commit 213e2ac1c540c1ad9dd6aec8f6d3ac7ef23c4d4a
author Skylar Cook <skylarc@google.com> Thu Feb 23 01:23:25 2017
committer chrome-bot <chrome-bot@chromium.org> Thu Mar 02 02:42:23 2017
tree 216356da362c447c12b42921847eda187d151ce5
parent e16449c881131df81196deb9dfbe385bed7b5833

Add DBUS permissions for rialto daemon

Allow rialto daemon to get manager, device, and service properties, as
well as set portal checking.

BUG=b:26963269
TEST=DBUS calls work from rialtod

Change-Id: I5482661585749b56616e251f159c52f86b7b7ae8
Reviewed-on: https://chromium-review.googlesource.com/446659
Commit-Ready: Skylar Cook <skylarc@chromium.org>
Tested-by: Skylar Cook <skylarc@chromium.org>
Reviewed-by: Ben Chan <benchan@chromium.org>
Reviewed-by: David Rust-smith <drustsmith@google.com>
Reviewed-by: Niranjan Kumar <kumarniranjan@chromium.org>

shims/org.chromium.flimflam.conf

diff --git a/shims/org.chromium.flimflam.conf b/shims/org.chromium.flimflam.conf
index 1b11bca..b7fa421 100644
--- a/shims/org.chromium.flimflam.conf
+++ b/shims/org.chromium.flimflam.conf
@@ -72,6 +72,23 @@
                send_interface="org.chromium.flimflam.Service"
                send_member="GetProperties"/>
     </policy>
+    <policy user="rialtod">
+        <allow send_destination="org.chromium.flimflam"
+               send_interface="org.chromium.flimflam.Manager"
+               send_member="GetProperties"/>
+        <allow send_destination="org.chromium.flimflam"
+               send_interface="org.chromium.flimflam.Manager"
+               send_member="RecheckPortal"/>
+        <allow send_destination="org.chromium.flimflam"
+               send_interface="org.chromium.flimflam.Device"
+               send_member="GetProperties"/>
+        <allow send_destination="org.chromium.flimflam"
+               send_interface="org.chromium.flimflam.Service"
+               send_member="GetProperties"/>
+        <allow send_destination="org.chromium.flimflam"
+               send_interface="org.chromium.flimflam.Manager"
+               send_member="SetProperty"/>
+    </policy>
     <policy context="default">
         <deny send_destination="org.chromium.flimflam"/>
     </policy>