chaps/org.chromium.Chaps.conf

<!--
  Copyright 2021 The ChromiumOS Authors
  Use of this source code is governed by a BSD-style license that can be
  found in the LICENSE file.
-->
<!DOCTYPE busconfig PUBLIC
 "-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN"
 "http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
<busconfig>
  <policy user="chaps">
    <allow own="org.chromium.Chaps"/>
    <allow send_destination="org.chromium.Chaps"/>
  </policy>
  <policy user="root">
    <allow own="org.chromium.Chaps"/>
    <allow send_destination="org.chromium.Chaps"/>
  </policy>
  <policy user="shill">
    <allow send_destination="org.chromium.Chaps"/>
  </policy>
  <policy user="vpn">
    <allow send_destination="org.chromium.Chaps"/>
  </policy>
  <policy user="arc-keymasterd">
    <allow send_destination="org.chromium.Chaps"/>
  </policy>
  <policy user="arc-keymintd">
    <allow send_destination="org.chromium.Chaps"/>
  </policy>
  <policy user="cdm-oemcrypto">
    <allow send_destination="org.chromium.Chaps"/>
  </policy>
  <policy group="pkcs11">
    <!-- introspection denied -->
    <deny send_destination="org.chromium.Chaps"
          send_interface="org.freedesktop.DBus.Introspectable" />
    <!-- methods allowed -->
    <allow send_destination="org.chromium.Chaps"
           send_interface="org.chromium.Chaps"/>
    <!-- methods denied -->
    <deny send_destination="org.chromium.Chaps"
          send_interface="org.chromium.Chaps"
          send_member="OpenIsolate"/>
    <deny send_destination="org.chromium.Chaps"
          send_interface="org.chromium.Chaps"
          send_member="CloseIsolate"/>
    <deny send_destination="org.chromium.Chaps"
          send_interface="org.chromium.Chaps"
          send_member="LoadToken"/>
    <deny send_destination="org.chromium.Chaps"
          send_interface="org.chromium.Chaps"
          send_member="UnloadToken"/>
  </policy>
</busconfig>