#DESC dbus-daemon-1 server for dbus desktop bus protocol

#

# Author:  Russell Coker <russell@coker.com.au>

dbusd_domain(system)

allow system_dbusd_t system_dbusd_var_run_t:sock_file create_file_perms;

ifdef(`pamconsole.te', `

r_dir_file(system_dbusd_t, pam_var_console_t)

')

# dac_override: /var/run/dbus is owned by messagebus on Debian

allow system_dbusd_t self:capability { dac_override setgid setuid };

can_ypbind(system_dbusd_t)

# I expect we need more than this

allow initrc_t system_dbusd_t:dbus { send_msg acquire_svc };