Emeric Vigier | 2f62582 | 2012-08-06 11:09:52 -0400 | [diff] [blame] | 1 | <!-- This configuration file controls the per-user-login-session message bus. |
| 2 | Add a session-local.conf and edit that rather than changing this |
| 3 | file directly. --> |
| 4 | |
| 5 | <!DOCTYPE busconfig PUBLIC "-//freedesktop//DTD D-Bus Bus Configuration 1.0//EN" |
| 6 | "http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd"> |
| 7 | <busconfig> |
| 8 | <!-- Our well-known bus type, don't change this --> |
| 9 | <type>session</type> |
| 10 | |
| 11 | <!-- If we fork, keep the user's original umask to avoid affecting |
| 12 | the behavior of child processes. --> |
| 13 | <keep_umask/> |
| 14 | |
| 15 | <syslog/> |
| 16 | |
| 17 | <listen>unix:tmpdir=/tmp</listen> |
| 18 | |
| 19 | <standard_session_servicedirs /> |
| 20 | |
| 21 | <!-- intended to match system bus --> |
| 22 | <policy context="default"> |
| 23 | <!-- All users can connect to system bus --> |
| 24 | <allow user="*"/> |
| 25 | |
| 26 | <!-- Holes must be punched in service configuration files for |
| 27 | name ownership and sending method calls --> |
| 28 | <deny own="*"/> |
| 29 | <deny send_type="method_call"/> |
| 30 | |
| 31 | <!-- Signals and reply messages (method returns, errors) are allowed |
| 32 | by default --> |
| 33 | <allow send_type="signal"/> |
| 34 | <allow send_requested_reply="true" send_type="method_return"/> |
| 35 | <allow send_requested_reply="true" send_type="error"/> |
| 36 | |
| 37 | <!-- All messages may be received by default --> |
| 38 | <allow receive_type="method_call"/> |
| 39 | <allow receive_type="method_return"/> |
| 40 | <allow receive_type="error"/> |
| 41 | <allow receive_type="signal"/> |
| 42 | |
| 43 | <!-- Allow anyone to talk to the message bus --> |
| 44 | <allow send_destination="org.freedesktop.DBus"/> |
| 45 | <!-- But disallow some specific bus services --> |
| 46 | <deny send_destination="org.freedesktop.DBus" |
| 47 | send_interface="org.freedesktop.DBus" |
| 48 | send_member="UpdateActivationEnvironment"/> |
| 49 | |
| 50 | <!-- Specific to the test suite --> |
| 51 | <allow own="org.freedesktop.DBus.TestSuiteEchoService"/> |
| 52 | <allow send_destination="org.freedesktop.DBus.TestSuiteEchoService" |
| 53 | send_interface="org.freedesktop.DBus.Introspectable"/> |
| 54 | <allow send_destination="org.freedesktop.DBus.TestSuiteEchoService" |
| 55 | send_interface="org.freedesktop.TestSuite" |
| 56 | send_member="EmitFoo"/> |
| 57 | </policy> |
| 58 | |
| 59 | <policy context="default"> |
| 60 | <allow own="org.freedesktop.DBus.TestSuiteEchoService"/> |
| 61 | <allow send_destination="org.freedesktop.DBus.TestSuiteEchoService" |
| 62 | send_interface="org.freedesktop.DBus.Introspectable"/> |
| 63 | <allow send_destination="org.freedesktop.DBus.TestSuiteEchoService" |
| 64 | send_interface="org.freedesktop.TestSuite" |
| 65 | send_member="EmitFoo"/> |
| 66 | </policy> |
| 67 | |
| 68 | <!-- For the session bus, override the default relatively-low limits |
| 69 | with essentially infinite limits, since the bus is just running |
| 70 | as the user anyway, using up bus resources is not something we need |
| 71 | to worry about. In some cases, we do set the limits lower than |
| 72 | "all available memory" if exceeding the limit is almost certainly a bug, |
| 73 | having the bus enforce a limit is nicer than a huge memory leak. But the |
| 74 | intent is that these limits should never be hit. --> |
| 75 | |
| 76 | <!-- the memory limits are 1G instead of say 4G because they can't exceed 32-bit signed int max --> |
| 77 | <limit name="max_incoming_bytes">1000000000</limit> |
| 78 | <limit name="max_outgoing_bytes">1000000000</limit> |
| 79 | <limit name="max_message_size">1000000000</limit> |
| 80 | <limit name="service_start_timeout">120000</limit> |
| 81 | <limit name="auth_timeout">240000</limit> |
| 82 | <limit name="max_completed_connections">100000</limit> |
| 83 | <limit name="max_incomplete_connections">10000</limit> |
| 84 | <limit name="max_connections_per_user">100000</limit> |
| 85 | <limit name="max_pending_service_starts">10000</limit> |
| 86 | <limit name="max_names_per_connection">50000</limit> |
| 87 | <limit name="max_match_rules_per_connection">50000</limit> |
| 88 | <limit name="max_replies_per_connection">50000</limit> |
| 89 | <limit name="reply_timeout">300000</limit> |
| 90 | |
| 91 | </busconfig> |