From dad31604cb4237d94df0d85ecb61fe46aa42fa78 Mon Sep 17 00:00:00 2001
From: Aleksander Morgado <aleksander@lanedo.com>
Date: Sun, 26 Feb 2012 22:45:03 +0100
Subject: [PATCH] policy: implement Manager interface rules

---
 .../org.freedesktop.ModemManager1.conf.polkit | 24 ++++++++++++++++---
 1 file changed, 21 insertions(+), 3 deletions(-)

diff --git a/data/org.freedesktop.ModemManager1.conf.polkit b/data/org.freedesktop.ModemManager1.conf.polkit
index 153c3936..0bd3b2be 100644
--- a/data/org.freedesktop.ModemManager1.conf.polkit
+++ b/data/org.freedesktop.ModemManager1.conf.polkit
@@ -5,12 +5,30 @@
   <policy context="default">
     <deny send_destination="org.freedesktop.ModemManager1"/>
 
-    <allow send_destination="org.freedesktop.ModemManager1"
-           send_interface="org.freedesktop.DBus.Introspectable"/>
-
     <!-- Methods listed here are explicitly allowed or PolicyKit protected.
          The rest are restricted to root for security.
       -->
+
+    <!-- org.freedesktop.ModemManager1.xml -->
+
+    <!-- Allowed for everyone -->
+    <allow send_destination="org.freedesktop.ModemManager1"
+           send_interface="org.freedesktop.DBus.Introspectable"/>
+
+    <allow send_destination="org.freedesktop.ModemManager1"
+           send_interface="org.freedesktop.DBus.Properties"/>
+
+    <allow send_destination="org.freedesktop.ModemManager1"
+           send_interface="org.freedesktop.DBus.ObjectManager"/>
+
+    <!-- Protected by the Control policy rule -->
+    <allow send_destination="org.freedesktop.ModemManager1"
+           send_interface="org.freedesktop.ModemManager1"
+           send_member="ScanDevices"/>
+
+    <allow send_destination="org.freedesktop.ModemManager1"
+           send_interface="org.freedesktop.ModemManager1"
+           send_member="SetLogging"/>
   </policy>
 
   <policy user="root">