    <allow send_destination="org.chromium.Cryptohome"
           send_interface="org.chromium.CryptohomeInterface"
           send_member="Remove"/>
    <allow send_destination="org.chromium.Cryptohome"
           send_interface="org.chromium.CryptohomeInterface"
           send_member="AsyncRemove"/>
    <allow send_destination="org.chromium.Cryptohome"
           send_interface="org.chromium.CryptohomeInterface"
           send_member="GetSystemSalt"/>
    <allow send_destination="org.chromium.Cryptohome"
           send_interface="org.chromium.CryptohomeInterface"
           send_member="GetSanitizedUsername"/>
    <allow send_destination="org.chromium.Cryptohome"
           send_interface="org.chromium.CryptohomeInterface"
           send_member="IsMounted"/>
    <allow send_destination="org.chromium.Cryptohome"
           send_interface="org.chromium.CryptohomeInterface"
           send_member="IsMountedForUser"/>
    <allow send_destination="org.chromium.Cryptohome"
           send_interface="org.chromium.CryptohomeInterface"
           send_member="Mount"/>
    <allow send_destination="org.chromium.Cryptohome"
           send_interface="org.chromium.CryptohomeInterface"
           send_member="MountEx"/>
    <allow send_destination="org.chromium.Cryptohome"
           send_interface="org.chromium.CryptohomeInterface"
           send_member="AsyncMount"/>
    <allow send_destination="org.chromium.Cryptohome"
           send_interface="org.chromium.CryptohomeInterface"
           send_member="MountGuest"/>
    <allow send_destination="org.chromium.Cryptohome"
           send_interface="org.chromium.CryptohomeInterface"
           send_member="AsyncMountGuest"/>
    <allow send_destination="org.chromium.Cryptohome"
           send_interface="org.chromium.CryptohomeInterface"
           send_member="MountPublic"/>
    <allow send_destination="org.chromium.Cryptohome"
           send_interface="org.chromium.CryptohomeInterface"
           send_member="AsyncMountPublic"/>
    <allow send_destination="org.chromium.Cryptohome"
           send_interface="org.chromium.CryptohomeInterface"
           send_member="Unmount"/>
    <allow send_destination="org.chromium.Cryptohome"
           send_interface="org.chromium.CryptohomeInterface"
           send_member="DoAutomaticFreeDiskSpaceControl"/>
    <allow send_destination="org.chromium.Cryptohome"
           send_interface="org.chromium.CryptohomeInterface"
           send_member="AsyncDoAutomaticFreeDiskSpaceControl"/>
    <allow send_destination="org.chromium.Cryptohome"
           send_interface="org.chromium.CryptohomeInterface"
           send_member="UpdateCurrentUserActivityTimestamp"/>
    <allow send_destination="org.chromium.Cryptohome"
           send_interface="org.chromium.CryptohomeInterface"
           send_member="TpmIsReady"/>
    <allow send_destination="org.chromium.Cryptohome"
           send_interface="org.chromium.CryptohomeInterface"
           send_member="TpmIsEnabled"/>
    <allow send_destination="org.chromium.Cryptohome"
           send_interface="org.chromium.CryptohomeInterface"
           send_member="TpmGetPassword"/>
    <allow send_destination="org.chromium.Cryptohome"
           send_interface="org.chromium.CryptohomeInterface"
           send_member="TpmIsOwned"/>
    <allow send_destination="org.chromium.Cryptohome"
           send_interface="org.chromium.CryptohomeInterface"
           send_member="TpmIsBeingOwned"/>
    <allow send_destination="org.chromium.Cryptohome"
           send_interface="org.chromium.CryptohomeInterface"
           send_member="TpmCanAttemptOwnership"/>
    <allow send_destination="org.chromium.Cryptohome"
           send_interface="org.chromium.CryptohomeInterface"
           send_member="TpmClearStoredPassword"/>
    <allow send_destination="org.chromium.Cryptohome"
