[Bug 297635] Re: Any user can manage bluetooth devices

[Baptiste Mille-Mathias]

Sorry to paste dbus conf from bluetooth:
-----8<-------------------------------------------------------
  <policy user="root">
    <allow own="org.bluez"/>
    <allow send_destination="org.bluez"/>
    <!-- allow root to send to agents -->
    <allow send_interface="org.bluez.Agent"/>
  </policy>
  <!-- allow users at the console, see consolekit or libpam-foreground -->
  <policy at_console="true">
    <allow send_destination="org.bluez"/>
  </policy>
  <!-- allow users of netdev group to communicate with hcid -->
  <policy group="netdev">
    <allow send_destination="org.bluez"/>
  </policy>
  <!-- allow users of lp group (printing subsystem) to communicate with hcid -->
  <policy group="lp">
    <allow send_destination="org.bluez"/>
  </policy>
  <policy context="default">
    <deny send_destination="org.bluez"/>
  </policy>
-----8<-------------------------------------------------------
but there is some kind of restrictions (perhaps it could be enhanced).

Should we do special casing for guess user ?

-- 
Any user can manage bluetooth devices
https://bugs.launchpad.net/bugs/297635
You received this bug notification because you are a member of
Bluetooth, which is subscribed to bluez in ubuntu.