device_management/org.chromium.DeviceManagement.conf

<!--
  Copyright 2023 The ChromiumOS Authors
  Use of this source code is governed by a BSD-style license that can be
  found in the LICENSE file.
-->

<!DOCTYPE busconfig PUBLIC "-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN"
  "http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
<busconfig>
  <policy user="device_management">
    <allow own="org.chromium.DeviceManagement" />
    <allow receive_sender="org.chromium.DeviceManagement" />
    <allow send_destination="org.chromium.DeviceManagement" />
    <allow send_interface="org.chromium.DeviceManagement" />
  </policy>
  <!-- For chromium -->
  <policy user="chronos">
    <allow send_destination="org.chromium.DeviceManagement"
           send_interface="org.chromium.DeviceManagement" />
  </policy>
  <!-- For debugging -->
  <policy user="root">
    <allow own="org.chromium.DeviceManagement" />
    <allow receive_sender="org.chromium.DeviceManagement" />
    <allow send_destination="org.chromium.DeviceManagement" />
    <allow send_interface="org.chromium.DeviceManagement" />
  </policy>
  <policy user="rmad">
    <allow send_destination="org.chromium.DeviceManagement"
           send_interface="org.chromium.DeviceManagement"
           send_member="GetFirmwareManagementParameters"/>
  </policy>
  <policy user="debugd">
    <allow send_destination="org.chromium.DeviceManagement"
           send_interface="org.chromium.DeviceManagement"
           send_member="InstallAttributesGetStatus"/>
    <allow send_destination="org.chromium.DeviceManagement"
           send_interface="org.chromium.DeviceManagement"
           send_member="GetFirmwareManagementParameters"/>
  </policy>
</busconfig>