           send_interface="org.chromium.CryptohomeInterface"
           send_member="TpmIsAttestationPrepared"/>
    <allow send_destination="org.chromium.Cryptohome"
           send_interface="org.chromium.CryptohomeInterface"
           send_member="TpmVerifyAttestationData"/>
    <allow send_destination="org.chromium.Cryptohome"
           send_interface="org.chromium.CryptohomeInterface"
           send_member="TpmVerifyEK"/>
    <allow send_destination="org.chromium.Cryptohome"
           send_interface="org.chromium.CryptohomeInterface"
           send_member="TpmIsAttestationEnrolled"/>
    <allow send_destination="org.chromium.Cryptohome"
           send_interface="org.chromium.CryptohomeInterface"
           send_member="TpmAttestationCreateEnrollRequest"/>
    <allow send_destination="org.chromium.Cryptohome"
           send_interface="org.chromium.CryptohomeInterface"
           send_member="AsyncTpmAttestationCreateEnrollRequest"/>
    <allow send_destination="org.chromium.Cryptohome"
           send_interface="org.chromium.CryptohomeInterface"
           send_member="TpmAttestationEnroll"/>
    <allow send_destination="org.chromium.Cryptohome"
           send_interface="org.chromium.CryptohomeInterface"
           send_member="AsyncTpmAttestationEnroll"/>
    <allow send_destination="org.chromium.Cryptohome"
           send_interface="org.chromium.CryptohomeInterface"
           send_member="TpmAttestationCreateCertRequest"/>
    <allow send_destination="org.chromium.Cryptohome"
           send_interface="org.chromium.CryptohomeInterface"
           send_member="AsyncTpmAttestationCreateCertRequest"/>
    <allow send_destination="org.chromium.Cryptohome"
           send_interface="org.chromium.CryptohomeInterface"
           send_member="TpmAttestationFinishCertRequest"/>
    <allow send_destination="org.chromium.Cryptohome"
           send_interface="org.chromium.CryptohomeInterface"
           send_member="AsyncTpmAttestationFinishCertRequest"/>
    <allow send_destination="org.chromium.Cryptohome"
           send_interface="org.chromium.CryptohomeInterface"
           send_member="TpmAttestationDoesKeyExist"/>
    <allow send_destination="org.chromium.Cryptohome"
           send_interface="org.chromium.CryptohomeInterface"
           send_member="TpmAttestationGetCertificate"/>
    <allow send_destination="org.chromium.Cryptohome"
           send_interface="org.chromium.CryptohomeInterface"
           send_member="TpmAttestationGetPublicKey"/>
    <allow send_destination="org.chromium.Cryptohome"
           send_interface="org.chromium.CryptohomeInterface"
           send_member="TpmAttestationRegisterKey"/>
    <allow send_destination="org.chromium.Cryptohome"
           send_interface="org.chromium.CryptohomeInterface"
           send_member="TpmAttestationSignEnterpriseChallenge"/>
    <allow send_destination="org.chromium.Cryptohome"
           send_interface="org.chromium.CryptohomeInterface"
           send_member="TpmAttestationSignSimpleChallenge"/>
    <allow send_destination="org.chromium.Cryptohome"
           send_interface="org.chromium.CryptohomeInterface"
           send_member="TpmAttestationGetKeyPayload"/>
    <allow send_destination="org.chromium.Cryptohome"
           send_interface="org.chromium.CryptohomeInterface"
           send_member="TpmAttestationSetKeyPayload"/>
    <allow send_destination="org.chromium.Cryptohome"
           send_interface="org.chromium.CryptohomeInterface"
           send_member="TpmAttestationDeleteKeys"/>
    <allow send_destination="org.chromium.Cryptohome"
           send_interface="org.chromium.CryptohomeInterface"
           send_member="TpmAttestationResetIdentity"/>
    <allow send_destination="org.chromium.Cryptohome"
           send_interface="org.chromium.CryptohomeInterface"
