From a94e82c27d9880eab704381b3245b9fc10e3914a Mon Sep 17 00:00:00 2001
From: Mike Brady <mikebrady@eircom.net>
Date: Sat, 7 Apr 2018 16:46:37 +0100
Subject: [PATCH] Add policy files

---
 scripts/shairport-sync-dbus-policy.conf  | 18 ++++++++++++++++++
 scripts/shairport-sync-mpris-policy.conf | 18 ++++++++++++++++++
 2 files changed, 36 insertions(+)
 create mode 100644 scripts/shairport-sync-dbus-policy.conf
 create mode 100644 scripts/shairport-sync-mpris-policy.conf

diff --git a/scripts/shairport-sync-dbus-policy.conf b/scripts/shairport-sync-dbus-policy.conf
new file mode 100644
index 00000000..497dd885
--- /dev/null
+++ b/scripts/shairport-sync-dbus-policy.conf
@@ -0,0 +1,18 @@
+<!-- initial version, based on /etc/dbus-1/system.d/avahi-dbus.conf, with thanks -->
+<!DOCTYPE busconfig PUBLIC
+          "-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN"
+          "http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
+<busconfig>
+
+  <!-- Only user shairport-sync can own the Shairport Sync service -->
+  <policy user="shairport-sync">
+    <allow own="org.gnome.ShairportSync"/>
+  </policy>
+
+  <!-- Allow anyone to invoke methods on Shairport Sync server -->
+  <policy context="default">
+    <allow send_destination="org.gnome.ShairportSync"/>
+    <allow receive_sender="org.gnome.ShairportSync"/>
+  </policy>
+
+</busconfig>
diff --git a/scripts/shairport-sync-mpris-policy.conf b/scripts/shairport-sync-mpris-policy.conf
new file mode 100644
index 00000000..1efb0072
--- /dev/null
+++ b/scripts/shairport-sync-mpris-policy.conf
@@ -0,0 +1,18 @@
+<!-- initial version, based on /etc/dbus-1/system.d/avahi-dbus.conf, with thanks -->
+<!DOCTYPE busconfig PUBLIC
+          "-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN"
+          "http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
+<busconfig>
+
+  <!-- Only user shairport-sync can own the Shairport Sync MPRIS service -->
+  <policy user="shairport-sync">
+    <allow own="org.mpris.MediaPlayer2.ShairportSync"/>
+  </policy>
+
+  <!-- Allow anyone to invoke methods on Shairport Sync MPRIS server -->
+  <policy context="default">
+     <allow send_destination="org.mpris.MediaPlayer2.ShairportSync"/>
+    <allow receive_sender="org.mpris.MediaPlayer2.ShairportSync"/>
+  </policy>
+
+</busconfig>