diff --git a/scripts/shairport-sync-dbus-policy.conf b/scripts/shairport-sync-dbus-policy.conf
new file mode 100644
index 00000000..497dd885
--- /dev/null
+++ b/scripts/shairport-sync-dbus-policy.conf
@@ -0,0 +1,18 @@
+<!-- initial version, based on /etc/dbus-1/system.d/avahi-dbus.conf, with thanks -->
+<!DOCTYPE busconfig PUBLIC
+          "-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN"
+          "http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
+<busconfig>
+
+  <!-- Only user shairport-sync can own the Shairport Sync service -->
+  <policy user="shairport-sync">
+    <allow own="org.gnome.ShairportSync"/>
+  </policy>
+
+  <!-- Allow anyone to invoke methods on Shairport Sync server -->
+  <policy context="default">
+    <allow send_destination="org.gnome.ShairportSync"/>
+    <allow receive_sender="org.gnome.ShairportSync"/>
+  </policy>
+
+</busconfig>
diff --git a/scripts/shairport-sync-mpris-policy.conf b/scripts/shairport-sync-mpris-policy.conf
new file mode 100644
index 00000000..1efb0072
--- /dev/null
+++ b/scripts/shairport-sync-mpris-policy.conf
@@ -0,0 +1,18 @@
+<!-- initial version, based on /etc/dbus-1/system.d/avahi-dbus.conf, with thanks -->
+<!DOCTYPE busconfig PUBLIC
+          "-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN"
+          "http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
+<busconfig>
+
+  <!-- Only user shairport-sync can own the Shairport Sync MPRIS service -->
+  <policy user="shairport-sync">
+    <allow own="org.mpris.MediaPlayer2.ShairportSync"/>
+  </policy>
+
+  <!-- Allow anyone to invoke methods on Shairport Sync MPRIS server -->
+  <policy context="default">
+     <allow send_destination="org.mpris.MediaPlayer2.ShairportSync"/>
+    <allow receive_sender="org.mpris.MediaPlayer2.ShairportSync"/>
+  </policy>
+
+</busconfig>