           send_member="Pkcs11GetTpmTokenInfo"/>
    <allow send_destination="org.chromium.Cryptohome"
           send_interface="org.chromium.CryptohomeInterface"
           send_member="Pkcs11GetTpmTokenInfoForUser"/>
    <allow send_destination="org.chromium.Cryptohome"
           send_interface="org.chromium.CryptohomeInterface"
           send_member="Pkcs11IsTpmTokenReady"/>
    <allow send_destination="org.chromium.Cryptohome"
           send_interface="org.chromium.CryptohomeInterface"
           send_member="Pkcs11IsTpmTokenReadyForUser"/>
    <allow send_destination="org.chromium.Cryptohome"
           send_interface="org.chromium.CryptohomeInterface"
           send_member="GetStatusString"/>
    <!-- remove these if only session_manager uses them. -->
    <allow send_destination="org.chromium.Cryptohome"
           send_interface="org.chromium.CryptohomeInterface"
           send_member="InstallAttributesGet"/>
    <allow send_destination="org.chromium.Cryptohome"
           send_interface="org.chromium.CryptohomeInterface"
           send_member="InstallAttributesSet"/>
    <allow send_destination="org.chromium.Cryptohome"
           send_interface="org.chromium.CryptohomeInterface"
           send_member="InstallAttributesFinalize"/>
    <allow send_destination="org.chromium.Cryptohome"
           send_interface="org.chromium.CryptohomeInterface"
           send_member="InstallAttributesCount"/>
    <allow send_destination="org.chromium.Cryptohome"
           send_interface="org.chromium.CryptohomeInterface"
           send_member="InstallAttributesIsFirstInstall"/>
    <allow send_destination="org.chromium.Cryptohome"
           send_interface="org.chromium.CryptohomeInterface"
           send_member="InstallAttributesIsReady"/>
    <allow send_destination="org.chromium.Cryptohome"
           send_interface="org.chromium.CryptohomeInterface"
           send_member="InstallAttributesIsSecure"/>
    <allow send_destination="org.chromium.Cryptohome"
           send_interface="org.chromium.CryptohomeInterface"
           send_member="InstallAttributesIsInvalid"/>
    <allow send_destination="org.chromium.Cryptohome"
           send_interface="org.chromium.CryptohomeInterface"
           send_member="GetLoginStatus"/>
    <allow send_destination="org.chromium.Cryptohome"
           send_interface="org.chromium.CryptohomeInterface"
           send_member="GetTpmStatus"/>
    <allow send_destination="org.chromium.Cryptohome"
           send_interface="org.chromium.CryptohomeInterface"
           send_member="StoreEnrollmentState"/>
    <allow send_destination="org.chromium.Cryptohome"
           send_interface="org.chromium.CryptohomeInterface"
           send_member="LoadEnrollmentState"/>
    <allow send_destination="org.chromium.Cryptohome"
           send_interface="org.chromium.CryptohomeInterface"
           send_member="SignBootLockbox"/>
    <allow send_destination="org.chromium.Cryptohome"
           send_interface="org.chromium.CryptohomeInterface"
           send_member="VerifyBootLockbox"/>
    <allow send_destination="org.chromium.Cryptohome"
           send_interface="org.chromium.CryptohomeInterface"
           send_member="FinalizeBootLockbox"/>
    <allow send_destination="org.chromium.Cryptohome"
           send_interface="org.chromium.CryptohomeInterface"
           send_member="GetBootAttribute"/>
    <allow send_destination="org.chromium.Cryptohome"
           send_interface="org.chromium.CryptohomeInterface"
           send_member="SetBootAttribute"/>
    <allow send_destination="org.chromium.Cryptohome"
           send_interface="org.chromium.CryptohomeInterface"
           send_member="FlushAndSignBootAttributes"/>
  </policy>
  <policy context="default">
    <deny send_destination="org.chromium.Cryptohome" />
  </policy>
</busconfig>