diff --git a/etc-conf/dbus/system.d/com.redhat.RHSM1.conf b/etc-conf/dbus/system.d/com.redhat.RHSM1.conf

index e21c57263..11adf1d79 100644

--- a/etc-conf/dbus/system.d/com.redhat.RHSM1.conf

+++ b/etc-conf/dbus/system.d/com.redhat.RHSM1.conf

@@ -7,23 +7,9 @@

     <policy user="root">

         <allow own="com.redhat.RHSM1"/>

-        

-        

-            send_interface="org.freedesktop.DBus.Introspectable"/>

-        

-            send_interface="org.freedesktop.DBus.Properties"/>

-        

-            send_interface="org.freedesktop.DBus.ObjectManager"/>

-

-        

-        

-            send_interface="com.redhat.RHSM1.Config"

-            send_member="Set"/>

-    </policy>

-

-

-    <policy context="default">

-        

+        

+        Lock down the objects to root access only

+        -->

             send_interface="com.redhat.RHSM1"/>

@@ -37,11 +23,6 @@

             send_interface="com.redhat.RHSM1.Config"/>

-        

-        

-            send_interface="com.redhat.RHSM1.Config"

-            send_member="Set"/>

-

             send_interface="com.redhat.RHSM1.RegisterServer"/>

@@ -65,5 +46,54 @@

             send_interface="org.freedesktop.DBus.ObjectManager"/>

     </policy>

-</busconfig>

+

+    <policy context="default">

+

+        

+        Non-root users can execute only methods providing

+        information from files readable by non-root users.

+        -->

+

+        

+            send_interface="com.redhat.RHSM1.Entitlement"

+            send_member="GetStatus"/>

+

+        

+            send_interface="com.redhat.RHSM1.Products"

+            send_member="ListInstalledProducts"/>

+

+        

+            send_interface="com.redhat.RHSM1.Syspurpose"

+            send_member="GetSyspurpose"/>

+

+        

+            send_interface="com.redhat.RHSM1.Syspurpose"

+            send_member="GetSyspurposeStatus"/>

+

+        

+            send_interface="com.redhat.RHSM1.Config"

+            send_member="GetAll"/>

+

+        

+            send_interface="com.redhat.RHSM1.Config"

+            send_member="Get"/>

+

+        

+        The UUID returned by following method is read

+        from consumer cert. Only this file is not

+        readable by non-root users.

+        -->

+        

+            send_interface="com.redhat.RHSM1.Consumer"

+            send_member="GetUuid"/>

+

+        

+        

+            send_interface="org.freedesktop.DBus.Introspectable"/>

+        

+            send_interface="org.freedesktop.DBus.Properties"/>

+        

+            send_interface="org.freedesktop.DBus.ObjectManager"/>

+    </policy>

+</busconfig>