vm_tools/dbus/org.chromium.VmConcierge.conf

<!DOCTYPE busconfig PUBLIC
 "-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN"
 "http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
<!--
  Copyright 2017 The ChromiumOS Authors
  Use of this source code is governed by a BSD-style license that can be
  found in the LICENSE file.

  This file will be installed at /etc/dbus-1/system.d on Chromium OS.
-->
<busconfig>
  <policy context="default">
    <allow send_destination="org.chromium.VmConcierge" />
  </policy>

  <policy user="crosvm">
    <allow own="org.chromium.VmConcierge" />

    <!--
      GetProperties on shill's Manager interface is used to get the current
      DefaultService.
    -->
    <allow send_destination="org.chromium.flimflam"
           send_interface="org.chromium.flimflam.Manager"
           send_member="GetProperties"/>
    <!--
      GetProperties on shill's IPConfig interface is used to get DNS nameservers
      and search domains.
    -->
    <allow send_destination="org.chromium.flimflam"
           send_interface="org.chromium.flimflam.IPConfig"
           send_member="GetProperties"/>
    <!--
      GetProperties on shill's Service interface is used to get the current
      IPConfig.
    -->
    <allow send_destination="org.chromium.flimflam"
           send_interface="org.chromium.flimflam.Service"
           send_member="GetProperties"/>
    <!--
      GetDlcState on dlcservice's interface is used to get the mount location of
      installed DLCs.
    -->
    <allow send_destination="org.chromium.DlcService"
           send_interface="org.chromium.DlcServiceInterface"
           send_member="GetDlcState" />
    <!--
      Start /com/ubuntu/Upstart/jobs/trim_5ffilesystem on the Upstart interface
      is used to call the trim_filesystem upstart script to trim the user
      filesystem.
      // TODO(b/288998343): remove when bug is fixed and interrupted discards
      // are not lost.
    -->
    <allow send_destination="com.ubuntu.Upstart"
           send_interface="com.ubuntu.Upstart0_6.Job"
           send_type="method_call"
           send_member="Start"
           send_path="/com/ubuntu/Upstart/jobs/trim_5ffilesystem" />
  </policy>
<!-- Methods used by patchpanel to manage net devices on ARCVM -->
  <policy user="patchpaneld">
    <allow send_destination="org.chromium.Vmconcierge"
           send_interface="org.chromiumm.Vmconcierge"
           send_member="AttachNetDevice" />
    <allow send_destination="org.chromium.Vmconcierge"
           send_interface="org.chromiumm.Vmconcierge"
           send_member="DetachNetDevice" />
  </policy>
</busconfig>